Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/O4qisZjMz_TlzxauHwEfDI5TsP0.roa
File:                     O4qisZjMz_TlzxauHwEfDI5TsP0.roa (raw, json)
Hash identifier:          muXbteFHgChoq3WJN/PDx8uR8jDZ4/OEJL5H/qtfY98=
Subject key identifier:   3B:8A:A2:B1:98:CC:CF:F4:E5:CF:16:AE:1F:01:1F:0C:8E:53:B0:FD
Certificate issuer:       /CN=bbffd123cb93e24e025f952842108402958d4a4c
Certificate serial:       019C7CAA142EA5A41E136DA862560E0BE68D
Authority key identifier: BB:FF:D1:23:CB:93:E2:4E:02:5F:95:28:42:10:84:02:95:8D:4A:4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u__RI8uT4k4CX5UoQhCEApWNSkw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/O4qisZjMz_TlzxauHwEfDI5TsP0.roa
Signing time:             Fri 20 Feb 2026 20:07:26 +0000
ROA not before:           Fri 20 Feb 2026 20:07:26 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     54825
IP address blocks:        45.11.244.0/23 maxlen: 23
                          86.109.0.0/24 maxlen: 24
                          86.109.1.0/24 maxlen: 24
                          86.109.2.0/23 maxlen: 23
                          86.109.2.0/24 maxlen: 24
                          86.109.3.0/24 maxlen: 24
                          86.109.4.0/23 maxlen: 23
                          86.109.4.0/24 maxlen: 24
                          86.109.5.0/24 maxlen: 24
                          86.109.6.0/24 maxlen: 24
                          86.109.7.0/24 maxlen: 24
                          86.109.8.0/24 maxlen: 24
                          86.109.9.0/24 maxlen: 24
                          86.109.10.0/23 maxlen: 23
                          86.109.12.0/24 maxlen: 24
                          86.109.13.0/24 maxlen: 24
                          86.109.14.0/23 maxlen: 23
                          93.187.216.0/23 maxlen: 23
                          93.187.218.0/23 maxlen: 23
                          136.144.48.0/23 maxlen: 23
                          136.144.50.0/23 maxlen: 23
                          136.144.52.0/23 maxlen: 23
                          136.144.54.0/23 maxlen: 23
                          136.144.56.0/23 maxlen: 23
                          136.144.58.0/23 maxlen: 23
                          136.144.60.0/23 maxlen: 23
                          136.144.62.0/23 maxlen: 23
                          139.178.64.0/22 maxlen: 22
                          139.178.68.0/22 maxlen: 22
                          139.178.72.0/22 maxlen: 22
                          139.178.72.0/23 maxlen: 23
                          139.178.74.0/23 maxlen: 23
                          139.178.76.0/22 maxlen: 22
                          139.178.76.0/23 maxlen: 23
                          139.178.78.0/23 maxlen: 23
                          139.178.80.0/21 maxlen: 21
                          139.178.88.0/22 maxlen: 22
                          139.178.92.0/23 maxlen: 23
                          139.178.94.0/23 maxlen: 23
                          145.40.64.0/23 maxlen: 23
                          145.40.66.0/24 maxlen: 24
                          145.40.67.0/24 maxlen: 24
                          145.40.68.0/24 maxlen: 24
                          145.40.69.0/24 maxlen: 24
                          145.40.70.0/23 maxlen: 23
                          145.40.72.0/24 maxlen: 24
                          145.40.73.0/24 maxlen: 24
                          145.40.74.0/23 maxlen: 23
                          145.40.75.0/24 maxlen: 24
                          145.40.76.0/23 maxlen: 23
                          145.40.78.0/24 maxlen: 24
                          145.40.79.0/24 maxlen: 24
                          145.40.79.0/26 maxlen: 26
                          145.40.80.0/23 maxlen: 23
                          145.40.82.0/23 maxlen: 23
                          145.40.84.0/23 maxlen: 23
                          145.40.86.0/23 maxlen: 23
                          145.40.88.0/24 maxlen: 24
                          145.40.89.0/24 maxlen: 24
                          145.40.90.0/24 maxlen: 24
                          145.40.91.0/24 maxlen: 24
                          145.40.92.0/22 maxlen: 22
                          145.40.96.0/23 maxlen: 23
                          145.40.98.0/23 maxlen: 23
                          145.40.100.0/24 maxlen: 24
                          145.40.101.0/24 maxlen: 24
                          145.40.102.0/23 maxlen: 23
                          145.40.102.0/24 maxlen: 24
                          145.40.103.0/24 maxlen: 24
                          145.40.104.0/22 maxlen: 22
                          145.40.108.0/22 maxlen: 22
                          145.40.112.0/22 maxlen: 22
                          145.40.116.0/22 maxlen: 22
                          145.40.120.0/22 maxlen: 22
                          145.40.124.0/22 maxlen: 22
                          147.28.128.0/23 maxlen: 23
                          147.28.131.0/24 maxlen: 24
                          147.28.132.0/22 maxlen: 22
                          147.28.136.0/23 maxlen: 23
                          147.28.138.0/23 maxlen: 23
                          147.28.140.0/22 maxlen: 22
                          147.28.140.0/24 maxlen: 24
                          147.28.141.0/24 maxlen: 24
                          147.28.142.0/23 maxlen: 23
                          147.28.144.0/23 maxlen: 23
                          147.28.146.0/23 maxlen: 23
                          147.28.148.0/23 maxlen: 23
                          147.28.150.0/23 maxlen: 23
                          147.28.152.0/24 maxlen: 24
                          147.28.153.0/24 maxlen: 24
                          147.28.154.0/23 maxlen: 23
                          147.28.156.0/23 maxlen: 23
                          147.28.158.0/23 maxlen: 23
                          147.28.160.0/23 maxlen: 23
                          147.28.162.0/23 maxlen: 23
                          147.28.164.0/23 maxlen: 23
                          147.28.166.0/23 maxlen: 23
                          147.28.168.0/23 maxlen: 23
                          147.28.170.0/23 maxlen: 23
                          147.28.172.0/23 maxlen: 23
                          147.28.174.0/23 maxlen: 23
                          147.28.176.0/23 maxlen: 23
                          147.28.178.0/23 maxlen: 23
                          147.28.180.0/23 maxlen: 23
                          147.28.182.0/23 maxlen: 23
                          147.28.184.0/23 maxlen: 23
                          147.28.186.0/23 maxlen: 23
                          147.28.188.0/24 maxlen: 24
                          147.28.189.0/24 maxlen: 24
                          147.28.190.0/23 maxlen: 23
                          147.28.192.0/22 maxlen: 22
                          147.28.192.0/24 maxlen: 24
                          147.28.193.0/24 maxlen: 24
                          147.28.194.0/24 maxlen: 24
                          147.28.195.0/24 maxlen: 24
                          147.28.196.0/23 maxlen: 23
                          147.28.198.0/24 maxlen: 24
                          147.28.199.0/24 maxlen: 24
                          147.28.200.0/24 maxlen: 24
                          147.28.201.0/24 maxlen: 24
                          147.28.202.0/24 maxlen: 24
                          147.28.203.0/24 maxlen: 24
                          147.28.204.0/23 maxlen: 23
                          147.28.206.0/23 maxlen: 23
                          147.28.208.0/23 maxlen: 23
                          147.28.210.0/23 maxlen: 23
                          147.28.212.0/24 maxlen: 24
                          147.28.214.0/23 maxlen: 23
                          147.28.216.0/23 maxlen: 23
                          147.28.218.0/24 maxlen: 24
                          147.28.219.0/24 maxlen: 24
                          147.28.220.0/23 maxlen: 23
                          147.28.222.0/23 maxlen: 23
                          147.28.224.0/24 maxlen: 24
                          147.28.225.0/24 maxlen: 24
                          147.28.226.0/23 maxlen: 23
                          147.28.228.0/24 maxlen: 24
                          147.28.229.0/24 maxlen: 24
                          147.28.230.0/24 maxlen: 24
                          147.28.231.0/24 maxlen: 24
                          147.28.232.0/24 maxlen: 24
                          147.28.233.0/24 maxlen: 24
                          147.28.234.0/24 maxlen: 24
                          147.28.235.0/24 maxlen: 24
                          147.28.240.0/24 maxlen: 24
                          147.28.241.0/24 maxlen: 24
                          147.28.242.0/24 maxlen: 24
                          147.28.244.0/24 maxlen: 24
                          147.28.246.0/23 maxlen: 23
                          147.75.32.0/23 maxlen: 23
                          147.75.34.0/24 maxlen: 24
                          147.75.35.0/24 maxlen: 24
                          147.75.36.0/22 maxlen: 22
                          147.75.38.0/23 maxlen: 23
                          147.75.40.0/23 maxlen: 23
                          147.75.42.0/24 maxlen: 24
                          147.75.43.0/24 maxlen: 24
                          147.75.44.0/24 maxlen: 24
                          147.75.45.0/24 maxlen: 24
                          147.75.46.0/24 maxlen: 24
                          147.75.47.0/24 maxlen: 24
                          147.75.48.0/24 maxlen: 24
                          147.75.49.0/24 maxlen: 24
                          147.75.50.0/23 maxlen: 23
                          147.75.50.0/24 maxlen: 24
                          147.75.51.0/24 maxlen: 24
                          147.75.52.0/24 maxlen: 24
                          147.75.53.0/24 maxlen: 24
                          147.75.54.0/23 maxlen: 23
                          147.75.54.0/24 maxlen: 24
                          147.75.55.0/24 maxlen: 24
                          147.75.56.0/23 maxlen: 23
                          147.75.56.0/24 maxlen: 24
                          147.75.57.0/24 maxlen: 24
                          147.75.58.0/24 maxlen: 24
                          147.75.59.0/24 maxlen: 24
                          147.75.60.0/24 maxlen: 24
                          147.75.61.0/24 maxlen: 24
                          147.75.62.0/23 maxlen: 23
                          147.75.62.0/24 maxlen: 24
                          147.75.63.0/24 maxlen: 24
                          147.75.64.0/22 maxlen: 22
                          147.75.68.0/22 maxlen: 22
                          147.75.72.0/21 maxlen: 21
                          147.75.72.0/24 maxlen: 24
                          147.75.73.0/24 maxlen: 24
                          147.75.74.0/24 maxlen: 24
                          147.75.75.0/24 maxlen: 24
                          147.75.76.0/24 maxlen: 24
                          147.75.77.0/24 maxlen: 24
                          147.75.78.0/24 maxlen: 24
                          147.75.79.0/24 maxlen: 24
                          147.75.80.0/22 maxlen: 22
                          147.75.84.0/23 maxlen: 23
                          147.75.86.0/23 maxlen: 23
                          147.75.88.0/22 maxlen: 22
                          147.75.92.0/22 maxlen: 22
                          147.75.96.0/22 maxlen: 22
                          147.75.96.0/23 maxlen: 23
                          147.75.96.0/24 maxlen: 24
                          147.75.97.0/24 maxlen: 24
                          147.75.98.0/24 maxlen: 24
                          147.75.99.0/24 maxlen: 24
                          147.75.100.0/22 maxlen: 22
                          147.75.104.0/22 maxlen: 22
                          147.75.108.0/23 maxlen: 23
                          147.75.110.0/23 maxlen: 23
                          147.75.192.0/21 maxlen: 21
                          147.75.192.0/24 maxlen: 24
                          147.75.193.0/24 maxlen: 24
                          147.75.194.0/23 maxlen: 23
                          147.75.196.0/22 maxlen: 22
                          147.75.196.0/24 maxlen: 24
                          147.75.197.0/24 maxlen: 24
                          147.75.198.0/24 maxlen: 24
                          147.75.199.0/24 maxlen: 24
                          147.75.200.0/22 maxlen: 22
                          147.75.204.0/23 maxlen: 23
                          147.75.206.0/24 maxlen: 24
                          147.75.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u__RI8uT4k4CX5UoQhCEApWNSkw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:7c:aa:14:2e:a5:a4:1e:13:6d:a8:62:56:0e:0b:e6:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbffd123cb93e24e025f952842108402958d4a4c
        Validity
            Not Before: Feb 20 20:07:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=3b8aa2b198cccff4e5cf16ae1f011f0c8e53b0fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d2:f4:3d:da:9b:59:b2:55:56:5a:69:b7:ec:
                    51:3f:72:07:59:3a:56:ea:8c:a3:f4:a5:df:64:47:
                    6c:74:bf:f4:a6:16:3b:7e:9b:bc:fd:7a:36:52:11:
                    31:6e:3b:94:26:6b:38:a5:80:f2:2e:42:d8:3f:2d:
                    e7:2a:1f:c9:fc:6d:0f:22:c1:b1:e6:11:87:46:de:
                    54:1d:fe:7e:66:20:21:b4:57:88:43:c8:47:46:fe:
                    9f:30:9e:96:f9:93:37:ec:bd:a8:78:44:aa:83:6f:
                    24:dc:5c:0e:b4:6e:96:53:f3:e6:36:67:18:80:22:
                    d4:62:4b:3b:86:31:f5:0f:d7:a0:ab:89:59:37:f7:
                    34:a9:25:97:90:b0:86:28:46:19:19:f0:b9:7b:2c:
                    8d:74:dc:c0:b9:b2:53:5f:7e:9d:88:e9:0a:e1:2e:
                    bc:3c:6e:33:3a:1b:1c:6e:a1:0a:58:2c:91:05:69:
                    ba:9e:10:c0:d3:1b:31:01:5c:a4:de:f1:7b:40:4d:
                    56:78:bd:bc:72:44:fe:4c:58:4c:ea:f2:66:ab:96:
                    99:7d:ce:20:ef:a2:02:df:72:1a:63:35:e8:d3:23:
                    ff:7d:0c:2b:ed:c0:29:31:5e:2d:21:19:8c:b8:86:
                    a2:8a:c4:d7:69:ea:43:0a:e6:50:4a:a1:96:89:96:
                    8e:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:8A:A2:B1:98:CC:CF:F4:E5:CF:16:AE:1F:01:1F:0C:8E:53:B0:FD
            X509v3 Authority Key Identifier:
                keyid:BB:FF:D1:23:CB:93:E2:4E:02:5F:95:28:42:10:84:02:95:8D:4A:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u__RI8uT4k4CX5UoQhCEApWNSkw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/O4qisZjMz_TlzxauHwEfDI5TsP0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.11.244.0/23
                  86.109.0.0/20
                  93.187.216.0/22
                  136.144.48.0/20
                  139.178.64.0/19
                  145.40.64.0/18
                  147.28.128.0/23
                  147.28.131.0-147.28.212.255
                  147.28.214.0-147.28.235.255
                  147.28.240.0-147.28.242.255
                  147.28.244.0/24
                  147.28.246.0/23
                  147.75.32.0-147.75.111.255
                  147.75.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         31:34:1b:27:e5:d1:c7:97:f6:b2:94:ea:bb:f1:11:7d:a8:16:
         56:2d:b7:a3:ff:b2:0c:ae:29:ad:71:8b:3b:4c:30:d7:40:b1:
         41:c6:18:87:5a:a3:b0:c6:bf:95:11:75:a4:05:ba:e1:dd:e4:
         56:a6:51:f4:a7:92:db:87:94:fd:e5:fc:59:e7:87:6a:c1:65:
         69:a6:a6:34:7a:ac:4e:5a:f4:ff:c2:c5:ce:23:da:43:11:8f:
         11:bf:06:01:31:37:e4:38:e1:32:90:7e:5e:0b:f1:79:ef:96:
         95:bb:22:4f:98:df:4e:97:52:85:10:41:c6:4a:22:a8:37:5a:
         d4:db:4c:f5:b9:34:22:b6:5d:58:d6:e4:94:a6:f6:0c:6b:76:
         02:79:17:8c:ca:dd:a8:bc:88:52:dc:6e:a2:a8:62:e2:ff:c2:
         31:e2:cd:ae:7e:c6:58:02:ab:6d:38:45:28:ff:cc:e8:d1:ed:
         70:75:bf:67:88:30:b7:56:d4:3f:72:47:46:21:bb:52:39:f4:
         0a:dd:b4:90:20:62:b9:29:3d:97:35:1f:45:41:c3:ad:5d:7c:
         12:c6:df:ba:c3:18:11:db:f4:f5:59:b6:47:61:3c:9f:44:be:
         77:51:f2:0a:ca:40:6a:64:12:35:2a:3a:d8:64:ee:dd:be:5a:
         af:3c:b7:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:20:07 2026 by rpki-client