Route Origin Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/e6CoFHLnuAzFa9YTuuhaCMU26lc.roa
File:                     e6CoFHLnuAzFa9YTuuhaCMU26lc.roa (raw, json)
Hash identifier:          asWWpfy+pF699oYpW4nAgJPS4b74gHKC/MJIvU4mjNE=
Subject key identifier:   7B:A0:A8:14:72:E7:B8:0C:C5:6B:D6:13:BA:E8:5A:08:C5:36:EA:57
Certificate issuer:       /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial:       01A0AF5C26E2E41CB86B9118FB3DCE1CC8D7
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/e6CoFHLnuAzFa9YTuuhaCMU26lc.roa
Signing time:             Thu 17 Sep 2026 12:34:07 +0000
ROA not before:           Thu 17 Sep 2026 12:34:07 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     218642
IP address blocks:        185.243.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 11:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:af:5c:26:e2:e4:1c:b8:6b:91:18:fb:3d:ce:1c:c8:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
        Validity
            Not Before: Sep 17 12:34:07 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7ba0a81472e7b80cc56bd613bae85a08c536ea57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:06:4c:67:37:bd:e1:3b:7e:d2:52:3a:02:ec:
                    a9:48:ea:2a:d5:4d:70:1a:fa:37:27:8e:e2:d2:0b:
                    f9:a2:84:fe:cf:b2:8f:5e:6f:6a:95:46:f7:1b:ca:
                    bf:57:0b:8c:66:79:ef:e6:0c:f9:57:52:6f:10:99:
                    af:37:3a:84:66:12:97:d6:a5:d9:55:3e:d2:ef:e3:
                    83:1a:0a:e7:85:8c:58:cb:3d:09:7e:61:8d:e6:10:
                    28:0d:e3:58:40:7a:e0:6c:f5:3f:0d:46:a3:75:db:
                    78:2c:05:48:5a:8b:9d:46:50:08:9d:e4:eb:f4:4b:
                    2b:98:bd:aa:9e:26:5f:0c:a5:0c:9f:01:12:d8:93:
                    c7:ed:a2:78:0a:96:2b:15:53:93:bb:db:f0:43:87:
                    8b:fe:e1:90:9f:d8:e4:7c:a6:bd:64:a7:79:82:7f:
                    52:20:53:c3:2b:69:9c:2a:ea:87:1a:6b:e7:b7:4a:
                    4f:55:bb:d6:f7:4e:9a:fc:a1:f3:2a:ee:ee:1e:ef:
                    44:ff:fd:43:04:d9:99:bb:5a:c7:4e:61:0d:6e:25:
                    22:77:ef:eb:7e:b3:8f:fa:5a:d2:85:27:89:2f:81:
                    1f:9e:a8:80:3f:15:14:6e:7a:07:f3:ca:be:92:62:
                    7a:b4:da:d8:43:f4:50:a8:bf:43:40:8a:d2:32:d8:
                    f8:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:A0:A8:14:72:E7:B8:0C:C5:6B:D6:13:BA:E8:5A:08:C5:36:EA:57
            X509v3 Authority Key Identifier:
                keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/e6CoFHLnuAzFa9YTuuhaCMU26lc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.243.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:ca:9a:bd:2e:ff:41:47:7b:67:44:90:68:f6:a3:57:fb:53:
         3b:40:54:18:87:1c:10:8b:c8:c6:d7:69:f8:2d:34:98:06:56:
         8e:0c:d1:5d:16:79:32:e6:6c:40:88:3f:3a:c3:b7:70:94:b3:
         96:86:1e:18:64:02:8d:f8:6f:66:63:8b:35:78:b2:be:47:90:
         ae:71:80:16:fd:99:6d:b3:0a:53:70:66:95:11:31:9f:09:33:
         0b:02:b7:50:3b:6b:13:8b:c2:1d:3c:ce:a2:24:17:aa:41:03:
         25:20:00:41:f8:f2:6f:ea:af:5d:6e:3a:5f:21:76:05:49:a3:
         0c:ba:f4:61:74:9c:2d:9c:32:ea:89:35:1f:f1:ce:fb:9b:d8:
         2d:5a:0e:f8:05:d9:05:35:33:dd:c2:de:21:bc:d2:c0:ef:19:
         57:de:b7:0d:33:76:bc:fd:6e:19:00:7a:ce:3d:f5:60:38:65:
         f6:e5:58:b7:af:a9:be:6d:a0:8c:63:6c:cb:a2:0c:a7:fd:0c:
         ab:9c:41:08:3f:73:f3:b3:f0:2a:04:d2:f8:9a:77:0b:84:03:
         66:43:46:5f:42:73:76:e5:f4:8e:7b:f9:3a:82:e8:d9:ac:94:
         06:8f:14:07:33:af:a9:87:28:69:ab:e9:84:12:8c:a3:f0:cf:
         12:1b:bd:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:02:07 2026 by rpki-client