Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/9Q8YeBckNp62cA4gHkR8hU6-KBc.roa
File:                     9Q8YeBckNp62cA4gHkR8hU6-KBc.roa (raw, json)
Hash identifier:          DagEYOafZL9pOnnZfhGE33ihzmnE08iqEhfF9J5IxBM=
Subject key identifier:   F5:0F:18:78:17:24:36:9E:B6:70:0E:20:1E:44:7C:85:4E:BE:28:17
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0198656408BCF853144E1C999AC5359E5179
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/9Q8YeBckNp62cA4gHkR8hU6-KBc.roa
Signing time:             Fri 01 Aug 2025 11:28:31 +0000
ROA not before:           Fri 01 Aug 2025 11:28:31 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     207252
IP address blocks:        2a06:de00:400::/38 maxlen: 48
                          2a0e:97c0:db0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 07:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:65:64:08:bc:f8:53:14:4e:1c:99:9a:c5:35:9e:51:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Aug  1 11:28:31 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f50f18781724369eb6700e201e447c854ebe2817
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:28:e5:07:88:c4:cc:2e:de:8f:71:aa:b6:23:
                    ae:49:ab:b9:7c:78:7a:b6:a5:bf:88:3c:3d:20:a7:
                    48:55:9c:65:ce:8e:82:fd:ba:e9:a0:b4:89:74:89:
                    74:41:ad:74:ae:a3:03:d4:53:ce:ce:ae:f0:a4:dd:
                    2a:b6:5c:c4:94:11:0d:eb:ab:2e:e1:7a:3a:eb:c6:
                    fe:35:67:3e:13:c5:48:52:cc:53:3b:2b:32:0f:49:
                    c8:d0:ab:09:82:ce:2b:04:c3:9c:f7:e9:21:86:f3:
                    49:b1:65:82:e2:32:cc:61:5b:51:28:08:f0:ea:41:
                    13:7a:b2:1b:33:80:08:f6:d2:31:f8:90:f9:08:62:
                    23:bb:5c:06:b6:b1:79:f5:59:c2:26:ff:88:3c:2e:
                    f9:c5:da:00:f2:ba:6e:a6:10:db:5d:ed:bb:a8:81:
                    45:69:b9:8d:bf:72:d4:04:3a:c0:f4:d7:d9:9a:ff:
                    5a:36:17:de:65:9d:a8:66:2c:40:ed:18:a4:7f:77:
                    fb:6f:fb:2e:fe:aa:9f:e5:c3:d9:67:dd:87:db:54:
                    cd:8b:c3:86:6b:c1:65:92:a0:23:4c:35:50:c5:4c:
                    62:b6:29:c5:2d:a3:00:5f:30:99:71:c9:7b:ea:8c:
                    50:6d:d3:34:88:76:df:0b:b4:c6:3b:b8:e1:3d:cb:
                    8a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:0F:18:78:17:24:36:9E:B6:70:0E:20:1E:44:7C:85:4E:BE:28:17
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/9Q8YeBckNp62cA4gHkR8hU6-KBc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:de00:400::/38
                  2a0e:97c0:db0::/48

    Signature Algorithm: sha256WithRSAEncryption
         5b:8e:68:f3:b6:6a:e2:33:50:2d:c4:15:86:e5:5a:27:37:f7:
         d0:b4:85:81:0c:01:5f:bc:a7:8d:de:0d:b9:84:f6:24:c2:3f:
         5a:e6:f7:bd:6e:96:82:fa:0c:a7:6a:5a:66:cd:dd:c0:c1:96:
         18:b0:e3:90:27:77:64:d9:84:c1:7d:e3:cd:10:79:c2:3a:7e:
         5c:1d:7b:7a:53:65:3a:c4:4b:0d:1b:3a:7f:60:e8:02:f9:05:
         ff:03:a4:6b:4f:25:fe:62:c3:ac:54:67:03:f1:bd:b6:60:68:
         fb:ea:92:b8:9e:10:71:28:5c:3d:79:af:a4:e5:b5:4c:85:37:
         c4:d2:f2:ad:fd:5c:5e:3e:e0:d0:fe:1c:02:98:ee:64:ee:11:
         bf:4a:1b:82:1c:96:94:52:27:96:a9:0f:22:5e:c1:7b:b8:ba:
         e2:54:61:8f:f0:3b:c9:ec:99:3d:a4:eb:ae:b3:27:d9:b2:45:
         d0:69:42:e8:aa:0e:51:c9:6f:54:9a:9e:a4:43:e8:4d:10:fd:
         d1:d5:a1:1b:3b:1a:e4:18:df:81:e7:1b:4a:a3:d7:f0:3f:44:
         98:a2:1c:2f:b6:4f:12:53:4a:d9:4b:0e:7b:10:2b:78:b5:92:
         11:f7:7e:b9:3e:1a:35:09:c5:fb:6a:75:21:66:c6:b8:bb:b2:
         05:f2:f7:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:11:45 2025 by rpki-client