Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/V-8pS6pyzDNnKww45qquIi1QgBA.roa
File:                     V-8pS6pyzDNnKww45qquIi1QgBA.roa (raw, json)
Hash identifier:          xfTYBkW5b2Q3vwchtJHrZ+Ej5tGic4B3YizTWqp2wag=
Subject key identifier:   57:EF:29:4B:AA:72:CC:33:67:2B:0C:38:E6:AA:AE:22:2D:50:80:10
Certificate issuer:       /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial:       019E885FEA2FD1A38702553BD5FC8ACB48A3
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/V-8pS6pyzDNnKww45qquIi1QgBA.roa
Signing time:             Tue 02 Jun 2026 12:47:27 +0000
ROA not before:           Tue 02 Jun 2026 12:47:27 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     10753
IP address blocks:        87.229.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:88:5f:ea:2f:d1:a3:87:02:55:3b:d5:fc:8a:cb:48:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
        Validity
            Not Before: Jun  2 12:47:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=57ef294baa72cc33672b0c38e6aaae222d508010
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:69:75:a4:0f:66:a3:18:ac:5f:2d:ed:3f:c1:
                    cb:92:42:cb:60:3b:a7:ba:d5:4c:89:f9:bd:07:e9:
                    39:94:10:af:65:ad:f0:a1:fb:60:3b:3c:2e:39:3c:
                    8d:38:83:8d:cf:67:cb:09:64:ca:51:d6:db:23:90:
                    dd:22:a3:e1:47:58:44:0d:b4:9f:dd:90:78:bd:b0:
                    d6:83:09:25:bb:43:cf:b1:3b:cc:b5:8e:e1:6e:48:
                    c6:74:c2:62:da:ad:6c:f5:90:48:22:b6:75:a1:78:
                    53:ab:db:3e:e9:5e:71:fe:0d:93:09:de:86:35:ca:
                    be:c9:47:ff:05:59:7e:c7:fb:fd:29:b3:54:f6:d8:
                    d7:57:dc:ab:18:7c:56:fa:f7:0d:4e:90:2d:2b:99:
                    72:9a:7b:39:b1:27:33:96:9e:b3:3a:6c:09:c5:15:
                    63:ae:8e:0a:f6:41:1f:3a:53:29:dd:f2:ee:56:26:
                    36:9f:7c:59:f5:ce:69:28:3c:d4:55:95:cf:29:ab:
                    38:81:2a:0d:0b:72:3c:0f:99:a8:b1:ab:ee:ce:d5:
                    6a:6e:26:02:5d:19:48:a8:69:c5:69:38:fc:dd:12:
                    b1:65:92:50:45:99:4a:23:66:b2:cd:ae:06:ab:61:
                    5d:9e:34:d2:ee:de:ba:25:10:c2:96:53:b9:26:dc:
                    ab:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:EF:29:4B:AA:72:CC:33:67:2B:0C:38:E6:AA:AE:22:2D:50:80:10
            X509v3 Authority Key Identifier:
                keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/V-8pS6pyzDNnKww45qquIi1QgBA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.229.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:ef:c0:d2:75:a3:92:b1:85:c2:d6:53:80:3b:70:66:8a:e2:
         d5:a9:f8:bf:09:1d:8f:95:a0:4f:3d:a5:5c:2e:31:ad:aa:df:
         2e:09:3f:3e:7a:fa:55:14:79:26:6c:99:3f:33:fb:9f:42:89:
         77:9d:ea:cd:84:7a:7d:15:57:75:4f:f9:95:41:f8:ce:a8:cf:
         55:ed:c5:ab:bb:f2:e1:e9:fe:02:bb:9a:72:52:ab:de:0b:b1:
         de:05:e6:f9:1e:fc:64:58:b6:36:22:f5:05:76:36:10:bc:45:
         86:b1:7f:ad:6e:05:2e:42:f9:f4:50:57:63:30:cf:c0:d8:77:
         79:51:ac:39:0d:23:78:78:2b:cb:fa:1a:d4:7e:e7:c1:9d:dc:
         fa:96:a5:62:68:71:86:fa:95:18:19:4e:0d:bc:f1:2e:ac:5d:
         89:a9:83:3e:1b:57:54:7d:bc:3c:73:95:80:94:1d:ba:37:7f:
         a1:22:67:df:83:56:fc:b3:1e:bc:da:87:9b:18:f6:04:0b:ad:
         8e:c8:59:11:19:0d:04:58:ee:40:54:e5:dc:34:ab:2c:89:be:
         36:3a:0d:57:71:8e:b4:a6:21:71:53:04:08:a3:f0:e2:7a:f3:
         77:b1:99:c9:05:c5:3b:1d:6c:c7:e8:5c:d7:b2:36:c8:60:ba:
         af:98:0f:56
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ6IX+ov0aOHAlU71fyKy0ijMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2
NDI0OTcwHhcNMjYwNjAyMTI0NzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1N2VmMjk0YmFhNzJjYzMzNjcyYjBjMzhlNmFhYWUyMjJkNTA4MDEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoml1pA9moxisXy3tP8HLkkLLYDun
utVMifm9B+k5lBCvZa3woftgOzwuOTyNOIONz2fLCWTKUdbbI5DdIqPhR1hEDbSf
3ZB4vbDWgwklu0PPsTvMtY7hbkjGdMJi2q1s9ZBIIrZ1oXhTq9s+6V5x/g2TCd6G
Ncq+yUf/BVl+x/v9KbNU9tjXV9yrGHxW+vcNTpAtK5lymns5sSczlp6zOmwJxRVj
ro4K9kEfOlMp3fLuViY2n3xZ9c5pKDzUVZXPKas4gSoNC3I8D5mosavuztVqbiYC
XRlIqGnFaTj83RKxZZJQRZlKI2ayza4Gq2FdnjTS7t66JRDCllO5JtyrJwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFfvKUuqcswzZysMOOaqriItUIAQMB8GA1UdIwQY
MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt
OTU5M2E0ODhhZmNjLzEvVi04cFM2cHl6RE5uS3d3NDVxcXVJaTFRZ0JBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj
LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV+VGMA0G
CSqGSIb3DQEBCwUAA4IBAQBL78DSdaOSsYXC1lOAO3BmiuLVqfi/CR2PlaBPPaVc
LjGtqt8uCT8+evpVFHkmbJk/M/ufQol3nerNhHp9FVd1T/mVQfjOqM9V7cWru/Lh
6f4Cu5pyUqveC7HeBeb5HvxkWLY2IvUFdjYQvEWGsX+tbgUuQvn0UFdjMM/A2Hd5
Uaw5DSN4eCvL+hrUfufBndz6lqViaHGG+pUYGU4NvPEurF2JqYM+G1dUfbw8c5WA
lB26N3+hImffg1b8sx682oebGPYEC62OyFkRGQ0EWO5AVOXcNKssib42Og1XcY60
piFxUwQIo/DievN3sZnJBcU7HWzH6FzXsjbIYLqvmA9W
-----END CERTIFICATE-----
Generated at Sat Jun 13 05:44:56 2026 by rpki-client