Route Origin Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/34550pEfboiG9ZqfmbKBroq3aPM.roa
File:                     34550pEfboiG9ZqfmbKBroq3aPM.roa (raw, json)
Hash identifier:          XBPUq3kpgZdtYNs9XeR0mRjWEbluD3n5b9BKTXalvcc=
Subject key identifier:   DF:8E:79:D2:91:1F:6E:88:86:F5:9A:9F:99:B2:81:AE:8A:B7:68:F3
Certificate issuer:       /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial:       01A08D58E5B84C6DAFCA003F3194FC069104
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/34550pEfboiG9ZqfmbKBroq3aPM.roa
Signing time:             Thu 10 Sep 2026 22:03:28 +0000
ROA not before:           Thu 10 Sep 2026 22:03:28 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     205150
IP address blocks:        2a06:9801:1550::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:16:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8d:58:e5:b8:4c:6d:af:ca:00:3f:31:94:fc:06:91:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
        Validity
            Not Before: Sep 10 22:03:28 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=df8e79d2911f6e8886f59a9f99b281ae8ab768f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c6:0e:17:bd:f5:7c:aa:36:0d:59:6e:50:76:
                    b3:4d:b6:5d:d8:a5:23:bd:17:d9:85:bb:4d:fc:e1:
                    1f:c9:a2:8c:52:42:fd:49:cf:6c:2e:b7:f3:97:d9:
                    9c:58:c4:43:83:53:b2:12:60:e6:23:23:14:60:80:
                    84:12:d5:eb:51:a9:79:3a:19:92:3b:6c:d0:cd:24:
                    ac:43:83:d9:5b:4a:37:35:42:27:25:95:f9:e6:13:
                    18:63:7f:81:2e:9f:23:c1:ed:68:4e:86:51:93:4a:
                    36:2d:c0:f3:9b:f8:84:d1:0e:5a:ec:ee:e0:c7:11:
                    9d:93:a6:0c:1c:f7:b1:75:b3:59:ec:4d:21:df:4b:
                    ea:98:7e:ed:f5:84:79:69:2e:2a:3a:92:e6:d8:8d:
                    37:38:9b:cd:84:74:c5:9a:1c:f2:29:7e:8c:93:c1:
                    74:cd:8b:50:63:fb:e6:c4:e0:e3:c8:52:35:81:26:
                    ff:83:47:62:d7:9e:23:2a:f2:f3:ed:65:cc:c1:a1:
                    c4:04:42:b9:82:80:fd:fe:7c:95:67:ce:f7:a5:c3:
                    7f:e6:da:ca:1e:06:99:60:58:b9:e7:b5:97:d1:99:
                    cf:4b:91:48:05:8c:93:28:06:b1:92:9f:cf:6e:d0:
                    67:ee:e9:7a:ab:3f:e8:5e:10:eb:b0:28:bf:a5:ba:
                    25:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:8E:79:D2:91:1F:6E:88:86:F5:9A:9F:99:B2:81:AE:8A:B7:68:F3
            X509v3 Authority Key Identifier:
                keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/34550pEfboiG9ZqfmbKBroq3aPM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:9801:1550::/44

    Signature Algorithm: sha256WithRSAEncryption
         14:6f:01:68:2c:b4:be:bc:13:29:26:f9:d3:81:47:4f:01:34:
         39:21:c5:9b:40:6d:bb:92:76:39:be:b9:b1:b6:66:13:c7:37:
         90:69:84:f7:a4:8c:10:55:62:e6:53:08:b3:47:3e:b8:a7:f8:
         71:b5:f6:10:21:25:56:e1:a8:ea:40:90:04:d2:32:19:8e:25:
         9c:31:df:77:26:71:71:08:cc:cf:fd:f2:fd:53:1b:54:a2:db:
         13:35:f3:5f:9a:ad:ed:ff:30:d3:47:f5:31:65:ef:09:17:97:
         1a:2a:9e:8c:66:ff:79:5b:c8:19:2e:32:63:ee:5e:da:cf:54:
         65:ff:59:34:6e:3a:ae:f0:ef:6e:61:b4:33:00:68:86:ae:f6:
         2c:06:3b:b2:44:6d:8a:c8:4a:4b:ec:34:3b:c2:60:03:0f:0c:
         70:f7:e3:3d:53:a3:3b:92:67:92:96:08:b3:d0:b6:65:e0:32:
         c5:df:0b:7f:c7:27:ec:81:1b:62:13:42:62:33:cd:b3:5a:b6:
         d6:4e:84:e1:2d:e1:07:90:ad:e4:2a:98:f3:87:16:e8:80:47:
         fe:67:7b:51:6f:cc:d6:ad:46:66:06:ee:53:9b:74:ff:fe:ad:
         98:a8:d4:d7:e2:99:10:0a:af:ab:82:c0:f3:15:ee:71:78:85:
         00:02:15:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----