Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/5O6iyLYqjxgK3EFjvB7TPec4vNc.roa
File:                     5O6iyLYqjxgK3EFjvB7TPec4vNc.roa (raw, json)
Hash identifier:          +zN5xcfrGyrSvPX2aPdQntXT/Zvfyz7ULplVdMhrq7w=
Subject key identifier:   E4:EE:A2:C8:B6:2A:8F:18:0A:DC:41:63:BC:1E:D3:3D:E7:38:BC:D7
Certificate issuer:       /CN=d588212bf5dace1080dc45e2c55b92ff85c6c192
Certificate serial:       01985C83A875A3749DEC1F286FF387B9D3FA
Authority key identifier: D5:88:21:2B:F5:DA:CE:10:80:DC:45:E2:C5:5B:92:FF:85:C6:C1:92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1YghK_XazhCA3EXixVuS_4XGwZI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/5O6iyLYqjxgK3EFjvB7TPec4vNc.roa
Signing time:             Wed 30 Jul 2025 18:06:28 +0000
ROA not before:           Wed 30 Jul 2025 18:06:28 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     207266
IP address blocks:        2a01:8840:4::/48 maxlen: 48
                          2a01:8840:5::/48 maxlen: 48
                          2a01:8840:15::/48 maxlen: 48
                          2a01:8840:19::/48 maxlen: 48
                          2a01:8840:1d::/48 maxlen: 48
                          2a01:8840:21::/48 maxlen: 48
                          2a01:8840:25::/48 maxlen: 48
                          2a01:8840:29::/48 maxlen: 48
                          2a01:8840:2d::/48 maxlen: 48
                          2a01:8840:31::/48 maxlen: 48
                          2a01:8840:35::/48 maxlen: 48
                          2a01:8840:39::/48 maxlen: 48
                          2a01:8840:3d::/48 maxlen: 48
                          2a01:8840:41::/48 maxlen: 48
                          2a01:8840:45::/48 maxlen: 48
                          2a01:8840:4d::/48 maxlen: 48
                          2a01:8840:51::/48 maxlen: 48
                          2a01:8840:55::/48 maxlen: 48
                          2a01:8840:59::/48 maxlen: 48
                          2a01:8840:5d::/48 maxlen: 48
                          2a01:8840:61::/48 maxlen: 48
                          2a01:8840:65::/48 maxlen: 48
                          2a01:8840:69::/48 maxlen: 48
                          2a01:8840:6d::/48 maxlen: 48
                          2a01:8840:71::/48 maxlen: 48
                          2a01:8840:75::/48 maxlen: 48
                          2a01:8840:79::/48 maxlen: 48
                          2a01:8840:7d::/48 maxlen: 48
                          2a01:8840:81::/48 maxlen: 48
                          2a01:8840:85::/48 maxlen: 48
                          2a01:8840:89::/48 maxlen: 48
                          2a01:8840:8d::/48 maxlen: 48
                          2a01:8840:91::/48 maxlen: 48
                          2a01:8840:95::/48 maxlen: 48
                          2a01:8840:99::/48 maxlen: 48
                          2a01:8840:9d::/48 maxlen: 48
                          2a01:8840:a1::/48 maxlen: 48
                          2a01:8840:a5::/48 maxlen: 48
                          2a01:8840:a9::/48 maxlen: 48
                          2a01:8840:ad::/48 maxlen: 48
                          2a01:8840:b1::/48 maxlen: 48
                          2a01:8840:b5::/48 maxlen: 48
                          2a01:8840:b9::/48 maxlen: 48
                          2a01:8840:bd::/48 maxlen: 48
                          2a01:8840:c1::/48 maxlen: 48
                          2a01:8840:c5::/48 maxlen: 48
                          2a01:8840:c9::/48 maxlen: 48
                          2a01:8840:cd::/48 maxlen: 48
                          2a01:8840:d1::/48 maxlen: 48
                          2a01:8840:d5::/48 maxlen: 48
                          2a01:8840:d9::/48 maxlen: 48
                          2a01:8840:dd::/48 maxlen: 48
                          2a01:8840:e1::/48 maxlen: 48
                          2a01:8840:e5::/48 maxlen: 48
                          2a01:8840:e9::/48 maxlen: 48
                          2a01:8840:ed::/48 maxlen: 48
                          2a01:8840:f1::/48 maxlen: 48
                          2a01:8840:f5::/48 maxlen: 48
                          2a01:8840:f7::/48 maxlen: 48
                          2a01:8840:f9::/48 maxlen: 48
                          2a01:8840:fb::/48 maxlen: 48
                          2a01:8840:107::/48 maxlen: 48
                          2a01:8840:109::/48 maxlen: 48
                          2a01:8840:10d::/48 maxlen: 48
                          2a01:8840:10f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1YghK_XazhCA3EXixVuS_4XGwZI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 09:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:5c:83:a8:75:a3:74:9d:ec:1f:28:6f:f3:87:b9:d3:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d588212bf5dace1080dc45e2c55b92ff85c6c192
        Validity
            Not Before: Jul 30 18:06:28 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e4eea2c8b62a8f180adc4163bc1ed33de738bcd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:1a:66:56:18:e5:a6:bc:13:b9:6c:8f:25:db:
                    f1:58:19:a1:44:a4:9e:c9:3f:23:2c:48:c7:bc:b8:
                    19:f5:2f:66:42:06:1d:55:e8:27:48:d0:21:c5:b6:
                    21:4c:bc:2c:58:1d:b6:8a:00:a2:62:2c:a5:ee:4b:
                    f0:4d:2f:03:ec:20:71:60:69:4b:dd:ec:44:d0:a8:
                    0b:b6:e7:41:8e:b1:39:4c:3b:bd:b8:12:21:e1:be:
                    a6:45:eb:36:c5:65:e0:e8:82:43:5a:1a:50:80:1a:
                    05:b7:67:0e:aa:66:c7:2a:ff:7b:fa:ad:38:1f:a2:
                    91:3b:d8:af:33:cc:8c:64:28:75:09:85:bf:17:97:
                    0f:7b:eb:9a:f9:6e:08:2e:dc:76:8c:43:08:11:54:
                    97:c1:42:01:3f:84:f4:d6:84:21:72:ff:28:ff:c7:
                    ee:ce:47:9a:43:a1:a9:ad:90:56:59:7a:34:78:b2:
                    a8:94:a1:02:c4:b6:71:85:4d:bc:8e:b3:76:2f:e2:
                    c6:7d:3c:65:7d:ab:fa:69:74:9f:1c:95:b5:bb:27:
                    c7:b2:6e:3d:28:c5:f4:6c:7f:3d:32:f6:f2:bf:bd:
                    d1:dd:3c:18:04:3a:0d:ab:64:6d:d2:90:87:74:32:
                    da:ce:38:a5:b7:20:5e:d0:4c:57:fe:f6:bb:ec:5c:
                    27:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:EE:A2:C8:B6:2A:8F:18:0A:DC:41:63:BC:1E:D3:3D:E7:38:BC:D7
            X509v3 Authority Key Identifier:
                keyid:D5:88:21:2B:F5:DA:CE:10:80:DC:45:E2:C5:5B:92:FF:85:C6:C1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1YghK_XazhCA3EXixVuS_4XGwZI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/5O6iyLYqjxgK3EFjvB7TPec4vNc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a01:8840:4::/47
                  2a01:8840:15::/48
                  2a01:8840:19::/48
                  2a01:8840:1d::/48
                  2a01:8840:21::/48
                  2a01:8840:25::/48
                  2a01:8840:29::/48
                  2a01:8840:2d::/48
                  2a01:8840:31::/48
                  2a01:8840:35::/48
                  2a01:8840:39::/48
                  2a01:8840:3d::/48
                  2a01:8840:41::/48
                  2a01:8840:45::/48
                  2a01:8840:4d::/48
                  2a01:8840:51::/48
                  2a01:8840:55::/48
                  2a01:8840:59::/48
                  2a01:8840:5d::/48
                  2a01:8840:61::/48
                  2a01:8840:65::/48
                  2a01:8840:69::/48
                  2a01:8840:6d::/48
                  2a01:8840:71::/48
                  2a01:8840:75::/48
                  2a01:8840:79::/48
                  2a01:8840:7d::/48
                  2a01:8840:81::/48
                  2a01:8840:85::/48
                  2a01:8840:89::/48
                  2a01:8840:8d::/48
                  2a01:8840:91::/48
                  2a01:8840:95::/48
                  2a01:8840:99::/48
                  2a01:8840:9d::/48
                  2a01:8840:a1::/48
                  2a01:8840:a5::/48
                  2a01:8840:a9::/48
                  2a01:8840:ad::/48
                  2a01:8840:b1::/48
                  2a01:8840:b5::/48
                  2a01:8840:b9::/48
                  2a01:8840:bd::/48
                  2a01:8840:c1::/48
                  2a01:8840:c5::/48
                  2a01:8840:c9::/48
                  2a01:8840:cd::/48
                  2a01:8840:d1::/48
                  2a01:8840:d5::/48
                  2a01:8840:d9::/48
                  2a01:8840:dd::/48
                  2a01:8840:e1::/48
                  2a01:8840:e5::/48
                  2a01:8840:e9::/48
                  2a01:8840:ed::/48
                  2a01:8840:f1::/48
                  2a01:8840:f5::/48
                  2a01:8840:f7::/48
                  2a01:8840:f9::/48
                  2a01:8840:fb::/48
                  2a01:8840:107::/48
                  2a01:8840:109::/48
                  2a01:8840:10d::/48
                  2a01:8840:10f::/48

    Signature Algorithm: sha256WithRSAEncryption
         7e:10:5c:d5:e3:ad:68:ea:ed:31:c6:43:a4:3d:d3:99:18:43:
         b3:ad:4a:92:78:7b:a0:65:ac:c4:e6:ff:6e:66:26:fc:e9:e1:
         21:f9:80:97:98:e6:09:58:1f:a1:e5:a5:51:25:e5:bb:26:b8:
         f2:1b:77:d4:2e:cc:2d:98:93:b5:a9:17:b1:93:6b:79:a6:d4:
         10:c7:b6:1b:29:84:fe:51:83:6a:94:a6:ae:3f:81:ed:6d:23:
         65:d0:13:43:0c:f9:0b:60:1f:48:09:bc:17:81:56:34:46:3a:
         1d:a7:c5:59:3b:c8:6c:b6:32:52:6b:7b:6b:14:97:da:81:d4:
         56:cc:18:ec:ac:f4:86:62:cc:b5:89:3c:d6:97:8a:f8:c0:b1:
         2c:cb:58:48:5a:e7:04:10:27:a5:64:b6:81:76:e8:b8:03:6a:
         e5:72:16:a2:29:d0:ae:7e:4b:67:a4:1a:5a:f4:4a:58:24:77:
         89:7e:5e:d8:04:77:bf:cb:bc:c7:e4:8d:d8:87:c7:7a:72:5f:
         e0:7e:5d:7c:37:0f:27:75:91:3d:0c:fc:8e:49:0a:46:03:d8:
         cc:90:c5:17:4c:74:92:af:a9:b4:0b:da:95:e1:da:91:c2:94:
         3b:c4:11:a3:5d:04:b8:ac:40:7c:4a:58:dc:30:1a:0c:d0:47:
         66:e7:93:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 13:01:54 2025 by rpki-client