Route Origin Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/6WBCdNue4P4Bwmh21ugyLAYysrY.roa
File:                     6WBCdNue4P4Bwmh21ugyLAYysrY.roa (raw, json)
Hash identifier:          1x/adm6hhc5ZSirGrOu+HovN3knqn/HT/eVJrmt1yWE=
Subject key identifier:   E9:60:42:74:DB:9E:E0:FE:01:C2:68:76:D6:E8:32:2C:06:32:B2:B6
Certificate issuer:       /CN=af9e27ff884d1ff7f47abd0050ed10e01edcedfb
Certificate serial:       01A0A4598D23E5BFED7B93B6089D2F319C61
Authority key identifier: AF:9E:27:FF:88:4D:1F:F7:F4:7A:BD:00:50:ED:10:E0:1E:DC:ED:FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r54n_4hNH_f0er0AUO0Q4B7c7fs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/6WBCdNue4P4Bwmh21ugyLAYysrY.roa
Signing time:             Tue 15 Sep 2026 09:15:27 +0000
ROA not before:           Tue 15 Sep 2026 09:15:27 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     205384
IP address blocks:        188.241.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/r54n_4hNH_f0er0AUO0Q4B7c7fs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/r54n_4hNH_f0er0AUO0Q4B7c7fs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r54n_4hNH_f0er0AUO0Q4B7c7fs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 14:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:a4:59:8d:23:e5:bf:ed:7b:93:b6:08:9d:2f:31:9c:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af9e27ff884d1ff7f47abd0050ed10e01edcedfb
        Validity
            Not Before: Sep 15 09:15:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e9604274db9ee0fe01c26876d6e8322c0632b2b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f2:df:5f:76:48:04:64:67:07:4f:90:16:1a:
                    31:f4:d9:3c:b7:4a:80:5d:69:a1:66:ea:c0:2f:ad:
                    80:3e:f8:f2:77:5b:89:fe:69:13:c4:6d:ea:d0:df:
                    45:0f:53:69:46:51:2c:8b:12:b9:7b:44:4c:f4:d7:
                    c3:91:9a:00:b4:64:21:01:9a:75:ac:cc:c6:92:f0:
                    da:b9:09:01:05:3c:c5:1a:f4:c3:1a:ea:9f:f3:85:
                    c9:a4:aa:3f:3d:7b:4d:68:b9:e5:c4:77:b3:83:af:
                    c3:05:de:35:3e:01:5e:47:70:a8:7f:7e:e5:13:b6:
                    ee:f9:51:7f:51:b9:4c:1a:5b:e5:02:15:08:20:1f:
                    a5:e2:f0:0b:81:41:02:7d:0a:50:93:fd:37:b1:57:
                    79:c2:eb:32:a9:b7:57:68:35:d0:07:56:a9:3f:f7:
                    8c:4e:3c:07:a9:d3:7b:82:5b:9f:99:ac:e0:97:11:
                    23:10:e3:9f:73:86:bc:97:3d:d5:4c:d0:4d:dc:e3:
                    49:84:d8:3b:63:0f:41:4f:23:ef:7d:f7:8b:27:46:
                    7a:6c:c9:43:e8:f6:df:01:05:ef:49:c7:da:a3:89:
                    a1:84:a6:66:a4:b1:5f:e4:05:09:82:e0:6a:3b:4f:
                    ab:6a:8f:43:fa:36:a2:88:bd:ff:00:f9:33:42:95:
                    8b:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:60:42:74:DB:9E:E0:FE:01:C2:68:76:D6:E8:32:2C:06:32:B2:B6
            X509v3 Authority Key Identifier:
                keyid:AF:9E:27:FF:88:4D:1F:F7:F4:7A:BD:00:50:ED:10:E0:1E:DC:ED:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r54n_4hNH_f0er0AUO0Q4B7c7fs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/6WBCdNue4P4Bwmh21ugyLAYysrY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/r54n_4hNH_f0er0AUO0Q4B7c7fs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.241.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:d8:db:e8:52:80:d8:63:71:4c:1e:86:94:f9:11:6c:fe:bd:
         a8:e5:70:79:5d:59:2d:0e:25:d7:17:21:bd:1d:09:af:1d:ba:
         50:c4:4c:fe:a4:70:44:07:49:e5:38:b1:58:91:d1:71:92:af:
         bb:3f:26:39:da:3f:39:94:e8:7d:85:32:3a:51:5e:9c:ad:25:
         6e:96:1e:9b:89:b6:96:5f:25:0b:f4:c2:3d:f2:42:d7:24:1e:
         8b:f4:18:c0:f6:96:a9:f9:3a:25:8b:e3:f7:76:a7:9d:7d:65:
         88:9d:5b:02:ec:3a:04:90:d5:96:48:04:ed:a0:59:71:1f:1e:
         13:95:72:7a:a0:0c:3d:c4:1a:69:98:91:57:9f:01:49:dc:a3:
         59:83:5a:3c:f5:d9:8a:bc:7a:4b:32:37:0c:8f:27:30:77:f1:
         f2:e6:52:8b:e8:70:05:d7:60:7e:6d:16:4e:38:04:6d:4b:59:
         86:c8:af:81:d6:39:61:73:d7:65:ff:88:5f:d9:14:82:c3:99:
         3e:03:8d:72:5b:ab:1f:1f:b2:b3:39:69:cf:c4:26:2b:9f:40:
         ba:70:9d:8b:3c:cc:60:ac:b4:a2:c0:ac:1d:a3:ca:6f:87:73:
         91:20:96:89:3d:d9:04:1a:c0:92:df:77:9c:af:b8:29:3c:b8:
         d7:b4:e1:05
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaCkWY0j5b/te5O2CJ0vMZxhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmOWUyN2ZmODg0ZDFmZjdmNDdhYmQwMDUwZWQxMGUwMWVk
Y2VkZmIwHhcNMjYwOTE1MDkxNTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOTYwNDI3NGRiOWVlMGZlMDFjMjY4NzZkNmU4MzIyYzA2MzJiMmI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/LfX3ZIBGRnB0+QFhox9Nk8t0qA
XWmhZurAL62APvjyd1uJ/mkTxG3q0N9FD1NpRlEsixK5e0RM9NfDkZoAtGQhAZp1
rMzGkvDauQkBBTzFGvTDGuqf84XJpKo/PXtNaLnlxHezg6/DBd41PgFeR3Cof37l
E7bu+VF/UblMGlvlAhUIIB+l4vALgUECfQpQk/03sVd5wusyqbdXaDXQB1apP/eM
TjwHqdN7glufmazglxEjEOOfc4a8lz3VTNBN3ONJhNg7Yw9BTyPvffeLJ0Z6bMlD
6PbfAQXvScfao4mhhKZmpLFf5AUJguBqO0+rao9D+jaiiL3/APkzQpWLiQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOlgQnTbnuD+AcJodtboMiwGMrK2MB8GA1UdIwQY
MBaAFK+eJ/+ITR/39Hq9AFDtEOAe3O37MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjU0bl80aE5IX2YwZXIwQVVPMFE0QjdjN2ZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8yN2E0MmUtMjc2NS00ZTZmLWE3ZjMt
ZDI4NmRjYjMwY2QyLzEvNldCQ2ROdWU0UDRCd21oMjF1Z3lMQVl5c3JZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy8yN2E0MmUtMjc2NS00ZTZmLWE3ZjMtZDI4NmRjYjMwY2Qy
LzEvcjU0bl80aE5IX2YwZXIwQVVPMFE0QjdjN2ZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvPEYMA0G
CSqGSIb3DQEBCwUAA4IBAQCy2NvoUoDYY3FMHoaU+RFs/r2o5XB5XVktDiXXFyG9
HQmvHbpQxEz+pHBEB0nlOLFYkdFxkq+7PyY52j85lOh9hTI6UV6crSVulh6bibaW
XyUL9MI98kLXJB6L9BjA9pap+Toli+P3dqedfWWInVsC7DoEkNWWSATtoFlxHx4T
lXJ6oAw9xBppmJFXnwFJ3KNZg1o89dmKvHpLMjcMjycwd/Hy5lKL6HAF12B+bRZO
OARtS1mGyK+B1jlhc9dl/4hf2RSCw5k+A41yW6sfH7KzOWnPxCYrn0C6cJ2LPMxg
rLSiwKwdo8pvh3ORIJaJPdkEGsCS33ecr7gpPLjXtOEF
-----END CERTIFICATE-----
Generated at Sun Sep 20 23:52:30 2026 by rpki-client