Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/j2nuPHdcoqVfb_g5CQdLLA6Qmq8.roa
File:                     j2nuPHdcoqVfb_g5CQdLLA6Qmq8.roa (raw, json)
Hash identifier:          bJ01HQANAS/OiptPUmVVckwNOFEFT58VNH/38hKXIpc=
Subject key identifier:   8F:69:EE:3C:77:5C:A2:A5:5F:6F:F8:39:09:07:4B:2C:0E:90:9A:AF
Certificate issuer:       /CN=aff6f85aad101c456c1ac9a01a7192fc5788e92c
Certificate serial:       01985AF9FB7C30D7AE3D7807B99F43ACBEB5
Authority key identifier: AF:F6:F8:5A:AD:10:1C:45:6C:1A:C9:A0:1A:71:92:FC:57:88:E9:2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/j2nuPHdcoqVfb_g5CQdLLA6Qmq8.roa
Signing time:             Wed 30 Jul 2025 10:56:28 +0000
ROA not before:           Wed 30 Jul 2025 10:56:28 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     134450
IP address blocks:        45.83.186.0/23 maxlen: 23
                          45.83.186.0/24 maxlen: 24
                          45.83.187.0/24 maxlen: 24
                          45.86.28.0/22 maxlen: 22
                          45.86.28.0/23 maxlen: 23
                          45.86.28.0/24 maxlen: 24
                          45.86.29.0/24 maxlen: 24
                          45.86.30.0/24 maxlen: 24
                          45.86.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 13:02:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:5a:f9:fb:7c:30:d7:ae:3d:78:07:b9:9f:43:ac:be:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aff6f85aad101c456c1ac9a01a7192fc5788e92c
        Validity
            Not Before: Jul 30 10:56:28 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=8f69ee3c775ca2a55f6ff83909074b2c0e909aaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:7a:66:8f:98:7f:77:05:79:f9:74:a7:78:33:
                    8d:40:c9:39:39:46:89:0b:68:38:f5:d2:74:84:57:
                    e2:02:1e:d2:12:ab:61:ba:4d:c9:36:93:14:99:7a:
                    37:38:5b:c0:2d:30:96:4a:a3:cf:05:e5:12:36:6d:
                    3d:dd:40:7d:bb:0f:85:d1:4a:bf:9c:09:4e:2c:3b:
                    66:58:3a:9a:88:35:2a:ad:f9:2f:8a:55:e3:67:94:
                    b0:65:1e:22:71:52:71:f2:b5:9f:37:39:97:a9:6d:
                    af:e3:95:77:b2:85:94:18:6b:42:a9:57:39:e8:db:
                    47:8b:63:b3:bb:7b:76:88:25:e2:e4:c9:47:e7:7a:
                    8d:4d:e9:2e:94:43:97:9c:9c:02:8a:ad:16:38:3d:
                    cf:fb:c6:6a:1a:0e:68:f7:c8:9d:84:85:d7:00:fe:
                    6f:cf:40:8c:84:1f:9a:d5:89:0d:66:cd:0e:83:a9:
                    ce:63:ce:1a:c9:f5:12:71:02:9b:1e:af:07:87:d1:
                    5c:12:6f:9e:1b:4a:fb:b3:65:3d:f4:b1:43:7f:ed:
                    7c:8e:d1:0e:04:a3:b6:ed:9e:08:7e:a6:e0:09:c0:
                    b8:e5:bb:71:70:a8:00:e1:fa:2e:8f:0d:a2:0a:eb:
                    c5:be:45:02:78:b1:82:03:b7:04:37:86:05:57:60:
                    54:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:69:EE:3C:77:5C:A2:A5:5F:6F:F8:39:09:07:4B:2C:0E:90:9A:AF
            X509v3 Authority Key Identifier:
                keyid:AF:F6:F8:5A:AD:10:1C:45:6C:1A:C9:A0:1A:71:92:FC:57:88:E9:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/j2nuPHdcoqVfb_g5CQdLLA6Qmq8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.83.186.0/23
                  45.86.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5b:bb:e7:66:4a:b9:cc:15:c7:d4:c1:2d:16:be:18:78:00:9c:
         ae:71:4c:03:93:6b:74:a6:f4:19:f4:75:d3:4e:8e:89:5f:5e:
         7b:d0:48:2d:08:66:c8:a4:a5:ee:29:4c:0c:90:38:12:f4:9d:
         0a:cb:b6:b7:50:ae:8a:d6:d5:c2:86:f9:b8:64:49:3e:8a:50:
         62:89:cb:ee:91:7b:2b:b6:de:95:d7:ce:a6:aa:c1:3f:c8:f6:
         c2:10:bb:f3:e2:e5:11:9e:3f:66:cd:78:2c:e2:8f:03:4f:38:
         be:cb:89:b8:b6:77:cd:43:93:0f:01:de:83:b4:74:cf:bc:d5:
         27:fb:4c:dc:79:a8:bc:d6:cb:43:81:ab:67:05:6e:5b:a2:cd:
         40:d1:56:27:9a:8c:fe:62:95:f4:ed:42:dc:31:bd:a0:78:c5:
         33:9f:8c:45:d9:f0:c2:e3:22:d3:fa:61:72:91:74:7c:ee:c4:
         a8:22:13:e0:0b:72:66:86:f7:a1:01:82:54:7c:c1:a0:15:bd:
         02:b8:59:b3:ad:75:b5:cb:84:75:2b:7e:63:5b:a0:fb:18:dd:
         7f:62:3e:91:ce:8b:69:29:e2:9b:d0:d2:13:ec:9a:1b:8c:55:
         88:e5:a2:fa:94:ba:76:47:aa:4d:7b:6b:16:b7:af:0c:6f:77:
         44:7e:bc:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 18:25:13 2025 by rpki-client