Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/6AZPWzLrGTnHLC0bcZ2077BheMs.roa
File:                     6AZPWzLrGTnHLC0bcZ2077BheMs.roa (raw, json)
Hash identifier:          vsRH+X0nxTj0PMkH3R0PKvdI+gks9+2rmfTTzT6C+Y0=
Subject key identifier:   E8:06:4F:5B:32:EB:19:39:C7:2C:2D:1B:71:9D:B4:EF:B0:61:78:CB
Certificate issuer:       /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial:       019D77EE02C1E01AD41D79ABF7C627AFC425
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/6AZPWzLrGTnHLC0bcZ2077BheMs.roa
Signing time:             Fri 10 Apr 2026 15:06:20 +0000
ROA not before:           Fri 10 Apr 2026 15:06:20 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     13335
IP address blocks:        94.103.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:77:ee:02:c1:e0:1a:d4:1d:79:ab:f7:c6:27:af:c4:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
        Validity
            Not Before: Apr 10 15:06:20 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e8064f5b32eb1939c72c2d1b719db4efb06178cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:07:2b:40:98:02:ab:73:e2:32:87:b4:82:09:
                    26:4b:10:e3:d0:9f:17:3e:af:c4:4a:a4:d1:0b:38:
                    71:e1:9c:33:89:5a:9b:8b:cf:a7:21:6b:c1:4a:51:
                    28:e7:dd:71:a2:1d:72:3f:53:ae:9f:3d:70:c6:d4:
                    96:6c:79:35:70:c4:5b:6b:9a:e7:8f:de:0d:9d:b0:
                    a4:be:4b:e1:67:ea:46:45:19:63:46:6b:f5:b2:b5:
                    61:ec:a9:0f:4b:87:69:4c:68:51:9b:fb:d7:73:c1:
                    41:dd:09:e8:35:71:1d:13:a2:b1:31:e2:b6:8a:57:
                    9d:a0:9e:8a:53:28:9a:9d:5a:5a:21:08:62:d5:da:
                    cf:33:0d:72:e7:b0:0f:05:ec:bc:0c:c4:56:70:ea:
                    a6:9d:4f:15:0d:06:f5:8e:ce:6c:e9:2f:04:13:a4:
                    02:0a:85:bc:50:45:fa:f5:89:28:ff:6a:a0:e4:38:
                    11:de:3b:09:bd:0b:18:40:6b:73:b8:b9:8f:4c:23:
                    0e:0a:7d:3e:e8:38:42:37:4b:db:61:46:7e:2d:b4:
                    f2:3a:e6:fe:62:67:f6:44:a4:be:40:f5:1b:7a:6d:
                    c0:91:97:c0:ba:60:10:a8:56:91:81:55:fb:4c:c6:
                    b6:27:ea:10:16:93:af:c3:ff:13:ca:3a:6a:cc:c9:
                    f8:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:06:4F:5B:32:EB:19:39:C7:2C:2D:1B:71:9D:B4:EF:B0:61:78:CB
            X509v3 Authority Key Identifier:
                keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/6AZPWzLrGTnHLC0bcZ2077BheMs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.103.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:45:b6:bb:f0:be:d6:35:9c:83:3d:6d:9e:23:f0:3d:7d:a3:
         4f:6a:7a:34:af:f3:7d:75:f5:59:55:b9:5d:95:7b:aa:ef:4b:
         76:d9:0a:86:e3:82:ad:50:65:03:33:da:1e:78:64:7e:74:44:
         22:27:61:fd:4e:39:31:83:e6:46:98:1c:b5:af:7a:b1:32:8a:
         88:6c:da:10:d9:ef:67:53:49:d8:29:58:79:78:43:46:8f:ad:
         68:e4:72:f5:79:56:39:cf:7b:70:ea:5f:44:a1:f6:0b:46:a3:
         75:1e:83:5f:86:a8:bd:a7:ae:aa:f1:9d:59:af:c1:8e:94:36:
         62:10:fb:09:4c:50:83:02:af:4a:77:25:ad:46:f0:14:ab:a9:
         67:d3:eb:5e:b4:fd:5c:19:c3:c7:f2:b2:ff:9b:3a:a0:27:b3:
         79:e0:48:33:70:fe:3c:a9:39:b0:78:27:7e:77:fa:0c:61:c0:
         25:41:1a:c9:e9:24:be:e6:a1:c7:d3:a6:45:a9:ff:88:12:59:
         3a:d9:1a:f8:bb:c4:61:51:ef:56:8b:5c:ce:23:59:dd:6d:70:
         52:72:79:1c:ee:8b:99:e7:b8:f1:c8:65:c9:4e:63:d5:f8:1b:
         96:c1:13:61:4f:45:3a:f8:7e:f2:55:85:e8:ed:e7:51:ff:a1:
         a2:5c:1f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:28:42 2026 by rpki-client