Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/MyMnkVunBbEmx8e9-IVec_DbJVo.roa
File:                     MyMnkVunBbEmx8e9-IVec_DbJVo.roa (raw, json)
Hash identifier:          SwwjfHsnKuE6X7I0vv5BgfXQtNMUP164RuMfsD1+3z4=
Subject key identifier:   33:23:27:91:5B:A7:05:B1:26:C7:C7:BD:F8:85:5E:73:F0:DB:25:5A
Certificate issuer:       /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial:       019CA0FD1B8C330CDCA5E9D593C372BE0600
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/MyMnkVunBbEmx8e9-IVec_DbJVo.roa
Signing time:             Fri 27 Feb 2026 21:24:27 +0000
ROA not before:           Fri 27 Feb 2026 21:24:27 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     7029
IP address blocks:        2a06:1181:2::/48 maxlen: 48
                          2a09:17c0:22::/48 maxlen: 48
                          2a09:17c7:10::/48 maxlen: 48
                          2a0a:2d07:9a::/48 maxlen: 48
                          2a0c:7886:22::/48 maxlen: 48
                          2a0d:1140::/29 maxlen: 32
                          2a0e:15c0:4::/48 maxlen: 48
                          2a0e:1a80:1312::/48 maxlen: 48
                          2a0e:2240::/29 maxlen: 32
                          2a0e:c785:273::/48 maxlen: 48
                          2a0e:e980::/29 maxlen: 32
                          2a0e:f500::/29 maxlen: 32
                          2a0e:f604:10::/48 maxlen: 48
                          2a0f:1200:2::/48 maxlen: 48
                          2a0f:1380::/29 maxlen: 32
                          2a0f:1587:100::/48 maxlen: 48
                          2a0f:16c0::/29 maxlen: 32
                          2a0f:1e84:3f::/48 maxlen: 48
                          2a0f:1e86:100::/48 maxlen: 48
                          2a0f:2d40::/29 maxlen: 32
                          2a0f:3047:fc1d::/48 maxlen: 48
                          2a0f:36c0::/29 maxlen: 32
                          2a0f:3940::/29 maxlen: 32
                          2a0f:3d86:77::/48 maxlen: 48
                          2a0f:7d06:9c8a::/48 maxlen: 48
                          2a0f:9b00::/29 maxlen: 32
                          2a0f:bc00:100::/48 maxlen: 48
                          2a0f:df45:fc78::/48 maxlen: 48
                          2a0f:df47:200::/48 maxlen: 48
                          2a0f:e202:55::/48 maxlen: 48
                          2a0f:e640::/29 maxlen: 32
                          2a0f:e6c6:5532::/48 maxlen: 48
                          2a0f:e7c5:f8f9::/48 maxlen: 48
                          2a0f:e847:77::/48 maxlen: 48
                          2a10:3540::/29 maxlen: 32
                          2a10:3640::/29 maxlen: 32
                          2a10:6500::/29 maxlen: 32
                          2a10:7300::/29 maxlen: 32
                          2a10:7d00::/29 maxlen: 32
                          2a11:1200::/29 maxlen: 32
                          2a11:3f80::/29 maxlen: 29
                          2a11:6d40::/29 maxlen: 32
                          2a12:2c80::/29 maxlen: 32
                          2a12:ac44:1312::/48 maxlen: 48
                          2a12:dc00::/29 maxlen: 32
                          2a12:ecc3:2::/48 maxlen: 48
                          2a13:cc0::/29 maxlen: 32
                          2a13:18c0:22::/48 maxlen: 48
                          2a13:1940::/29 maxlen: 32
                          2a13:8c82:1::/48 maxlen: 48
                          2a13:9281:100::/48 maxlen: 48
                          2a13:9580::/29 maxlen: 32
                          2a13:c900:fd1a::/48 maxlen: 48
                          2a13:e107:99::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a0:fd:1b:8c:33:0c:dc:a5:e9:d5:93:c3:72:be:06:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
        Validity
            Not Before: Feb 27 21:24:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=332327915ba705b126c7c7bdf8855e73f0db255a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:6e:6d:01:fc:98:81:56:8f:19:45:b1:3b:ff:
                    37:c9:a0:2e:f5:ab:fa:d4:20:af:47:d7:d8:e4:f2:
                    e3:2a:f4:6d:60:b9:e7:48:5b:2f:d0:21:ba:e9:9b:
                    83:4c:f1:53:53:a9:ca:cc:f1:14:cc:81:aa:b8:e8:
                    d2:b7:8c:30:12:4f:9b:68:c0:f6:83:f5:c1:d8:2a:
                    d8:f8:7c:bc:64:18:8e:37:70:43:1d:0a:93:25:1f:
                    d3:e3:29:e0:53:b8:d8:56:ae:43:2d:1c:3f:2f:bd:
                    5c:64:7b:c5:ea:c6:58:7e:2e:cf:5a:6d:15:80:f5:
                    dc:46:37:1e:ab:0c:02:f2:15:38:38:dc:f1:83:dd:
                    c4:26:22:e8:77:a1:54:7c:a9:ea:0a:b8:fa:24:a5:
                    b5:64:ee:85:8d:f9:51:cd:c0:4a:06:ba:63:47:15:
                    cd:4e:e5:72:cc:96:28:f4:d7:0d:60:c3:59:63:81:
                    5f:14:01:26:0f:cb:0e:b5:a6:1b:d0:d8:ba:4d:09:
                    3b:d3:30:c1:94:4c:33:cb:bc:8f:45:52:67:96:3e:
                    37:b3:ca:e3:09:65:ba:e0:2d:e9:d4:15:9d:95:f2:
                    fd:c3:20:19:35:43:24:eb:ee:2b:f1:40:bb:0a:9f:
                    f7:43:74:a1:0b:5f:f8:e4:2b:d2:0c:56:e7:79:aa:
                    25:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:23:27:91:5B:A7:05:B1:26:C7:C7:BD:F8:85:5E:73:F0:DB:25:5A
            X509v3 Authority Key Identifier:
                keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/MyMnkVunBbEmx8e9-IVec_DbJVo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1181:2::/48
                  2a09:17c0:22::/48
                  2a09:17c7:10::/48
                  2a0a:2d07:9a::/48
                  2a0c:7886:22::/48
                  2a0d:1140::/29
                  2a0e:15c0:4::/48
                  2a0e:1a80:1312::/48
                  2a0e:2240::/29
                  2a0e:c785:273::/48
                  2a0e:e980::/29
                  2a0e:f500::/29
                  2a0e:f604:10::/48
                  2a0f:1200:2::/48
                  2a0f:1380::/29
                  2a0f:1587:100::/48
                  2a0f:16c0::/29
                  2a0f:1e84:3f::/48
                  2a0f:1e86:100::/48
                  2a0f:2d40::/29
                  2a0f:3047:fc1d::/48
                  2a0f:36c0::/29
                  2a0f:3940::/29
                  2a0f:3d86:77::/48
                  2a0f:7d06:9c8a::/48
                  2a0f:9b00::/29
                  2a0f:bc00:100::/48
                  2a0f:df45:fc78::/48
                  2a0f:df47:200::/48
                  2a0f:e202:55::/48
                  2a0f:e640::/29
                  2a0f:e6c6:5532::/48
                  2a0f:e7c5:f8f9::/48
                  2a0f:e847:77::/48
                  2a10:3540::/29
                  2a10:3640::/29
                  2a10:6500::/29
                  2a10:7300::/29
                  2a10:7d00::/29
                  2a11:1200::/29
                  2a11:3f80::/29
                  2a11:6d40::/29
                  2a12:2c80::/29
                  2a12:ac44:1312::/48
                  2a12:dc00::/29
                  2a12:ecc3:2::/48
                  2a13:cc0::/29
                  2a13:18c0:22::/48
                  2a13:1940::/29
                  2a13:8c82:1::/48
                  2a13:9281:100::/48
                  2a13:9580::/29
                  2a13:c900:fd1a::/48
                  2a13:e107:99::/48

    Signature Algorithm: sha256WithRSAEncryption
         0e:11:17:98:7e:25:00:27:fb:e3:b2:b6:41:7a:9f:33:1c:7c:
         d7:6d:f6:0a:8e:cd:cd:6a:d4:8a:dc:70:2f:0c:ce:40:f1:56:
         38:f8:4c:35:d6:d2:d1:e8:a1:8b:47:ca:f6:82:3b:0e:24:2b:
         a4:91:bb:81:59:41:cf:45:39:74:f4:9a:05:30:eb:7e:ca:11:
         5a:5c:94:39:cd:dd:82:04:67:a7:4e:ba:16:e9:0f:cb:e6:4d:
         b5:1a:52:ef:06:8c:d2:4a:b9:a2:2a:94:94:22:19:cc:e6:09:
         8d:55:7e:f6:10:1e:e2:04:e1:f6:c2:53:51:1d:13:00:83:de:
         f3:81:3a:f5:92:e3:ba:84:ce:b3:d0:6a:14:5b:ae:79:f4:06:
         cc:99:3a:2d:dc:47:93:fb:04:40:72:70:29:48:ca:82:ec:4a:
         06:d0:33:63:0b:10:90:f9:11:6b:90:c0:fd:b9:70:ab:ed:31:
         6d:ae:89:6f:34:37:6a:8d:9c:e9:15:8e:9e:c9:3f:c9:94:2a:
         5c:32:9a:36:1e:79:6e:30:0d:f1:b7:6c:25:bd:c1:88:df:84:
         bf:31:c9:bb:01:ba:04:02:7c:a6:68:22:ab:cd:ad:93:b8:06:
         d8:38:83:6e:23:6b:38:6e:94:a8:5d:e6:96:64:1d:37:64:82:
         89:64:0b:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----