Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/Wi9gkeR1iKqKbqZI-0MAYDsf4BQ.roa
File:                     Wi9gkeR1iKqKbqZI-0MAYDsf4BQ.roa (raw, json)
Hash identifier:          fLvaMM59aDROgiWjnfSZl5l0LhCb2/kteh3fgXY7l5M=
Subject key identifier:   5A:2F:60:91:E4:75:88:AA:8A:6E:A6:48:FB:43:00:60:3B:1F:E0:14
Certificate issuer:       /CN=f382cb13dde12658cdac18cacae91fbbf5c58090
Certificate serial:       019D76F1BFC990AC82F5AAE5D0515B180197
Authority key identifier: F3:82:CB:13:DD:E1:26:58:CD:AC:18:CA:CA:E9:1F:BB:F5:C5:80:90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/84LLE93hJljNrBjKyukfu_XFgJA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/Wi9gkeR1iKqKbqZI-0MAYDsf4BQ.roa
Signing time:             Fri 10 Apr 2026 10:30:47 +0000
ROA not before:           Fri 10 Apr 2026 10:30:47 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     216411
IP address blocks:        178.236.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/84LLE93hJljNrBjKyukfu_XFgJA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 04:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:76:f1:bf:c9:90:ac:82:f5:aa:e5:d0:51:5b:18:01:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f382cb13dde12658cdac18cacae91fbbf5c58090
        Validity
            Not Before: Apr 10 10:30:47 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5a2f6091e47588aa8a6ea648fb4300603b1fe014
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:08:50:28:6e:07:7a:7a:96:6f:49:74:3d:86:
                    d3:0b:8b:73:da:03:ce:29:e3:eb:09:72:dc:3a:0b:
                    5a:a3:04:02:3f:0e:9d:0b:b4:c0:bf:99:33:d4:0a:
                    08:df:f1:b3:94:8f:c9:15:e6:35:f3:77:8b:30:84:
                    d4:c1:c9:93:85:3a:b4:a1:a2:5b:e0:3b:42:cf:4d:
                    6d:c2:97:d0:17:26:90:65:9d:85:3c:e9:0e:6d:f6:
                    1b:89:c0:5d:75:81:40:33:57:25:eb:12:75:2f:69:
                    c4:5e:df:3f:a3:80:5d:db:da:7f:e4:60:34:41:fe:
                    71:dd:f5:3d:44:cf:c2:d7:6e:a6:62:57:55:09:3d:
                    50:1b:84:53:3e:ca:72:28:12:e5:30:2e:75:bd:a7:
                    10:0d:bc:b9:20:41:78:f6:ff:8b:4c:78:3d:d0:d0:
                    d2:0e:73:9c:db:75:a6:a6:a0:ba:cc:d0:bf:2f:f5:
                    52:8e:c0:c0:49:cc:d7:34:7a:ec:4b:d0:b3:d1:45:
                    27:d5:e0:11:a3:9e:77:2a:2b:94:fa:93:c1:4c:a8:
                    88:09:2d:5b:88:3e:1f:26:90:5a:76:2e:98:96:81:
                    ed:ec:8d:cb:e8:25:b4:c2:f1:5e:38:ce:12:43:14:
                    90:61:c4:2f:0f:2f:c6:14:93:c9:92:cd:a3:d9:76:
                    9d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:2F:60:91:E4:75:88:AA:8A:6E:A6:48:FB:43:00:60:3B:1F:E0:14
            X509v3 Authority Key Identifier:
                keyid:F3:82:CB:13:DD:E1:26:58:CD:AC:18:CA:CA:E9:1F:BB:F5:C5:80:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/84LLE93hJljNrBjKyukfu_XFgJA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/Wi9gkeR1iKqKbqZI-0MAYDsf4BQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.236.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:fe:f0:36:d7:ff:63:42:5d:47:16:b1:e7:1e:ab:48:d8:87:
         12:83:e2:5a:08:24:92:ae:25:f6:eb:37:92:00:3b:90:0e:0e:
         32:48:7e:ae:71:74:08:33:41:d3:c5:bd:fa:69:88:64:8a:99:
         e7:c9:e8:61:75:38:d9:b4:4a:60:84:36:c0:d3:68:84:68:37:
         72:83:f6:5e:24:e9:03:18:76:ba:1e:6b:92:2e:f3:4e:8a:a4:
         fe:d9:6d:4e:a4:e0:a3:15:bd:2c:a1:f3:f8:05:1f:f2:4a:e1:
         01:a3:e5:62:ad:25:fa:6f:32:64:11:b4:06:aa:4b:9a:73:d5:
         46:66:33:96:20:0f:84:fd:18:9a:6d:1f:55:12:66:76:b5:3b:
         14:15:dd:f4:64:d4:d4:82:ad:ba:7f:9b:af:3e:31:97:bc:52:
         43:d3:ed:4b:46:e3:be:90:31:47:5a:38:99:9e:84:59:42:a8:
         e9:a4:02:8f:fe:32:03:00:f6:8e:a1:0d:4d:f3:d2:1b:de:54:
         ca:e6:bf:c2:3f:e2:42:ab:ba:5f:ab:07:cd:e7:7c:4b:e7:d5:
         ae:36:61:06:f0:17:c9:f7:b8:0a:98:4f:49:28:bf:ad:7e:9a:
         15:fd:94:77:c6:5b:9c:95:0a:1f:21:34:7e:b3:39:75:5d:76:
         64:64:f3:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:16:57 2026 by rpki-client