Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/G_6VP_k1Ac7XsfwHZplzKNZshbU.roa
File:                     G_6VP_k1Ac7XsfwHZplzKNZshbU.roa (raw, json)
Hash identifier:          6XxctL37SggU5aHM9b07WCLQFXzsmmU2bsXFoQDbvLQ=
Subject key identifier:   1B:FE:95:3F:F9:35:01:CE:D7:B1:FC:07:66:99:73:28:D6:6C:85:B5
Certificate issuer:       /CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
Certificate serial:       01987B1B15DF942018C3499DBEC159ED378B
Authority key identifier: 24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/G_6VP_k1Ac7XsfwHZplzKNZshbU.roa
Signing time:             Tue 05 Aug 2025 16:40:29 +0000
ROA not before:           Tue 05 Aug 2025 16:40:29 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     3360
IP address blocks:        195.203.156.0/22 maxlen: 22
                          217.27.4.0/24 maxlen: 24
                          217.27.6.0/24 maxlen: 24
                          217.27.7.0/24 maxlen: 24
                          2a03:5000:1::/48 maxlen: 48
                          2a03:5000:2::/48 maxlen: 48
                          2a03:5000:11::/48 maxlen: 48
                          2a03:5000:12::/48 maxlen: 48
                          2a03:5000:20::/48 maxlen: 48
                          2a03:5000:21::/48 maxlen: 48
                          2a03:5000:22::/48 maxlen: 48
                          2a03:5000:30::/48 maxlen: 48
                          2a03:5000:31::/48 maxlen: 48
                          2a03:5000:32::/48 maxlen: 48
                          2a03:5000:41::/48 maxlen: 48
                          2a03:5000:42::/48 maxlen: 48
                          2a03:5000:51::/48 maxlen: 48
                          2a03:5000:52::/48 maxlen: 48
                          2a03:5000:61::/48 maxlen: 48
                          2a03:5000:62::/48 maxlen: 48
                          2a03:5000:71::/48 maxlen: 48
                          2a03:5000:72::/48 maxlen: 48
                          2a03:5000:81::/48 maxlen: 48
                          2a03:5000:82::/48 maxlen: 48
                          2a03:5000:91::/48 maxlen: 48
                          2a03:5000:92::/48 maxlen: 48
                          2a03:5000:101::/48 maxlen: 48
                          2a03:5000:102::/48 maxlen: 48
                          2a03:5000:111::/48 maxlen: 48
                          2a03:5000:112::/48 maxlen: 48
                          2a03:5000:121::/48 maxlen: 48
                          2a03:5000:122::/48 maxlen: 48
                          2a03:5000:131::/48 maxlen: 48
                          2a03:5000:132::/48 maxlen: 48
                          2a03:5000:141::/48 maxlen: 48
                          2a03:5000:142::/48 maxlen: 48
                          2a03:5000:151::/48 maxlen: 48
                          2a03:5000:152::/48 maxlen: 48
                          2a03:5000:161::/48 maxlen: 48
                          2a03:5000:162::/48 maxlen: 48
                          2a03:5000:171::/48 maxlen: 48
                          2a03:5000:172::/48 maxlen: 48
                          2a03:5000:181::/48 maxlen: 48
                          2a03:5000:182::/48 maxlen: 48
                          2a03:5000:191::/48 maxlen: 48
                          2a03:5000:192::/48 maxlen: 48
                          2a03:5000:201::/48 maxlen: 48
                          2a03:5000:202::/48 maxlen: 48
                          2a03:5000:211::/48 maxlen: 48
                          2a03:5000:212::/48 maxlen: 48
                          2a03:5000:221::/48 maxlen: 48
                          2a03:5000:222::/48 maxlen: 48
                          2a03:5000:231::/48 maxlen: 48
                          2a03:5000:232::/48 maxlen: 48
                          2a03:5000:241::/48 maxlen: 48
                          2a03:5000:242::/48 maxlen: 48
                          2a03:5000:251::/48 maxlen: 48
                          2a03:5000:252::/48 maxlen: 48
                          2a03:5000:271::/48 maxlen: 48
                          2a03:5000:272::/48 maxlen: 48
                          2a03:5000:291::/48 maxlen: 48
                          2a03:5000:292::/48 maxlen: 48
                          2a03:5000:311::/48 maxlen: 48
                          2a03:5000:312::/48 maxlen: 48
                          2a03:5000:421::/48 maxlen: 48
                          2a03:5000:441::/48 maxlen: 48
                          2a03:5000:442::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 19:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7b:1b:15:df:94:20:18:c3:49:9d:be:c1:59:ed:37:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
        Validity
            Not Before: Aug  5 16:40:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=1bfe953ff93501ced7b1fc0766997328d66c85b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:99:aa:11:06:a3:8b:6a:82:0b:8c:7e:8a:3b:
                    2d:38:33:d6:4f:05:bc:d7:af:07:26:cc:ab:d6:1f:
                    81:07:3f:a4:e5:a7:a5:9e:fd:1d:88:83:da:70:7f:
                    d2:67:47:da:ba:3f:c1:57:fb:30:8d:f9:a8:d0:5a:
                    63:1d:1a:84:15:63:a4:a1:0d:b4:cd:89:99:6c:ba:
                    cf:54:7a:b0:ca:41:24:9c:b0:8d:70:30:cb:71:be:
                    10:6f:8e:e4:d8:d4:d9:20:56:fc:4b:2f:9f:d1:5b:
                    2a:e8:90:27:14:aa:eb:2e:71:15:84:b9:07:d8:f0:
                    69:89:3a:a7:cf:f1:7d:f8:cc:ad:d7:ee:d2:df:d1:
                    f7:70:b0:4c:c7:2e:6a:94:8d:36:2c:a2:bd:80:22:
                    e9:a0:2d:bd:87:fa:4b:b7:0a:c3:00:6b:5a:94:74:
                    36:51:de:85:6a:86:c4:9a:54:01:55:4e:77:88:3e:
                    3f:b1:f6:07:34:65:7c:89:ca:59:e9:0d:6d:c9:04:
                    72:d4:86:08:48:c1:5b:25:97:65:0e:b4:28:26:20:
                    f1:a8:c5:80:9c:30:d0:3d:52:e3:29:f9:21:28:3c:
                    49:02:db:00:db:7c:14:5e:85:26:cf:ee:b2:65:dd:
                    e3:3d:b1:e5:84:ab:fd:68:66:92:05:a1:2f:51:a7:
                    d0:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:FE:95:3F:F9:35:01:CE:D7:B1:FC:07:66:99:73:28:D6:6C:85:B5
            X509v3 Authority Key Identifier:
                keyid:24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/G_6VP_k1Ac7XsfwHZplzKNZshbU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.203.156.0/22
                  217.27.4.0/24
                  217.27.6.0/23
                IPv6:
                  2a03:5000:1::-2a03:5000:2:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:11::-2a03:5000:12:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:20::-2a03:5000:22:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:30::-2a03:5000:32:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:41::-2a03:5000:42:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:51::-2a03:5000:52:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:61::-2a03:5000:62:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:71::-2a03:5000:72:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:81::-2a03:5000:82:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:91::-2a03:5000:92:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:101::-2a03:5000:102:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:111::-2a03:5000:112:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:121::-2a03:5000:122:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:131::-2a03:5000:132:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:141::-2a03:5000:142:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:151::-2a03:5000:152:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:161::-2a03:5000:162:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:171::-2a03:5000:172:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:181::-2a03:5000:182:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:191::-2a03:5000:192:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:201::-2a03:5000:202:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:211::-2a03:5000:212:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:221::-2a03:5000:222:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:231::-2a03:5000:232:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:241::-2a03:5000:242:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:251::-2a03:5000:252:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:271::-2a03:5000:272:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:291::-2a03:5000:292:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:311::-2a03:5000:312:ffff:ffff:ffff:ffff:ffff
                  2a03:5000:421::/48
                  2a03:5000:441::-2a03:5000:442:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         47:51:f2:2a:01:55:3b:76:9d:c1:8f:fa:f3:32:32:f2:e6:d6:
         4c:f7:09:0d:e9:23:04:e6:73:4d:55:4a:72:28:c8:19:bc:a5:
         0a:7b:5c:88:89:39:45:34:f5:91:21:7f:4b:06:dc:a8:7c:60:
         e4:d7:2d:45:c4:40:d9:c8:7f:56:a4:6b:33:2d:51:0c:3c:c0:
         02:bb:79:d5:6f:e2:68:7e:02:4c:89:bb:1a:af:52:89:a7:81:
         a5:25:26:c7:85:c6:85:71:83:4d:25:6b:8f:17:a0:4d:84:a0:
         49:3b:15:45:2f:e7:b6:c7:2e:26:f1:43:4b:ad:d7:0d:04:0c:
         62:13:eb:fe:75:3f:98:9b:36:29:1c:18:ba:7b:84:78:50:09:
         50:a0:f4:06:c0:fb:04:ca:b3:96:53:f7:7a:d6:04:09:bd:1b:
         a1:6e:24:a3:d4:90:e2:70:c4:4e:12:16:61:e5:16:10:d6:52:
         12:7d:87:8c:59:4a:fe:71:31:5b:9b:ea:dd:80:dd:a5:0d:e4:
         ab:fd:de:3b:c5:7d:fc:cc:a0:68:35:34:ea:0a:26:72:54:8f:
         70:15:a5:39:b8:fb:28:93:a1:b6:1c:59:22:d4:ad:cb:e2:51:
         b0:31:ab:f9:33:ec:03:a6:10:89:57:b4:f0:f0:33:54:37:53:
         e5:a1:58:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:59:36 2025 by rpki-client