Route Origin Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/XIhgFqWVmCplW4itT7Fmtv1Jkes.roa
File:                     XIhgFqWVmCplW4itT7Fmtv1Jkes.roa (raw, json)
Hash identifier:          wogY60tV7Xffs6giHa8vtrYTZMKiL65obnwlMM5hwus=
Subject key identifier:   5C:88:60:16:A5:95:98:2A:65:5B:88:AD:4F:B1:66:B6:FD:49:91:EB
Certificate issuer:       /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial:       01A11A64F611703F893FEAF9916CD635A277
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/XIhgFqWVmCplW4itT7Fmtv1Jkes.roa
Signing time:             Thu 08 Oct 2026 07:23:06 +0000
ROA not before:           Thu 08 Oct 2026 07:23:06 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     49453
IP address blocks:        77.105.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 23:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:1a:64:f6:11:70:3f:89:3f:ea:f9:91:6c:d6:35:a2:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
        Validity
            Not Before: Oct  8 07:23:06 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5c886016a595982a655b88ad4fb166b6fd4991eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:7e:b6:80:8d:5b:81:f5:1e:67:0d:e6:bf:22:
                    c2:da:1b:db:2a:29:86:c6:f5:8c:61:08:a9:8a:7a:
                    61:25:c1:09:bf:e4:50:b8:19:3d:65:b2:05:25:55:
                    17:9b:81:c9:dc:80:23:46:80:29:33:6b:1f:f5:e1:
                    4d:39:15:b0:bd:c6:9f:b3:27:89:d4:aa:20:72:f7:
                    79:5a:b4:0c:ae:05:f0:11:ab:9a:c1:98:d8:fb:36:
                    ca:34:93:4f:94:ac:73:58:db:ac:41:95:06:e7:93:
                    76:dc:2c:f9:3b:5f:cd:cf:6a:3c:e4:0f:67:96:69:
                    fe:0e:36:8b:90:cb:d7:63:8c:4f:35:9f:d8:72:e8:
                    9b:52:1d:ff:9d:dc:f5:1f:2e:7c:51:b1:aa:0e:9d:
                    46:89:9e:20:37:b5:4f:5f:f7:a5:b5:e4:1a:03:29:
                    44:8b:7a:6b:99:d2:60:86:dd:4f:1e:54:ca:73:6c:
                    86:0f:ed:ab:9e:43:41:f3:3a:f1:e4:b8:7b:b8:5c:
                    76:08:df:a5:c7:a8:17:8a:cd:6d:92:cf:d4:98:43:
                    c8:1c:82:d8:1e:0e:c8:31:ec:a8:43:24:3b:68:25:
                    19:cd:38:d8:e2:08:69:83:9a:e0:5d:22:a0:c6:c4:
                    a0:5e:cf:d5:64:7b:cc:d3:17:99:43:4a:30:a8:b8:
                    d9:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:88:60:16:A5:95:98:2A:65:5B:88:AD:4F:B1:66:B6:FD:49:91:EB
            X509v3 Authority Key Identifier:
                keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/XIhgFqWVmCplW4itT7Fmtv1Jkes.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.105.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:88:43:b2:91:93:65:12:5b:a8:32:a5:2d:d1:5e:9f:6d:2c:
         78:8c:68:93:61:5e:db:17:de:1a:10:dc:87:fc:62:dc:74:b6:
         0c:ba:30:69:29:cb:46:f6:44:55:6a:3e:95:57:5b:1e:aa:7a:
         22:9a:19:a1:fe:fc:90:3a:a1:06:c0:b2:9b:4b:0d:5a:f4:55:
         e7:83:30:08:26:0c:01:77:58:14:ac:d0:5e:c2:30:20:d2:52:
         b8:79:6e:91:f8:ed:3c:ea:48:69:c4:fb:5d:e6:41:bb:af:9b:
         96:f2:71:5e:6c:78:35:8d:83:92:e3:78:f2:b1:eb:0b:d5:52:
         6c:9c:06:95:12:1b:4d:af:58:95:ad:43:11:6b:10:e8:4f:bd:
         eb:ab:a1:9e:2f:47:77:ea:0f:d3:13:a0:f5:c8:1a:df:00:12:
         ed:6d:9b:68:08:c4:51:23:52:aa:f6:27:8c:52:88:dc:1e:db:
         63:ff:cf:29:84:fd:dc:eb:65:f9:3e:e4:44:0e:75:ff:a9:64:
         c0:ea:fd:33:bd:cd:50:04:75:b2:51:d8:c5:ee:ac:30:b9:ea:
         50:bf:ee:f5:dc:5a:82:17:31:3d:28:12:63:c0:71:4e:bb:e2:
         bb:1a:42:4e:f7:c8:3a:fb:1e:b2:fd:a9:cf:cf:de:7b:8f:0d:
         53:4b:32:d7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaEaZPYRcD+JP+r5kWzWNaJ3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj
N2U5MTUwHhcNMjYxMDA4MDcyMzA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1Yzg4NjAxNmE1OTU5ODJhNjU1Yjg4YWQ0ZmIxNjZiNmZkNDk5MWViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyn62gI1bgfUeZw3mvyLC2hvbKimG
xvWMYQipinphJcEJv+RQuBk9ZbIFJVUXm4HJ3IAjRoApM2sf9eFNORWwvcafsyeJ
1Kogcvd5WrQMrgXwEauawZjY+zbKNJNPlKxzWNusQZUG55N23Cz5O1/Nz2o85A9n
lmn+DjaLkMvXY4xPNZ/YcuibUh3/ndz1Hy58UbGqDp1GiZ4gN7VPX/elteQaAylE
i3prmdJght1PHlTKc2yGD+2rnkNB8zrx5Lh7uFx2CN+lx6gXis1tks/UmEPIHILY
Hg7IMeyoQyQ7aCUZzTjY4ghpg5rgXSKgxsSgXs/VZHvM0xeZQ0owqLjZpwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFyIYBallZgqZVuIrU+xZrb9SZHrMB8GA1UdIwQY
MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt
ZmFlNWRiZWQzYjFiLzEvWEloZ0ZxV1ZtQ3BsVzRpdFQ3Rm10djFKa2VzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi
LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATWk3MA0G
CSqGSIb3DQEBCwUAA4IBAQA/iEOykZNlEluoMqUt0V6fbSx4jGiTYV7bF94aENyH
/GLcdLYMujBpKctG9kRVaj6VV1seqnoimhmh/vyQOqEGwLKbSw1a9FXngzAIJgwB
d1gUrNBewjAg0lK4eW6R+O086khpxPtd5kG7r5uW8nFebHg1jYOS43jysesL1VJs
nAaVEhtNr1iVrUMRaxDoT73rq6GeL0d36g/TE6D1yBrfABLtbZtoCMRRI1Kq9ieM
UojcHttj/88phP3c62X5PuREDnX/qWTA6v0zvc1QBHWyUdjF7qwwuepQv+713FqC
FzE9KBJjwHFOu+K7GkJO98g6+x6y/anPz957jw1TSzLX
-----END CERTIFICATE-----
Generated at Thu Oct 15 06:58:33 2026 by rpki-client