Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/vZrL5qKX7ceVx27VBURjBFE2vNA.roa
File:                     vZrL5qKX7ceVx27VBURjBFE2vNA.roa (raw, json)
Hash identifier:          AZ7K2jGSSubMbYyxvT4Wa1tbl6fbrqx+DDOIz/jW4m8=
Subject key identifier:   BD:9A:CB:E6:A2:97:ED:C7:95:C7:6E:D5:05:44:63:04:51:36:BC:D0
Certificate issuer:       /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial:       01984FC71AB20A1D9780E686F9B6022E71F5
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/vZrL5qKX7ceVx27VBURjBFE2vNA.roa
Signing time:             Mon 28 Jul 2025 06:45:05 +0000
ROA not before:           Mon 28 Jul 2025 06:45:05 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     395374
IP address blocks:        79.172.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 02:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4f:c7:1a:b2:0a:1d:97:80:e6:86:f9:b6:02:2e:71:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
        Validity
            Not Before: Jul 28 06:45:05 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=bd9acbe6a297edc795c76ed5054463045136bcd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:84:a5:91:f4:5d:ac:8e:32:ef:4f:52:88:7f:
                    9b:c3:a3:c2:d7:3b:1f:55:cd:ab:af:06:08:ce:1a:
                    44:01:dd:55:2a:5b:88:ec:d6:b4:db:33:68:1b:f8:
                    54:72:90:01:b3:b2:a3:15:93:34:97:64:04:f8:87:
                    05:2d:76:94:6b:c4:57:2c:72:98:95:e7:02:22:14:
                    22:ef:47:b0:43:89:4f:ba:3c:b4:bb:a6:ee:7b:5c:
                    db:f4:08:12:17:02:f4:26:bc:11:49:24:cf:17:c5:
                    ee:c2:98:11:58:69:99:d5:f0:54:e2:27:df:2b:b0:
                    50:ef:d3:28:c3:da:0c:f3:cc:7c:2e:73:f2:09:55:
                    35:f9:66:c5:56:4a:2f:c9:14:ed:13:f8:09:45:5f:
                    4b:45:14:e1:4a:43:80:88:fd:2a:29:ca:2b:b7:e9:
                    50:eb:84:52:17:73:43:94:cd:dc:fe:ff:f3:aa:4e:
                    3d:d5:92:c6:fe:c3:34:ad:bd:e6:26:31:bf:36:91:
                    70:ad:ee:3d:c1:13:8c:15:9a:e7:05:49:4c:c8:fe:
                    c0:be:b1:e3:8f:e8:26:11:3b:01:e2:93:02:ea:5c:
                    97:bd:99:e6:fe:d8:27:96:27:45:0b:00:f5:c8:6d:
                    42:a9:6e:35:7c:dd:8e:eb:d2:e3:da:79:a8:dc:0b:
                    72:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:9A:CB:E6:A2:97:ED:C7:95:C7:6E:D5:05:44:63:04:51:36:BC:D0
            X509v3 Authority Key Identifier:
                keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/vZrL5qKX7ceVx27VBURjBFE2vNA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.172.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:86:15:ae:fc:32:18:96:51:6e:e0:3e:3d:f8:f7:45:b9:88:
         6a:28:21:c3:a9:78:a2:0d:a2:ec:fd:21:97:15:e7:d1:5d:11:
         d4:4c:1d:8f:e8:7d:4e:2c:3c:f7:12:66:f2:28:c0:dc:0d:2a:
         51:7f:23:e3:4f:e3:8e:44:48:54:18:d6:e1:f8:18:46:df:0e:
         3f:ad:6f:41:2c:43:f3:08:3b:9f:d0:c9:67:8b:30:bf:7c:8f:
         05:7e:79:8f:40:94:c8:60:04:4b:1c:a6:2d:8d:19:5c:79:51:
         8a:10:70:c2:15:75:33:03:95:c1:23:14:a1:cc:e7:0e:32:f6:
         bc:b4:72:12:4b:83:aa:24:be:31:46:82:2f:a0:15:7b:18:7b:
         2a:e4:1c:81:0b:64:cc:09:a6:80:ab:88:61:68:f0:65:58:26:
         27:90:93:e8:1b:fd:9b:98:a8:ea:a5:a4:16:8b:05:8a:c1:f3:
         58:eb:1f:e5:e8:47:82:2f:27:0c:5d:6a:f1:0c:4f:0d:68:6d:
         d5:59:76:7a:fd:84:2e:8d:a2:e0:52:ba:3c:37:33:1c:75:04:
         ef:99:60:44:68:e4:f4:fa:a4:5f:2d:9c:da:ce:60:c8:9c:5a:
         45:1b:f9:86:90:93:aa:62:e4:75:a7:68:0e:a6:68:dc:60:83:
         66:d3:b5:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:19:47 2025 by rpki-client