Route Origin Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/JmRqti55yxF5nHbZ1D2cayMdnwc.roa
File:                     JmRqti55yxF5nHbZ1D2cayMdnwc.roa (raw, json)
Hash identifier:          jn2qeq8qJJYlGLj5IkFakTYZVGhTRfyNSqwE91OcIaE=
Subject key identifier:   26:64:6A:B6:2E:79:CB:11:79:9C:76:D9:D4:3D:9C:6B:23:1D:9F:07
Certificate issuer:       /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial:       01A0AD05B80F4A75A432A680B198D58DB511
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/JmRqti55yxF5nHbZ1D2cayMdnwc.roa
Signing time:             Thu 17 Sep 2026 01:40:28 +0000
ROA not before:           Thu 17 Sep 2026 01:40:28 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     206916
IP address blocks:        82.110.114.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:16:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ad:05:b8:0f:4a:75:a4:32:a6:80:b1:98:d5:8d:b5:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e20b034e2c497b1884488def106972704765029
        Validity
            Not Before: Sep 17 01:40:28 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=26646ab62e79cb11799c76d9d43d9c6b231d9f07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:86:ad:47:01:28:aa:fc:6f:d3:f2:d3:0c:e5:
                    a7:25:87:e8:b8:93:04:5d:22:62:da:e8:a9:4e:11:
                    30:c2:1b:fa:64:bf:99:02:a5:ca:75:30:d7:4c:5b:
                    6b:ad:e8:b3:6e:ba:e2:9c:60:73:c7:99:c6:b5:6c:
                    f1:4f:c6:f4:9e:d3:71:e0:f0:97:10:03:f4:e8:40:
                    ef:11:43:b7:d0:6f:6a:48:02:5d:f6:d4:8d:01:41:
                    8a:6a:18:27:bc:2c:b7:fb:01:e2:c1:c1:a8:a9:7a:
                    9e:53:16:71:b7:50:40:d8:75:9e:a6:19:cf:c3:54:
                    e3:f5:93:48:ed:7b:bf:d7:aa:6a:e2:c9:79:a3:f0:
                    62:da:a1:ed:f2:b4:cd:ca:45:79:8a:18:32:0a:ab:
                    cf:96:bb:a5:aa:7c:a0:d0:21:8d:a4:83:10:5a:8e:
                    24:54:c8:6c:bd:59:34:24:83:68:a1:ab:9b:cf:6a:
                    49:3f:6c:74:04:82:ef:8a:70:b8:74:7b:2c:52:77:
                    79:61:b4:6e:c5:9a:6b:a4:93:a1:89:a8:04:eb:07:
                    e8:12:70:97:4d:33:14:80:d2:b7:a5:38:6c:45:5a:
                    c6:8b:22:52:a7:d3:00:24:d3:d4:2e:2f:8e:09:1e:
                    0d:1d:df:72:ad:e3:b5:c9:a4:a7:f3:dc:88:3e:28:
                    dc:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:64:6A:B6:2E:79:CB:11:79:9C:76:D9:D4:3D:9C:6B:23:1D:9F:07
            X509v3 Authority Key Identifier:
                keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/JmRqti55yxF5nHbZ1D2cayMdnwc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.110.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5d:36:84:d2:66:21:7b:83:4e:f2:55:84:cd:97:8f:0b:c5:25:
         20:a3:eb:12:cc:19:5a:39:ad:ae:b0:e9:7b:ae:bc:85:b7:20:
         ae:9d:cd:d3:6d:b9:ee:05:13:54:89:7b:a4:36:85:6f:dd:6b:
         33:db:3e:0a:ee:12:33:09:89:ae:e7:06:68:9f:da:2e:a7:43:
         91:8f:5b:6c:2e:d6:d3:17:8e:53:61:06:6f:31:46:88:85:62:
         56:36:74:58:b6:ef:53:8c:0f:90:86:e3:58:ac:ef:87:39:0d:
         3c:28:73:bb:5b:79:14:3a:62:37:dc:99:a6:7b:51:86:88:39:
         ce:4e:b7:1a:80:b1:04:8a:bf:64:55:18:04:7e:a7:98:c6:db:
         70:97:28:f5:fe:8a:b9:5b:e9:bf:3e:61:3e:d6:c8:64:8a:85:
         7a:e0:bc:9f:bc:a0:cc:ba:37:93:09:b6:23:64:91:4b:3a:9c:
         df:19:6f:88:7c:90:bf:3b:b5:53:cc:41:c7:87:4b:f9:7f:f1:
         b4:b9:62:9a:7a:ed:fd:a5:a0:7b:5b:7f:98:78:e3:65:67:0e:
         ae:1e:1a:ce:2c:f1:84:84:2e:69:d6:90:9e:4b:6f:fe:58:db:
         2e:23:03:f4:00:cc:b5:1e:fb:27:38:e8:4c:12:35:ba:ce:be:
         3a:38:c7:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:52:33 2026 by rpki-client