Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/d-vWTC3ty3qWBAOnONIgrtruKtk.roa
File:                     d-vWTC3ty3qWBAOnONIgrtruKtk.roa (raw, json)
Hash identifier:          bTQFFxqnMiEekO5iTjlotLgjY6J8wSj/L8s/LzqfmyI=
Subject key identifier:   77:EB:D6:4C:2D:ED:CB:7A:96:04:03:A7:38:D2:20:AE:DA:EE:2A:D9
Certificate issuer:       /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial:       019F9E1E527A2745779BABA9A0D269ED4EA1
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/d-vWTC3ty3qWBAOnONIgrtruKtk.roa
Signing time:             Sun 26 Jul 2026 11:10:14 +0000
ROA not before:           Sun 26 Jul 2026 11:10:14 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     402315
IP address blocks:        87.83.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:9e:1e:52:7a:27:45:77:9b:ab:a9:a0:d2:69:ed:4e:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e20b034e2c497b1884488def106972704765029
        Validity
            Not Before: Jul 26 11:10:14 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=77ebd64c2dedcb7a960403a738d220aedaee2ad9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ed:f8:f7:79:d9:19:a0:35:ab:56:4c:4a:89:
                    af:30:9c:79:88:46:3d:0e:ff:99:9d:f0:ed:b6:75:
                    0f:fb:91:d8:c4:96:18:d9:67:e1:a6:91:fc:65:c7:
                    ea:e8:1b:70:39:a7:b4:fc:a8:d1:92:25:ba:a1:e0:
                    78:37:97:0e:5d:cd:2d:1b:09:b3:a0:83:1a:14:d8:
                    bb:e9:ce:36:90:a9:d1:89:95:3f:c8:ef:e1:eb:bd:
                    44:67:f7:a9:fc:5f:61:a5:ec:93:9d:20:9b:08:89:
                    8f:64:10:21:63:93:0f:09:98:9c:71:d5:76:0e:5e:
                    b6:9c:84:b7:72:51:e7:3d:62:86:5a:39:8d:cc:17:
                    3b:ff:1c:43:e0:82:15:4a:63:73:8c:4a:54:ac:75:
                    f5:a0:7b:4c:57:a2:a9:1c:21:b5:bd:c5:11:fb:e7:
                    e3:11:4c:cb:42:ae:58:ad:c3:7f:61:ba:1d:99:99:
                    99:b3:fc:6c:ef:f5:bb:02:64:fd:ba:97:e4:fc:6d:
                    2b:d2:0e:ae:d6:79:34:2c:a6:66:4d:e0:a1:2a:99:
                    51:ae:92:fc:af:97:c9:d8:cb:16:c5:41:2d:53:c9:
                    be:ec:3b:37:f8:e0:10:01:03:4d:38:fa:9c:1b:59:
                    f9:ac:e9:19:71:97:ef:bb:4e:b6:b7:30:d5:5f:84:
                    c9:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:EB:D6:4C:2D:ED:CB:7A:96:04:03:A7:38:D2:20:AE:DA:EE:2A:D9
            X509v3 Authority Key Identifier:
                keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/d-vWTC3ty3qWBAOnONIgrtruKtk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.83.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:80:63:0a:9f:58:9c:47:85:cc:e1:32:be:57:d4:21:77:07:
         d8:96:63:f0:4f:6b:90:b4:ca:17:1a:f6:8c:b5:08:71:96:a5:
         b9:07:18:98:4e:17:3d:ca:87:a6:14:30:45:85:9d:6a:50:9b:
         d4:23:45:3b:cd:75:01:8a:4f:3b:4c:fc:aa:4c:28:ac:3f:55:
         a5:12:c9:4c:f8:1c:d7:36:2e:05:88:ce:bf:d2:ed:06:02:64:
         14:9f:ce:07:cc:da:a0:a6:75:34:ad:e4:ef:06:e1:b0:bf:a6:
         ce:3a:a5:66:1a:e1:6d:d8:42:82:78:67:75:51:8e:93:ae:59:
         7d:29:b4:dc:4c:8b:63:e7:14:f7:60:2c:4d:52:fa:fe:00:71:
         23:17:e2:45:70:e1:c0:79:48:6b:0d:61:05:6c:b5:a1:f9:68:
         81:0e:cb:2d:21:69:7f:63:12:22:a1:15:5a:cd:a3:64:39:8b:
         04:a8:f7:f7:8e:c8:d8:57:37:3c:56:51:21:ba:86:f3:68:ce:
         e3:5d:80:6b:08:f5:f7:e3:7f:07:c7:d6:1f:c7:6f:81:60:f1:
         5a:a4:7d:b3:04:f3:78:53:4d:57:ce:70:c6:5f:22:a1:ff:47:
         c4:0c:28:c5:6d:1b:42:ed:9b:60:db:9d:f6:ae:d1:da:c5:d4:
         7e:3a:ff:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:24:24 2026 by rpki-client