Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/tBs3bX4J0-9LsINf9s_NNM9KYP4.roa
File:                     tBs3bX4J0-9LsINf9s_NNM9KYP4.roa (raw, json)
Hash identifier:          z3OYgwZG26UNQ9PTrifLK/shbhTolEU4CpJZtWbYWG8=
Subject key identifier:   B4:1B:37:6D:7E:09:D3:EF:4B:B0:83:5F:F6:CF:CD:34:CF:4A:60:FE
Certificate issuer:       /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial:       019814051072211AC968785FDE4FCC06D151
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/tBs3bX4J0-9LsINf9s_NNM9KYP4.roa
Signing time:             Wed 16 Jul 2025 16:15:32 +0000
ROA not before:           Wed 16 Jul 2025 16:15:32 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     2856
IP address blocks:        82.152.72.0/24 maxlen: 24
                          82.153.53.0/24 maxlen: 24
                          82.153.58.0/24 maxlen: 24
                          82.153.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 Aug 2025 15:45:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:14:05:10:72:21:1a:c9:68:78:5f:de:4f:cc:06:d1:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
        Validity
            Not Before: Jul 16 16:15:32 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=b41b376d7e09d3ef4bb0835ff6cfcd34cf4a60fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:32:e8:f8:b2:14:36:a0:5e:8c:c5:c6:87:90:
                    00:65:9e:8c:62:9f:25:1c:d6:23:69:e8:4b:41:fb:
                    92:3b:66:35:77:7d:1c:b2:f2:9b:44:96:c7:42:f5:
                    31:09:42:4d:c0:b7:e6:14:ab:9e:4f:fd:9d:cc:24:
                    94:29:d0:7c:58:19:d2:9c:b2:94:7c:5f:fb:c9:6b:
                    61:b6:bf:3b:1b:51:9a:6b:9e:a7:4f:82:ad:a8:a8:
                    7a:6c:0f:0a:60:dc:23:60:35:39:22:67:db:37:bd:
                    03:62:6c:cb:49:7a:c4:63:c1:ed:d5:19:e1:a0:f7:
                    5c:5e:c0:df:aa:83:ef:11:2d:a2:77:5b:96:b7:f6:
                    05:9b:f1:5c:4f:07:6a:6a:f4:4d:68:79:59:ea:1c:
                    1c:9a:56:f2:f3:7a:d4:86:27:8a:03:38:e7:25:bd:
                    a5:77:82:ed:5e:37:9d:90:4d:c3:c0:40:e2:c0:4c:
                    f0:44:59:4e:46:09:b6:46:5f:4b:f4:74:b1:c7:6d:
                    ff:3c:2a:95:a7:19:c7:52:ff:0d:61:d6:1c:df:a5:
                    af:2f:95:59:e9:82:2e:b8:2e:1a:a4:56:b7:39:09:
                    57:2f:a5:fc:2e:09:df:35:b3:fd:e7:24:9a:51:ec:
                    30:41:54:42:e3:54:3d:73:26:60:92:a1:6b:59:ac:
                    e0:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:1B:37:6D:7E:09:D3:EF:4B:B0:83:5F:F6:CF:CD:34:CF:4A:60:FE
            X509v3 Authority Key Identifier:
                keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/tBs3bX4J0-9LsINf9s_NNM9KYP4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.152.72.0/24
                  82.153.53.0/24
                  82.153.58.0/24
                  82.153.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:d1:4e:40:74:ba:d3:a9:eb:12:ca:ed:0a:17:fc:ff:59:ec:
         90:b6:31:1f:f4:e1:17:01:92:00:52:fe:2e:fc:66:03:2c:8f:
         6a:92:bc:eb:ba:3c:b0:5b:78:11:e6:e9:22:87:04:8b:39:99:
         a3:23:c8:ee:ee:eb:ad:4c:00:15:aa:86:4e:f1:0b:f0:59:6a:
         4b:65:9f:ad:69:c2:86:78:d6:71:74:a1:31:f1:ce:f8:6e:fd:
         b8:6d:e6:bb:06:35:2e:f4:5d:d7:76:d8:ca:78:bb:18:d3:5c:
         d8:dc:f4:0a:fb:ee:92:bd:bd:8c:27:0d:1e:ac:6c:1f:78:14:
         45:66:54:0d:21:dc:21:26:20:84:1c:af:1c:e7:3b:0b:e2:e5:
         0c:a2:88:55:db:8c:e3:7b:e6:f2:35:85:d8:ba:91:10:be:92:
         d8:f4:d7:d4:0a:bb:bb:c0:4b:b5:53:ee:89:73:2b:3c:9f:f0:
         0b:92:ac:76:91:bc:44:ec:aa:60:d7:b5:78:eb:3f:b1:d2:fc:
         5e:b4:00:00:dc:b6:7d:50:fd:8e:28:ea:26:19:bd:a0:69:99:
         be:a5:fb:33:5a:aa:8d:0c:94:bc:4b:b7:0f:a9:0f:f7:74:5d:
         ad:89:51:2c:5a:8e:07:54:ff:b2:e4:7a:bd:b8:04:07:9c:04:
         b3:50:45:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:32:45 2025 by rpki-client