Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/lwFIJZHSCeUHFsDGwydOHc4Vm-w.roa
File:                     lwFIJZHSCeUHFsDGwydOHc4Vm-w.roa (raw, json)
Hash identifier:          IprMr+k0uKtviFeEXNYRk55EK6C2aKbzQcmMP7J96h0=
Subject key identifier:   97:01:48:25:91:D2:09:E5:07:16:C0:C6:C3:27:4E:1D:CE:15:9B:EC
Certificate issuer:       /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial:       019838DD51622DE6256336A6DC29E6567DB3
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/lwFIJZHSCeUHFsDGwydOHc4Vm-w.roa
Signing time:             Wed 23 Jul 2025 19:58:05 +0000
ROA not before:           Wed 23 Jul 2025 19:58:05 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     211522
IP address blocks:        77.239.96.0/21 maxlen: 24
                          77.239.112.0/22 maxlen: 24
                          77.239.116.0/22 maxlen: 24
                          77.239.120.0/23 maxlen: 24
                          77.239.124.0/24 maxlen: 24
                          150.241.64.0/19 maxlen: 24
                          150.241.96.0/22 maxlen: 24
                          150.241.100.0/24 maxlen: 24
                          150.241.101.0/24 maxlen: 24
                          150.241.102.0/24 maxlen: 24
                          150.241.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:38:dd:51:62:2d:e6:25:63:36:a6:dc:29:e6:56:7d:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
        Validity
            Not Before: Jul 23 19:58:05 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=9701482591d209e50716c0c6c3274e1dce159bec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:41:8b:62:56:1c:74:e3:6e:eb:26:19:b9:ee:
                    b2:df:c7:af:b1:1c:19:7b:1f:e2:b9:2a:ca:32:21:
                    8a:7a:a0:eb:b0:e9:90:24:49:6d:05:71:6e:46:34:
                    51:14:81:0f:e4:6d:cd:2e:41:31:4d:4d:bc:9b:76:
                    bf:f9:66:c5:34:e9:67:e8:7a:b3:be:2f:46:40:ce:
                    81:30:6e:64:97:eb:98:fd:7a:ac:af:d9:57:77:58:
                    90:07:0e:16:89:41:0c:a9:ad:e9:75:22:65:1b:b7:
                    16:af:f6:37:89:d4:4c:fe:50:2d:43:08:a1:75:d9:
                    87:9a:ac:a9:be:c9:29:0f:90:09:1c:de:ec:54:6b:
                    4f:19:40:89:f7:03:15:5f:41:d6:bb:d1:5a:23:b9:
                    38:b3:45:09:91:ac:3f:a7:e1:b1:f1:f2:1f:49:3a:
                    a6:26:c8:91:a9:01:20:8e:81:f8:e7:9d:a8:d8:58:
                    23:ff:b2:9b:c2:e9:a0:91:44:62:de:26:a3:86:0b:
                    9d:75:00:e0:9e:84:94:42:aa:3c:3b:fe:64:ea:bc:
                    2c:d8:0a:ce:dc:46:77:d5:82:f3:7c:66:c7:c8:ab:
                    b8:d5:d0:96:83:e4:b8:27:49:a0:4d:7f:9e:83:06:
                    e0:4f:f8:3a:be:f5:16:01:59:d0:e8:61:55:61:c5:
                    ca:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:01:48:25:91:D2:09:E5:07:16:C0:C6:C3:27:4E:1D:CE:15:9B:EC
            X509v3 Authority Key Identifier:
                keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/lwFIJZHSCeUHFsDGwydOHc4Vm-w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.239.96.0/21
                  77.239.112.0-77.239.121.255
                  77.239.124.0/24
                  150.241.64.0-150.241.103.255

    Signature Algorithm: sha256WithRSAEncryption
         bb:2b:c8:ad:23:54:f5:78:a6:68:ee:c2:1b:15:12:5f:db:d7:
         c3:e1:ff:de:0a:7c:6c:27:a3:01:78:66:64:b2:dd:d5:18:bc:
         92:57:65:93:b4:b4:bc:d4:85:ef:19:c7:42:a1:d8:f4:5f:17:
         08:94:45:a8:ab:22:6f:50:75:52:be:4e:d5:6b:ea:d6:96:21:
         b7:43:62:93:bd:d8:1b:e2:56:43:81:4d:53:cb:09:88:d0:b0:
         87:36:33:f8:0e:b6:66:8f:ba:0b:f2:0c:d7:df:32:3d:20:ac:
         f4:71:98:ce:a3:a5:ce:a9:7d:2a:b5:48:b6:1c:b3:41:16:cd:
         de:8d:77:2e:01:d6:be:37:e8:25:17:33:2f:1e:9d:3b:4b:a1:
         65:8f:d6:da:08:54:30:d9:de:f1:95:bd:9e:10:78:80:f4:c0:
         bd:00:ca:81:18:d5:0b:ca:b8:f9:e8:9f:1b:9d:37:74:fb:ab:
         d6:43:d2:91:ab:0d:09:99:7c:2c:40:01:40:31:01:64:7d:c0:
         21:8c:8a:e7:1b:a9:71:04:77:46:8c:92:e3:82:4f:80:54:bd:
         4e:d6:77:34:da:0f:e2:65:4a:c3:8a:4e:89:b4:5c:33:54:98:
         14:7f:b9:c0:25:e9:d6:cd:24:ea:24:8a:f3:03:1f:46:d9:ec:
         4e:14:31:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:16:49 2025 by rpki-client