Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/37372e38332e3130342e302f32342d3234203d3e203531303832.roa
File:                     37372e38332e3130342e302f32342d3234203d3e203531303832.roa (raw, json)
Hash identifier:          tEF9bnevWr2USbU3R4xCrwLZhi5gI3gNfwg2EPjDOEc=
Subject key identifier:   05:2D:6E:E1:00:8A:EF:50:01:5D:33:99:E5:C0:96:A8:74:89:0E:8F
Certificate issuer:       /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial:       0DA1140D0AA862EA1913000AA1AB5200DA7059BD
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/37372e38332e3130342e302f32342d3234203d3e203531303832.roa
Signing time:             Thu 06 Aug 2026 17:49:19 +0000
ROA not before:           Thu 06 Aug 2026 17:44:19 +0000
ROA not after:            Thu 05 Aug 2027 17:49:19 +0000
asID:                     51082
IP address blocks:        77.83.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 01:54:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:a1:14:0d:0a:a8:62:ea:19:13:00:0a:a1:ab:52:00:da:70:59:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
        Validity
            Not Before: Aug  6 17:44:19 2026 GMT
            Not After : Aug  5 17:49:19 2027 GMT
        Subject: CN=052D6EE1008AEF50015D3399E5C096A874890E8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:12:87:17:46:14:0c:3c:2e:b6:84:ad:ca:0a:
                    5c:25:fb:9d:61:02:86:34:99:f9:5c:12:dc:77:3c:
                    54:8c:cf:8d:7b:55:6a:81:e8:6c:c2:b3:28:ee:87:
                    82:ce:a0:79:b3:07:10:b9:c3:1e:30:29:87:88:41:
                    30:3a:ff:59:27:27:71:41:fe:b4:bf:92:ba:7c:dd:
                    21:32:7a:bf:01:b7:97:34:3a:c8:0d:71:a5:4f:40:
                    e0:71:4d:cb:54:4d:e1:b9:25:7b:60:fe:a6:7a:e4:
                    46:ae:d7:94:47:b6:d5:eb:50:59:0e:f9:3f:a3:ea:
                    ac:8b:e6:52:ca:39:05:03:85:fd:f1:4e:3c:da:17:
                    9d:30:65:66:82:85:b5:4b:b8:e8:cd:3e:e3:a8:1c:
                    e9:73:a2:db:2e:2f:a7:70:49:03:18:d1:9b:55:c8:
                    7e:7e:cd:81:fc:cb:e3:14:2c:29:61:23:fe:ab:0f:
                    8a:37:bc:f7:0f:dd:47:00:a1:d5:13:0d:19:be:4b:
                    51:8c:fc:29:48:33:3a:a5:6c:f0:db:dd:39:53:d5:
                    47:5f:31:c4:5e:ca:dc:a3:2d:26:74:74:40:8d:bf:
                    ec:b7:8e:41:69:31:88:4c:97:e6:14:69:02:41:a8:
                    59:73:71:2d:e4:6b:44:1c:f4:a9:36:46:be:e3:64:
                    bb:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:2D:6E:E1:00:8A:EF:50:01:5D:33:99:E5:C0:96:A8:74:89:0E:8F
            X509v3 Authority Key Identifier:
                keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/37372e38332e3130342e302f32342d3234203d3e203531303832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.83.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:71:40:0b:22:c6:cc:ae:82:27:f5:a0:d1:2f:42:d0:1e:58:
         cf:df:fe:ff:cd:26:55:a5:47:87:cb:27:7b:b1:69:8f:f3:5d:
         32:a9:0e:7f:09:c2:cc:17:a8:2f:51:ec:b6:f4:8f:1b:99:f1:
         0f:85:12:16:32:08:f9:ba:b5:9e:0d:74:dd:b3:7d:78:0f:94:
         43:f1:98:18:a8:b2:d0:37:bf:67:6b:04:29:08:94:79:96:d2:
         e1:d4:5c:c6:39:8b:c8:83:19:be:71:75:5b:af:e8:bb:2e:be:
         c8:a1:5b:e9:75:54:a9:66:b6:59:3d:12:f3:c0:94:61:e0:ab:
         f1:08:a7:13:0e:01:39:ec:68:1f:5a:cf:76:98:06:f8:85:1e:
         12:a8:78:ce:3b:88:88:fd:a7:f4:9f:68:a1:e3:dd:1a:4e:a1:
         4d:fa:0b:a7:65:11:81:79:9a:ae:46:6b:a5:c1:e3:88:76:16:
         b4:14:bc:d9:b7:cf:d4:d4:fb:9a:63:c6:ee:64:05:40:7e:46:
         8a:96:a5:84:ff:1d:8e:55:34:5b:60:ed:da:22:8c:13:d2:17:
         20:9e:f1:83:df:53:0b:14:80:08:71:67:fd:74:ce:b4:12:9f:
         d5:ab:d6:bf:09:a5:5b:cd:a1:33:59:d7:2d:c0:d5:8c:d5:92:
         a3:14:12:ab
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUDaEUDQqoYuoZEwAKoatSANpwWb0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjJmYmQyY2MwMDEyZmIyZjg2ZGI0MGI1ODliZDFhYzRl
OTczMjY2ZDAeFw0yNjA4MDYxNzQ0MTlaFw0yNzA4MDUxNzQ5MTlaMDMxMTAvBgNV
BAMTKDA1MkQ2RUUxMDA4QUVGNTAwMTVEMzM5OUU1QzA5NkE4NzQ4OTBFOEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpEocXRhQMPC62hK3KClwl+51h
AoY0mflcEtx3PFSMz417VWqB6GzCsyjuh4LOoHmzBxC5wx4wKYeIQTA6/1knJ3FB
/rS/krp83SEyer8Bt5c0OsgNcaVPQOBxTctUTeG5JXtg/qZ65Eau15RHttXrUFkO
+T+j6qyL5lLKOQUDhf3xTjzaF50wZWaChbVLuOjNPuOoHOlzotsuL6dwSQMY0ZtV
yH5+zYH8y+MULClhI/6rD4o3vPcP3UcAodUTDRm+S1GM/ClIMzqlbPDb3TlT1Udf
McReytyjLSZ0dECNv+y3jkFpMYhMl+YUaQJBqFlzcS3ka0Qc9Kk2Rr7jZLvlAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUBS1u4QCK71ABXTOZ5cCWqHSJDo8wHwYDVR0j
BBgwFoAUYvvSzAAS+y+G20C1ib0axOlzJm0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDZiOTNkZjAtYWM4ZC00ZGE4LWFmYjgtZGNiN2YyODg4
MzYyLzAvNjJGQkQyQ0MwMDEyRkIyRjg2REI0MEI1ODlCRDFBQzRFOTczMjY2RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1l2dlN6QUFTLXktRzIwQzFpYjBheE9s
ekptMC5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNDZiOTNkZjAt
YWM4ZC00ZGE4LWFmYjgtZGNiN2YyODg4MzYyLzAvMzczNzJlMzgzMzJlMzEzMDM0
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMTMwMzgzMi5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAE1T
aDANBgkqhkiG9w0BAQsFAAOCAQEAa3FACyLGzK6CJ/Wg0S9C0B5Yz9/+/80mVaVH
h8sne7Fpj/NdMqkOfwnCzBeoL1HstvSPG5nxD4USFjII+bq1ng103bN9eA+UQ/GY
GKiy0De/Z2sEKQiUeZbS4dRcxjmLyIMZvnF1W6/ouy6+yKFb6XVUqWa2WT0S88CU
YeCr8QinEw4BOexoH1rPdpgG+IUeEqh4zjuIiP2n9J9ooePdGk6hTfoLp2URgXma
rkZrpcHjiHYWtBS82bfP1NT7mmPG7mQFQH5GipalhP8djlU0W2Dt2iKME9IXIJ7x
g99TCxSACHFn/XTOtBKf1avWvwmlW82hM1nXLcDVjNWSoxQSqw==
-----END CERTIFICATE-----
Generated at Sun Sep 20 16:23:10 2026 by rpki-client