Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39312e3232392e3234342e302f32342d3234203d3e20313336373837.roa
File:                     39312e3232392e3234342e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier:          yYHhRRmYvOnF/PKd2w8C8lc8sbaogltFLxOU4ITUO0E=
Subject key identifier:   7E:95:C9:8B:46:63:0A:C6:29:30:6A:5F:65:CF:19:7D:2D:91:C7:20
Certificate issuer:       /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial:       5FD9F03816CA37346315C2639406B60100D488FB
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39312e3232392e3234342e302f32342d3234203d3e20313336373837.roa
Signing time:             Wed 30 Jul 2025 14:47:00 +0000
ROA not before:           Wed 30 Jul 2025 14:42:00 +0000
ROA not after:            Wed 29 Jul 2026 14:47:00 +0000
asID:                     136787
IP address blocks:        91.229.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 11:07:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:d9:f0:38:16:ca:37:34:63:15:c2:63:94:06:b6:01:00:d4:88:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
        Validity
            Not Before: Jul 30 14:42:00 2025 GMT
            Not After : Jul 29 14:47:00 2026 GMT
        Subject: CN=7E95C98B46630AC629306A5F65CF197D2D91C720
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b8:02:b4:e8:09:8c:14:a3:a6:03:79:08:85:
                    49:89:f0:19:a4:98:c7:2f:79:b7:27:65:ff:4b:04:
                    ed:41:a5:23:89:1a:36:b7:84:c5:2b:69:28:f3:bc:
                    17:67:e8:53:f7:2b:7e:74:65:ec:d0:87:48:26:be:
                    6e:ae:62:5b:57:bd:53:2f:68:88:fd:3e:fd:2d:c0:
                    a9:71:17:83:a6:d2:ae:17:b1:0b:c9:02:44:ce:e5:
                    51:1d:a1:87:71:2c:45:62:b3:c2:89:ca:fb:52:e1:
                    03:42:0e:ac:52:41:2f:88:40:0a:6d:b7:6d:52:0e:
                    05:2f:0b:d9:91:c1:8e:74:58:99:f4:d6:db:1d:76:
                    a3:2f:f7:2a:e6:0e:07:63:4c:c6:e3:77:cd:5c:66:
                    7a:27:05:57:88:0d:29:72:be:c6:a9:1a:3d:b7:fd:
                    49:c6:f9:c0:e6:cc:1d:23:00:61:ce:25:27:a5:48:
                    e5:8f:5b:44:51:57:b6:8d:8b:e2:68:78:19:55:58:
                    1b:51:e8:10:86:4a:a5:b3:a9:21:1e:59:70:3c:bd:
                    77:f7:fd:f2:68:83:fd:52:84:a1:a1:78:1e:1c:de:
                    93:ee:7b:32:10:ad:74:a0:b0:e0:19:6e:d2:3b:11:
                    67:21:4e:47:9a:03:ea:fa:5d:55:18:b5:94:b3:42:
                    61:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:95:C9:8B:46:63:0A:C6:29:30:6A:5F:65:CF:19:7D:2D:91:C7:20
            X509v3 Authority Key Identifier:
                keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39312e3232392e3234342e302f32342d3234203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.229.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:93:bc:4a:6f:0c:25:cc:9a:1a:42:03:f6:53:de:f7:24:a6:
         0b:46:93:06:6a:7f:75:f9:ba:f0:3d:8b:f4:b8:dd:87:0a:4d:
         35:fe:00:c1:d5:67:8c:85:e4:ad:d4:5e:7d:f7:98:79:c2:7f:
         39:db:cc:75:af:31:e1:9e:a1:d4:50:84:66:82:5f:89:23:e0:
         d7:92:81:07:3a:c4:51:1a:b4:38:53:c6:59:74:4a:fd:32:d2:
         cf:47:47:4b:67:a2:ad:ab:3b:10:e1:aa:ac:23:fc:2c:b3:6b:
         e6:94:83:68:aa:96:96:45:4b:ec:f8:e8:62:08:4a:c8:ec:4c:
         04:bf:c2:ce:ef:b6:61:b2:1e:34:f9:e0:b3:38:13:d6:1d:2a:
         84:11:51:39:c1:4d:16:d2:74:37:9a:73:a1:38:ea:5f:59:c1:
         08:f8:68:ab:b0:87:3a:6b:9b:0e:f5:ed:bd:b6:80:b5:6a:70:
         ae:e3:2c:6b:b0:82:7b:90:df:60:e2:8d:d9:50:f8:b0:34:64:
         98:f7:6b:5e:ac:53:83:9d:34:b8:7d:be:55:2d:0f:e2:36:1c:
         b9:1a:f0:52:24:48:8d:2c:54:88:9b:a8:c9:0c:0e:05:ea:df:
         72:7b:63:ec:03:8e:ce:b8:15:0d:50:43:b9:bd:17:ee:d4:ca:
         19:aa:23:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:11:32 2025 by rpki-client