Route Origin Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/8m4Zi-L-N_deDTd1lO1mEJ9B-IE.roa
File:                     8m4Zi-L-N_deDTd1lO1mEJ9B-IE.roa (raw, json)
Hash identifier:          FAFDSMLnaXrQ/uULo0MOt56GfSLnZZWEHl7wCl/yDqc=
Subject key identifier:   F2:6E:19:8B:E2:FE:37:F7:5E:0D:37:75:94:ED:66:10:9F:41:F8:81
Certificate issuer:       /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial:       019FF062C077A444A54EE69FAEEFC12223D6
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/8m4Zi-L-N_deDTd1lO1mEJ9B-IE.roa
Signing time:             Tue 11 Aug 2026 10:33:51 +0000
ROA not before:           Tue 11 Aug 2026 10:33:51 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     214459
IP address blocks:        77.83.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 07:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f0:62:c0:77:a4:44:a5:4e:e6:9f:ae:ef:c1:22:23:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
        Validity
            Not Before: Aug 11 10:33:51 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f26e198be2fe37f75e0d377594ed66109f41f881
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e2:94:85:b7:10:0a:ab:0e:b8:bd:b1:cd:de:
                    d5:87:3c:cd:3a:7b:f0:1f:33:c3:f6:dc:4c:7b:d6:
                    ae:a7:f7:45:52:33:1e:3f:56:04:9e:3b:16:78:34:
                    78:5a:56:34:fa:9b:e9:ed:9d:e2:93:c3:5e:c5:0e:
                    fb:dd:d4:aa:a7:93:ca:2a:71:af:df:c9:ee:3d:53:
                    8b:61:f7:5d:0d:db:a3:66:e4:12:91:3a:38:44:f3:
                    c1:b4:6b:4a:9d:79:45:db:13:ee:23:e3:91:53:97:
                    fa:e3:24:55:d5:33:51:8b:79:bc:71:8c:6c:30:e6:
                    24:b7:8f:80:33:5f:93:21:08:dd:55:92:35:c9:bf:
                    6f:bd:92:d7:36:6e:c7:4d:04:5f:c0:58:8c:df:99:
                    40:06:61:5f:83:39:b0:cc:e1:55:87:84:70:0e:18:
                    c6:01:1a:3b:da:0a:8e:dd:0e:14:35:b3:1f:7a:44:
                    f1:53:18:1a:b2:4b:40:a1:0c:84:f1:51:0f:6d:e4:
                    4c:b9:63:cd:04:c2:5b:4d:fa:f2:18:bb:de:fe:af:
                    02:c9:98:27:38:89:98:64:e9:b3:f0:1e:ee:f9:c5:
                    0e:65:ef:d6:a3:a9:a5:ec:35:af:15:08:a4:c9:06:
                    eb:aa:94:d6:92:da:3a:6c:94:f1:75:5d:c3:4a:19:
                    13:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:6E:19:8B:E2:FE:37:F7:5E:0D:37:75:94:ED:66:10:9F:41:F8:81
            X509v3 Authority Key Identifier:
                keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/8m4Zi-L-N_deDTd1lO1mEJ9B-IE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.83.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:6e:c5:4e:11:33:9a:2b:5f:75:ef:92:f2:4d:56:17:df:fb:
         d4:dc:ef:2d:1a:73:9a:0d:ad:65:02:c2:63:23:0f:25:b6:04:
         08:6d:5a:39:76:20:2c:20:1c:05:5a:ef:76:f7:bc:64:64:f7:
         b4:b2:5f:68:a2:22:e2:7b:43:8f:c3:b2:12:1d:d8:23:4a:9e:
         4a:2b:91:c6:3b:8d:bb:93:fe:90:49:b1:e1:1b:27:02:fe:a7:
         d7:57:98:38:ef:3f:89:4b:9d:92:88:dc:01:e5:40:03:74:56:
         17:72:19:5c:2d:04:2a:46:d0:c3:cf:f9:f3:31:22:ab:8c:23:
         0b:a7:b4:b8:5b:90:2b:6a:d7:47:d4:35:5c:13:5f:3a:33:62:
         5b:87:ac:e6:38:d6:1b:9b:df:22:58:73:e4:53:95:62:f9:8f:
         99:83:86:db:d0:18:52:41:35:88:b5:79:5e:81:ea:ed:ef:d2:
         b0:90:2f:18:78:8a:b8:58:52:95:28:2c:2c:50:e7:38:8e:e6:
         7a:9e:78:57:a2:56:7c:46:1e:79:7c:eb:07:14:e2:c3:0d:64:
         a7:a2:a8:72:0a:eb:01:b3:bc:a0:e0:e0:9b:1b:97:cf:e5:60:
         20:65:ad:c2:a5:c9:0a:fd:5e:f8:f8:a5:6f:ef:88:8d:7f:48:
         b4:bf:ad:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 16:28:58 2026 by rpki-client