Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/61wrcZlstRgkg1xQLMAxDrNjhkc.roa
File:                     61wrcZlstRgkg1xQLMAxDrNjhkc.roa (raw, json)
Hash identifier:          KZJnegTdputVvno19N5lhfszuHp8mbFGg+WYVd6fNBE=
Subject key identifier:   EB:5C:2B:71:99:6C:B5:18:24:83:5C:50:2C:C0:31:0E:B3:63:86:47
Certificate issuer:       /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial:       019F646D7A2D642D4AD4A8B580E93ADB3B53
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/61wrcZlstRgkg1xQLMAxDrNjhkc.roa
Signing time:             Wed 15 Jul 2026 06:18:43 +0000
ROA not before:           Wed 15 Jul 2026 06:18:43 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     25369
IP address blocks:        77.105.50.0/24 maxlen: 24
                          109.121.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Jul 2026 08:41:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:64:6d:7a:2d:64:2d:4a:d4:a8:b5:80:e9:3a:db:3b:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
        Validity
            Not Before: Jul 15 06:18:43 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=eb5c2b71996cb51824835c502cc0310eb3638647
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a9:cd:ae:9f:48:ac:5c:a5:69:ed:01:32:6e:
                    25:f3:23:4f:0d:fb:6e:ae:1c:3a:4b:47:bb:e0:cb:
                    10:42:ec:7c:63:aa:b7:93:19:02:06:f2:98:61:51:
                    28:aa:81:90:e9:b7:40:99:30:df:80:02:53:5e:9f:
                    7f:29:de:11:76:f7:0f:5f:be:f9:11:53:9d:90:7c:
                    d0:2e:fc:64:ce:4a:78:f4:55:dc:73:30:d9:da:40:
                    ef:06:73:dc:b9:58:75:0c:0d:c6:12:9e:f3:bc:9a:
                    92:6f:b9:1a:a3:bb:45:54:e4:fc:3a:41:14:54:fa:
                    a4:aa:6f:a8:93:cb:88:0a:9a:ad:59:f4:ff:33:bd:
                    a5:3a:a6:6e:b8:1e:0a:94:bb:9d:a9:a3:1c:f5:54:
                    7e:3b:2c:78:75:b2:29:32:7d:23:81:c4:bd:d8:f1:
                    96:07:4c:af:58:28:e9:55:96:88:e1:cc:ca:b0:c6:
                    0b:81:10:6f:48:45:fc:28:54:e5:54:86:0e:5f:c3:
                    7b:c2:b4:54:be:b3:63:03:39:66:6e:3a:eb:ef:cc:
                    15:f1:56:5a:08:39:5f:4e:7e:1b:02:40:88:ae:0c:
                    27:42:25:a2:f6:6e:63:75:62:38:26:f7:44:c7:e1:
                    90:1b:42:44:b3:04:79:ba:db:7b:65:87:ab:d1:2a:
                    3f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:5C:2B:71:99:6C:B5:18:24:83:5C:50:2C:C0:31:0E:B3:63:86:47
            X509v3 Authority Key Identifier:
                keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/61wrcZlstRgkg1xQLMAxDrNjhkc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.105.50.0/24
                  109.121.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:b5:f7:da:a4:21:89:f8:ff:63:e9:fe:d1:83:85:fd:ea:f3:
         30:7c:11:75:ee:ae:de:ab:ea:9d:d6:a4:91:5a:86:cd:be:01:
         19:f0:6e:f7:3f:46:a2:27:91:28:1d:96:10:0d:2f:80:16:a3:
         53:98:63:ea:f9:0b:c6:42:ad:28:0e:70:2c:2a:16:d6:d1:af:
         9c:32:0a:5a:e1:e4:6a:07:ab:6d:94:7d:71:f7:aa:3d:a5:8d:
         35:b9:2a:96:ab:d6:6c:43:b5:18:e6:1e:67:96:a7:13:25:b1:
         7f:96:a2:4f:70:b9:03:88:f9:f2:b2:fe:9a:d1:1a:93:6f:4d:
         51:47:17:4a:5f:0e:1e:85:ba:98:4d:fe:b3:af:84:2b:a0:d6:
         0f:14:7e:a8:67:89:8e:44:cc:57:57:96:4c:bf:f4:e3:be:64:
         98:b6:bd:39:fc:81:39:f2:a3:26:3b:f9:b8:58:aa:ad:3e:49:
         70:2f:2f:2a:b6:07:2f:72:c6:e1:14:69:c2:8a:c0:e7:ee:92:
         65:75:0a:90:61:63:dd:26:17:4b:39:a3:72:f5:ef:9b:46:00:
         c6:fd:c2:35:1a:15:6d:68:64:ee:2f:ec:62:42:25:a6:eb:55:
         e1:75:3c:16:41:5c:1e:84:82:25:50:7c:82:7d:7b:fc:c7:0e:
         53:b6:be:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 16:38:16 2026 by rpki-client