Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/7sIPTAeOy2kehak_ZYl3klSX5OA.roa
File:                     7sIPTAeOy2kehak_ZYl3klSX5OA.roa (raw, json)
Hash identifier:          SSl5nHGY/Hd1NNYQPtabbEgXJ8q7EyQgpIcBB1JxcOM=
Subject key identifier:   EE:C2:0F:4C:07:8E:CB:69:1E:85:A9:3F:65:89:77:92:54:97:E4:E0
Certificate issuer:       /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial:       019F1C2DFE267800960F8A34BBC319BB7F79
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/7sIPTAeOy2kehak_ZYl3klSX5OA.roa
Signing time:             Wed 01 Jul 2026 05:36:43 +0000
ROA not before:           Wed 01 Jul 2026 05:36:43 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     215703
IP address blocks:        81.18.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 Jul 2026 18:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:1c:2d:fe:26:78:00:96:0f:8a:34:bb:c3:19:bb:7f:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
        Validity
            Not Before: Jul  1 05:36:43 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=eec20f4c078ecb691e85a93f658977925497e4e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:e1:d9:c6:86:59:b2:ba:4c:6a:6b:96:01:13:
                    55:16:65:55:36:66:30:d8:c4:c1:4e:55:a8:0e:c5:
                    d7:2f:7a:88:be:de:2e:cc:7b:64:4b:ed:8f:b1:43:
                    20:7c:ab:2d:f9:68:28:c9:0c:8e:8d:ee:dd:1c:20:
                    bd:c6:0b:6e:b1:91:64:dd:61:bc:a7:9c:cd:81:71:
                    91:c5:f8:1e:58:27:1a:87:65:27:a1:dd:46:95:7c:
                    13:e0:5c:82:8f:e9:ce:c4:c8:66:9a:d9:07:83:d5:
                    f8:cc:ef:3e:c4:7b:f4:a1:e6:be:5a:47:14:82:b2:
                    87:be:e8:6a:8e:25:27:3c:a9:19:85:d8:46:fa:2f:
                    af:98:6a:4a:1c:0a:aa:02:5a:a1:dd:0e:89:2f:f9:
                    88:93:0b:56:36:a1:11:1b:84:18:4f:2c:9b:36:c2:
                    23:07:4d:ec:8f:a2:21:94:c6:4f:1e:64:16:98:94:
                    63:a1:53:2b:0a:d7:dc:f5:2b:7a:c0:8f:bd:f4:f2:
                    94:fa:8a:36:00:50:6b:1d:be:15:bd:23:b5:b3:dc:
                    30:82:5a:96:64:13:6a:47:b1:59:d3:6d:2f:26:ab:
                    4e:e9:96:0f:c5:09:62:74:c6:14:3d:01:14:c4:b8:
                    3d:7e:72:1b:d9:b4:ad:67:df:61:60:8d:02:00:5f:
                    57:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:C2:0F:4C:07:8E:CB:69:1E:85:A9:3F:65:89:77:92:54:97:E4:E0
            X509v3 Authority Key Identifier:
                keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/7sIPTAeOy2kehak_ZYl3klSX5OA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.18.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:38:07:f7:90:e5:d4:0f:fd:8e:92:02:63:17:09:04:4e:6b:
         d0:5b:56:a1:c3:49:0a:75:c2:cb:c2:8e:a1:c1:95:38:ac:9c:
         36:10:df:dd:0b:2b:a3:3c:b2:11:68:f0:b0:6b:da:47:76:de:
         80:b6:31:b0:38:bd:23:50:31:7f:4d:00:72:de:58:79:25:91:
         da:f7:97:e7:f8:7e:c5:51:63:99:ee:b8:1f:67:a9:10:8b:11:
         70:34:a6:26:2c:20:d9:d9:ba:24:bb:98:88:98:81:89:c1:ec:
         4c:df:62:7a:8d:87:cd:f9:8a:92:86:b5:63:2f:75:2d:da:8d:
         6a:8d:f6:ca:b7:24:02:42:7b:a8:f9:b9:25:d3:a7:9e:70:91:
         ae:1b:a1:a8:8d:06:17:80:14:06:54:2e:cd:2c:95:9a:b1:32:
         ea:ea:32:97:e9:44:c3:57:f6:e9:dc:29:1f:e7:fa:b1:c7:a3:
         48:51:76:28:4e:e5:95:a3:71:26:6e:e5:c2:4d:6d:62:63:3e:
         05:79:e5:c2:ae:70:34:7c:4e:b7:9e:04:8a:5b:da:eb:4d:b6:
         5a:a8:c4:d0:86:39:52:6f:86:53:96:fb:a1:b3:7f:bd:84:0e:
         64:1d:f3:6a:a9:9b:79:a7:2a:60:86:9d:d0:e1:97:12:9e:cb:
         a0:91:bd:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 02:20:04 2026 by rpki-client