Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/1-VWqUG1ZztX0xozlKQ9Ub8K9iuI.roa
File:                     1-VWqUG1ZztX0xozlKQ9Ub8K9iuI.roa (raw, json)
Hash identifier:          2NETK7ksYSMDiKD2sFPkQ/hi4oFcm0SgHB0e6jFzDmU=
Subject key identifier:   F9:55:AA:50:6D:59:CE:D5:F4:C6:8C:E5:29:0F:54:6F:C2:BD:8A:E2
Certificate issuer:       /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial:       019F699B33CCD51BD1041881113D7E39207B
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/1-VWqUG1ZztX0xozlKQ9Ub8K9iuI.roa
Signing time:             Thu 16 Jul 2026 06:26:46 +0000
ROA not before:           Thu 16 Jul 2026 06:26:46 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     9009
IP address blocks:        79.121.188.0/23 maxlen: 24
                          79.121.194.0/23 maxlen: 24
                          79.121.208.0/23 maxlen: 24
                          79.121.222.0/23 maxlen: 24
                          79.121.226.0/23 maxlen: 24
                          79.121.238.0/23 maxlen: 24
                          92.244.162.0/23 maxlen: 24
                          92.244.164.0/23 maxlen: 24
                          92.244.166.0/23 maxlen: 24
                          92.244.168.0/23 maxlen: 24
                          92.244.170.0/23 maxlen: 24
                          92.244.172.0/23 maxlen: 24
                          93.152.0.0/23 maxlen: 24
                          93.152.10.0/23 maxlen: 24
                          93.152.12.0/22 maxlen: 24
                          93.152.18.0/24 maxlen: 24
                          93.152.21.0/24 maxlen: 24
                          93.152.48.0/22 maxlen: 24
                          93.152.64.0/22 maxlen: 24
                          93.152.92.0/24 maxlen: 24
                          93.152.116.0/22 maxlen: 24
                          94.185.130.0/23 maxlen: 24
                          94.185.132.0/23 maxlen: 24
                          94.185.136.0/23 maxlen: 24
                          94.185.142.0/23 maxlen: 24
                          94.185.148.0/23 maxlen: 24
                          94.185.152.0/22 maxlen: 24
                          94.185.152.0/23 maxlen: 24
                          94.185.154.0/23 maxlen: 24
                          94.185.168.0/22 maxlen: 24
                          94.185.168.0/23 maxlen: 24
                          94.185.170.0/23 maxlen: 24
                          94.185.172.0/23 maxlen: 24
                          94.185.180.0/23 maxlen: 24
                          94.185.186.0/23 maxlen: 24
                          94.185.192.0/22 maxlen: 24
                          94.185.192.0/23 maxlen: 24
                          94.185.194.0/23 maxlen: 24
                          94.185.196.0/23 maxlen: 24
                          94.185.200.0/22 maxlen: 24
                          94.185.200.0/23 maxlen: 24
                          94.185.202.0/23 maxlen: 24
                          94.185.204.0/23 maxlen: 24
                          94.185.214.0/23 maxlen: 24
                          94.185.216.0/23 maxlen: 24
                          94.185.220.0/22 maxlen: 24
                          94.185.220.0/23 maxlen: 24
                          94.185.222.0/23 maxlen: 24
                          94.185.230.0/23 maxlen: 24
                          94.185.232.0/23 maxlen: 24
                          95.177.3.0/24 maxlen: 24
                          95.177.5.0/24 maxlen: 24
                          95.177.8.0/23 maxlen: 24
                          95.177.13.0/24 maxlen: 24
                          95.177.54.0/23 maxlen: 24
                          95.177.72.0/23 maxlen: 24
                          109.174.128.0/22 maxlen: 24
                          109.174.128.0/23 maxlen: 24
                          109.174.130.0/23 maxlen: 24
                          109.174.134.0/23 maxlen: 24
                          109.174.136.0/23 maxlen: 24
                          109.174.140.0/22 maxlen: 24
                          109.174.140.0/23 maxlen: 24
                          109.174.142.0/23 maxlen: 24
                          109.174.152.0/23 maxlen: 24
                          109.174.160.0/22 maxlen: 24
                          109.174.160.0/23 maxlen: 24
                          109.174.162.0/23 maxlen: 24
                          109.174.168.0/23 maxlen: 24
                          109.174.172.0/23 maxlen: 24
                          109.174.250.0/23 maxlen: 24
                          109.174.252.0/23 maxlen: 24
                          109.174.254.0/23 maxlen: 24
                          109.204.0.0/22 maxlen: 24
                          109.204.16.0/22 maxlen: 24
                          109.204.21.0/24 maxlen: 24
                          109.204.24.0/22 maxlen: 24
                          109.204.29.0/24 maxlen: 24
                          109.204.41.0/24 maxlen: 24
                          109.204.45.0/24 maxlen: 24
                          109.204.51.0/24 maxlen: 24
                          109.204.54.0/24 maxlen: 24
                          109.204.58.0/24 maxlen: 24
                          109.204.96.0/22 maxlen: 24
                          109.204.112.0/24 maxlen: 24
                          109.204.117.0/24 maxlen: 24
                          109.204.118.0/24 maxlen: 24
                          109.204.121.0/24 maxlen: 24
                          109.204.124.0/23 maxlen: 24
                          195.40.18.0/23 maxlen: 24
                          195.40.28.0/23 maxlen: 24
                          195.40.96.0/23 maxlen: 24
                          195.40.108.0/23 maxlen: 24
                          195.40.162.0/23 maxlen: 24
                          195.72.167.0/24 maxlen: 24
                          195.172.96.0/23 maxlen: 24
                          195.172.100.0/23 maxlen: 24
                          195.172.104.0/23 maxlen: 24
                          195.172.192.0/23 maxlen: 24
                          195.172.198.0/23 maxlen: 24
                          195.172.202.0/23 maxlen: 24
                          212.134.11.0/24 maxlen: 24
                          212.135.0.0/24 maxlen: 24
                          212.135.2.0/23 maxlen: 24
                          217.79.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Jul 2026 17:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:69:9b:33:cc:d5:1b:d1:04:18:81:11:3d:7e:39:20:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e20b034e2c497b1884488def106972704765029
        Validity
            Not Before: Jul 16 06:26:46 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f955aa506d59ced5f4c68ce5290f546fc2bd8ae2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f0:a9:7a:3e:7c:5f:e3:da:e5:07:fc:52:0a:
                    a8:bc:b4:cf:60:b1:8c:e7:a0:07:71:ba:1a:56:00:
                    8a:7d:4e:31:a9:55:9b:a0:b7:e3:9f:2e:66:72:32:
                    a1:1d:ea:ba:de:fe:ab:c4:41:48:d7:50:e5:92:f1:
                    6c:d1:22:f5:15:46:d9:c4:ca:b0:90:72:0e:1a:fc:
                    01:41:6d:b0:2e:e7:37:6b:8f:b2:73:88:ef:e0:3b:
                    e6:4b:2e:33:ca:b5:24:69:62:a5:25:f9:00:6b:f5:
                    86:9e:26:39:1f:da:92:7c:3e:87:fb:ec:ec:db:5d:
                    87:23:d0:f0:46:3a:ad:a7:c4:22:93:da:05:36:5b:
                    d0:ef:bb:3f:ff:6c:d1:18:63:80:17:97:fd:3f:6a:
                    fa:50:4f:42:ab:a6:a2:2a:26:e5:2a:57:6f:39:87:
                    74:0f:ac:8a:0d:9d:f0:bd:7c:d6:46:01:ae:18:38:
                    3f:3c:e7:63:b3:55:6d:18:c8:c8:c0:56:33:46:e6:
                    83:e7:96:4a:98:5f:03:97:e0:a4:83:a9:ea:bc:d5:
                    94:d8:09:3c:3b:f5:4c:36:f9:f8:90:82:dc:8d:cb:
                    af:f9:19:0e:68:8f:ad:3c:ae:74:a4:13:31:65:da:
                    a4:f3:90:17:b7:e7:7d:4a:21:88:37:3e:21:77:5c:
                    db:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:55:AA:50:6D:59:CE:D5:F4:C6:8C:E5:29:0F:54:6F:C2:BD:8A:E2
            X509v3 Authority Key Identifier:
                keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/1-VWqUG1ZztX0xozlKQ9Ub8K9iuI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.121.188.0/23
                  79.121.194.0/23
                  79.121.208.0/23
                  79.121.222.0/23
                  79.121.226.0/23
                  79.121.238.0/23
                  92.244.162.0-92.244.173.255
                  93.152.0.0/23
                  93.152.10.0-93.152.15.255
                  93.152.18.0/24
                  93.152.21.0/24
                  93.152.48.0/22
                  93.152.64.0/22
                  93.152.92.0/24
                  93.152.116.0/22
                  94.185.130.0-94.185.133.255
                  94.185.136.0/23
                  94.185.142.0/23
                  94.185.148.0/23
                  94.185.152.0/22
                  94.185.168.0-94.185.173.255
                  94.185.180.0/23
                  94.185.186.0/23
                  94.185.192.0-94.185.197.255
                  94.185.200.0-94.185.205.255
                  94.185.214.0-94.185.217.255
                  94.185.220.0/22
                  94.185.230.0-94.185.233.255
                  95.177.3.0/24
                  95.177.5.0/24
                  95.177.8.0/23
                  95.177.13.0/24
                  95.177.54.0/23
                  95.177.72.0/23
                  109.174.128.0/22
                  109.174.134.0-109.174.137.255
                  109.174.140.0/22
                  109.174.152.0/23
                  109.174.160.0/22
                  109.174.168.0/23
                  109.174.172.0/23
                  109.174.250.0-109.174.255.255
                  109.204.0.0/22
                  109.204.16.0/22
                  109.204.21.0/24
                  109.204.24.0/22
                  109.204.29.0/24
                  109.204.41.0/24
                  109.204.45.0/24
                  109.204.51.0/24
                  109.204.54.0/24
                  109.204.58.0/24
                  109.204.96.0/22
                  109.204.112.0/24
                  109.204.117.0-109.204.118.255
                  109.204.121.0/24
                  109.204.124.0/23
                  195.40.18.0/23
                  195.40.28.0/23
                  195.40.96.0/23
                  195.40.108.0/23
                  195.40.162.0/23
                  195.72.167.0/24
                  195.172.96.0/23
                  195.172.100.0/23
                  195.172.104.0/23
                  195.172.192.0/23
                  195.172.198.0/23
                  195.172.202.0/23
                  212.134.11.0/24
                  212.135.0.0/24
                  212.135.2.0/23
                  217.79.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:dc:35:5c:61:4b:dd:98:84:d1:ef:89:b1:00:18:c9:49:7f:
         cf:c0:2d:a6:9b:c5:56:eb:43:a1:a0:bc:6d:85:74:92:8f:b6:
         c0:5e:25:d3:5f:6e:bd:6a:9f:ff:e2:b6:51:91:6f:b7:30:8e:
         95:38:f3:53:8c:ca:82:ba:bc:98:db:ed:1c:74:04:57:77:13:
         5d:3a:66:97:6d:f4:ab:b4:c3:24:bf:3d:f5:0d:f2:1b:30:9d:
         f3:ad:53:df:34:8b:a8:45:01:eb:f1:53:76:ad:8e:a2:c5:30:
         53:5f:2f:fd:2a:86:f4:f6:21:3a:51:c7:5f:fb:a8:6d:ff:3a:
         08:00:9b:0b:71:be:b5:f1:1b:b3:02:ca:b3:fa:0b:dd:96:41:
         4b:8e:16:07:00:2e:75:39:78:d6:f6:20:80:52:c4:57:50:29:
         10:40:b5:c1:2f:ed:8a:bd:5a:a8:17:ff:bf:b7:22:b8:a1:a2:
         50:85:52:57:ca:d3:a3:14:2f:18:dc:5a:74:16:39:e6:64:89:
         69:01:fa:25:37:92:79:cc:24:0d:e8:8a:17:56:79:ff:d8:7e:
         17:cd:7e:14:f3:b9:d4:d7:3a:f0:ed:65:45:9a:2c:f2:f0:b4:
         71:dc:72:d9:f6:b9:50:11:c9:36:5e:43:a1:87:3a:8d:01:1c:
         1f:49:6c:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:44:22 2026 by rpki-client