Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/662s2TygAc6nEJqbz3P5Mky3xjo.roa
File:                     662s2TygAc6nEJqbz3P5Mky3xjo.roa (raw, json)
Hash identifier:          v339Hjmsm6/WPqwBOuMTmQ9gDbsvqH6bS3cgr6F/8wo=
Subject key identifier:   EB:AD:AC:D9:3C:A0:01:CE:A7:10:9A:9B:CF:73:F9:32:4C:B7:C6:3A
Certificate issuer:       /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial:       019F1655BB0528A213F7F1B9636AFC820E05
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/662s2TygAc6nEJqbz3P5Mky3xjo.roa
Signing time:             Tue 30 Jun 2026 02:22:24 +0000
ROA not before:           Tue 30 Jun 2026 02:22:24 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     135230
IP address blocks:        82.108.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Jul 2026 16:45:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:16:55:bb:05:28:a2:13:f7:f1:b9:63:6a:fc:82:0e:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e20b034e2c497b1884488def106972704765029
        Validity
            Not Before: Jun 30 02:22:24 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ebadacd93ca001cea7109a9bcf73f9324cb7c63a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:d1:27:7d:7f:b6:08:b0:36:2a:45:43:ee:d5:
                    31:13:15:c0:a4:34:2c:34:78:a0:84:82:3d:fb:e2:
                    28:c9:6c:ae:03:f8:02:62:49:fb:b4:d2:5b:13:23:
                    64:a3:86:c1:45:3a:b6:44:2b:2a:2d:fc:24:d1:e6:
                    49:d8:74:f5:f2:5f:22:fd:8c:fa:47:fd:ee:1d:db:
                    6a:8e:5e:48:e2:df:96:b2:5b:f3:15:a7:b0:03:04:
                    b3:60:a7:ac:6b:43:ed:b7:79:ee:8c:8a:ea:68:2d:
                    cf:5d:6f:c1:6a:e1:d1:55:e9:f5:37:6b:fd:cc:dd:
                    d5:ac:76:92:02:a4:95:56:1c:16:8d:a3:c5:a8:2f:
                    b8:67:dc:27:4c:5b:38:cc:28:f8:00:97:96:78:0e:
                    10:e6:04:6d:fe:33:49:7c:d3:99:9c:c9:0c:32:98:
                    3f:42:2a:d1:60:31:8d:34:78:cd:07:b9:1c:d4:87:
                    67:15:01:c1:b2:b6:5b:f3:dd:d0:3b:a8:d3:4c:06:
                    b5:dd:75:85:22:63:b6:ec:55:ec:c2:46:99:0f:a2:
                    5f:c4:e7:4a:61:fa:35:37:08:c9:f7:28:db:ef:06:
                    d3:1f:0c:82:14:50:c9:a5:16:83:1e:72:b7:c3:6a:
                    ae:13:6d:47:6e:38:24:fa:d9:e0:d7:28:8b:f2:3e:
                    db:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:AD:AC:D9:3C:A0:01:CE:A7:10:9A:9B:CF:73:F9:32:4C:B7:C6:3A
            X509v3 Authority Key Identifier:
                keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/662s2TygAc6nEJqbz3P5Mky3xjo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.108.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:f6:e7:4e:cf:00:51:00:ac:a5:3f:38:47:00:c6:f8:0b:c5:
         a1:02:c2:43:66:b7:2b:aa:b8:c8:f9:59:68:e6:b7:e5:02:0a:
         b9:9b:9d:df:75:25:49:8d:2e:b9:48:d5:76:34:db:51:f0:b6:
         28:d6:49:69:18:9f:b8:00:80:2e:af:6a:1b:44:5c:a8:16:fb:
         57:c3:27:c2:27:e7:11:00:9c:b1:19:f7:67:0f:0f:e5:17:64:
         aa:63:57:a8:42:07:53:d3:43:80:dd:3d:a4:fe:d3:7f:58:27:
         eb:ad:07:ea:85:d2:dd:45:76:8a:49:b5:9e:1b:b1:dc:d0:04:
         6d:45:f6:3c:19:dd:a1:d6:41:1d:c1:64:67:7f:23:3a:c1:bc:
         f4:d9:de:6b:ca:2b:d1:6f:db:1a:b7:50:09:51:73:c8:b5:82:
         72:01:bd:a0:10:72:40:a7:2d:be:a2:28:de:cc:ff:9e:1a:fc:
         5b:3e:07:e7:6e:c0:ab:85:72:3a:b0:9e:19:a2:78:54:db:d1:
         b0:8d:f6:d4:7d:01:a2:f5:9a:bc:7e:0b:7d:b0:25:8a:de:14:
         e9:38:34:0d:21:f7:b0:a4:d8:46:25:be:60:0d:48:3b:e3:64:
         10:f7:94:97:35:2d:5f:9d:40:c9:f7:b0:1d:a1:e7:38:53:de:
         8f:2b:e5:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:58:40 2026 by rpki-client