Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/E7Jbis5-EQrg5OTGlFKvRJF_Ahs.roa
File:                     E7Jbis5-EQrg5OTGlFKvRJF_Ahs.roa (raw, json)
Hash identifier:          hh1UDZ+kOsJBw9oyETebj1CaUiyLPAozvFu5Lum8oW8=
Subject key identifier:   13:B2:5B:8A:CE:7E:11:0A:E0:E4:E4:C6:94:52:AF:44:91:7F:02:1B
Certificate issuer:       /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial:       019FAC766BEB7E352B54E5669BC00EE652C4
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/E7Jbis5-EQrg5OTGlFKvRJF_Ahs.roa
Signing time:             Wed 29 Jul 2026 06:01:09 +0000
ROA not before:           Wed 29 Jul 2026 06:01:09 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     219185
IP address blocks:        82.110.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Aug 2026 13:02:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:76:6b:eb:7e:35:2b:54:e5:66:9b:c0:0e:e6:52:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e20b034e2c497b1884488def106972704765029
        Validity
            Not Before: Jul 29 06:01:09 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=13b25b8ace7e110ae0e4e4c69452af44917f021b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e6:d6:39:3d:07:25:5f:d6:e2:3d:81:44:66:
                    09:77:3c:2a:53:e3:17:81:62:44:f8:52:c0:1f:3b:
                    3a:23:0b:ba:73:0d:37:e3:67:d3:e3:07:ce:eb:a7:
                    40:f6:df:26:86:6b:ad:b3:30:6e:88:10:f1:12:7b:
                    08:43:70:f9:f5:8f:0b:1f:51:01:a3:3f:51:0d:b3:
                    d5:53:e4:2f:84:cc:91:9c:2c:ef:5e:f5:93:78:bd:
                    0a:f3:b6:95:5f:c5:25:63:33:39:7d:97:4e:a5:c4:
                    73:25:32:8a:7c:f9:6c:95:8e:56:51:d9:cf:82:b4:
                    5d:d1:7d:1c:c7:de:ee:46:3a:10:a3:1f:a5:b8:03:
                    66:9d:b7:cd:f2:b5:30:7a:22:8c:f2:d8:39:2a:03:
                    b3:3f:96:6f:5d:fe:18:25:1e:93:6b:79:ef:10:0f:
                    d1:e5:a8:5b:d2:ba:79:46:2e:6d:53:09:85:55:aa:
                    b0:45:18:76:62:24:ae:bc:94:04:52:4b:f6:49:72:
                    1b:9d:f8:fb:58:95:e6:9c:89:ad:85:5c:1c:db:b4:
                    49:65:0f:53:b4:0d:c7:46:8f:ef:1b:94:48:6b:7c:
                    df:6e:59:e5:b9:ba:cc:92:4e:99:48:3f:f9:e4:ea:
                    c8:1e:be:ad:61:28:fa:ee:e3:30:c7:9e:6c:20:44:
                    ba:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:B2:5B:8A:CE:7E:11:0A:E0:E4:E4:C6:94:52:AF:44:91:7F:02:1B
            X509v3 Authority Key Identifier:
                keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/E7Jbis5-EQrg5OTGlFKvRJF_Ahs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.110.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:3d:67:a5:b4:57:d5:5a:00:03:9f:0c:69:1a:0e:17:8c:02:
         a6:96:f4:76:12:c7:a7:a9:68:de:16:60:69:7d:09:8a:9a:95:
         40:1a:3f:c2:90:44:5c:2b:06:29:29:ea:19:44:12:c2:87:d7:
         45:81:7c:4a:93:42:63:d6:4e:ed:4f:76:c0:45:64:ff:64:56:
         56:a7:39:f7:64:c3:e6:96:71:00:76:a7:a7:31:d4:4b:3e:23:
         2c:77:fb:4e:c6:4f:b1:cb:cd:45:c4:aa:fb:36:dd:f7:df:5e:
         34:45:5b:0a:1b:4a:2f:e3:79:04:09:ac:02:ed:24:0a:5b:cb:
         51:fa:e7:7c:a9:67:00:44:42:f4:22:a0:37:85:a3:41:ec:98:
         01:e4:1b:9c:fc:0a:58:31:84:c5:2c:95:be:29:93:ad:4f:8a:
         3c:55:ba:6a:ac:bb:f9:fa:a1:89:85:27:dd:b4:e9:ea:f6:84:
         b0:04:6e:e7:23:15:5f:65:cc:40:1f:3d:97:18:3d:a0:27:b5:
         a0:ad:af:e6:31:03:62:5c:7b:12:3d:bf:0b:ac:ed:62:c0:c8:
         8c:af:cc:b7:f0:ef:d8:27:1d:13:7e:b9:67:50:e6:2e:61:de:
         23:52:02:84:e7:f4:98:ff:4b:1b:5a:20:53:3b:1f:6e:ab:39:
         2c:ea:51:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 19:26:52 2026 by rpki-client