Route Origin Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/MLmOsUT1LV7hJ1KuvCEPtNc7A8A.roa
File:                     MLmOsUT1LV7hJ1KuvCEPtNc7A8A.roa (raw, json)
Hash identifier:          j0dCZ6HzsaBPgdIlZvlBZaMIrvPhIOpE/pNynclSmtc=
Subject key identifier:   30:B9:8E:B1:44:F5:2D:5E:E1:27:52:AE:BC:21:0F:B4:D7:3B:03:C0
Certificate issuer:       /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial:       019FF6118A3A84231C0C57246F97F7789555
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/MLmOsUT1LV7hJ1KuvCEPtNc7A8A.roa
Signing time:             Wed 12 Aug 2026 13:02:52 +0000
ROA not before:           Wed 12 Aug 2026 13:02:52 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     401009
IP address blocks:        82.110.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 04 Sep 2026 13:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f6:11:8a:3a:84:23:1c:0c:57:24:6f:97:f7:78:95:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e20b034e2c497b1884488def106972704765029
        Validity
            Not Before: Aug 12 13:02:52 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=30b98eb144f52d5ee12752aebc210fb4d73b03c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:94:22:89:85:74:b1:9c:bf:d5:fe:b2:a3:63:
                    fd:8c:f7:5f:b1:6d:67:96:bd:e5:4b:29:08:b0:62:
                    a0:8a:e2:06:74:d1:39:c7:17:71:fc:cf:74:43:7e:
                    1b:92:91:84:89:81:71:79:f0:5a:d4:7f:ab:ed:70:
                    3b:18:9f:b5:b4:04:02:e2:a6:07:22:b5:61:ce:8d:
                    0d:09:78:9f:de:43:2f:3a:26:c4:66:ab:d2:64:33:
                    7f:97:a1:77:05:d0:39:04:15:1f:3d:40:88:92:48:
                    cc:b8:d8:88:2c:8e:14:96:2a:8d:1e:92:c5:ee:fd:
                    87:73:6f:77:98:4a:eb:bc:48:10:12:69:78:c9:40:
                    76:51:7a:39:ee:46:2e:34:ad:a1:97:35:61:f5:62:
                    2c:15:76:05:82:7c:38:4b:3a:de:52:6d:e4:50:2b:
                    54:72:ad:6f:ed:24:cb:d6:d8:a2:d0:72:9f:e8:2b:
                    9c:df:de:45:c5:4d:20:b3:ed:b4:63:30:49:2b:a8:
                    31:1e:26:ac:f3:63:d1:ac:63:d7:bf:09:0f:b1:da:
                    06:03:ab:e5:ed:f7:9d:70:f0:8a:20:d8:62:56:71:
                    32:82:58:7f:b1:48:eb:e0:74:3f:5e:11:04:09:ce:
                    63:bd:bd:28:a9:31:c1:79:ad:59:0e:6e:73:9a:4f:
                    39:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:B9:8E:B1:44:F5:2D:5E:E1:27:52:AE:BC:21:0F:B4:D7:3B:03:C0
            X509v3 Authority Key Identifier:
                keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/MLmOsUT1LV7hJ1KuvCEPtNc7A8A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.110.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c3:30:3d:58:f4:2f:4c:45:eb:ea:fd:65:9c:62:db:f9:02:2f:
         27:5f:78:4e:31:35:37:9d:57:e7:50:6c:e8:17:2c:6e:fb:6e:
         53:1d:18:f7:63:c0:2c:04:e5:aa:66:9c:52:2b:2d:b5:45:cc:
         22:c8:f8:ff:2a:49:64:ba:7f:49:ca:2f:a3:1f:b4:ea:45:18:
         55:db:3d:01:4f:21:5c:78:cf:b1:9b:40:c3:3a:98:4f:67:04:
         4e:4d:84:54:04:62:4b:b6:cd:ec:18:34:ca:3d:1f:64:93:2e:
         08:80:58:df:b3:be:bc:6e:dc:df:4e:61:11:b9:ea:7a:df:82:
         18:54:04:bc:e8:3c:b8:3c:67:78:87:13:90:b9:50:31:e4:99:
         96:9b:e1:3c:48:41:f7:1a:c8:7e:07:e9:1f:bf:dd:fc:4a:c9:
         44:5b:82:ad:aa:d0:a6:1d:08:bc:64:77:00:79:74:e4:7d:09:
         a4:89:59:0a:b3:47:9c:33:92:71:cb:e5:94:c4:40:75:d8:39:
         14:5b:fe:74:9b:c9:5d:9e:80:28:4a:a3:0c:41:61:7a:96:8e:
         0e:8d:0e:1e:33:05:7c:0f:2d:d9:35:85:39:83:07:ae:82:fe:
         36:79:42:27:44:1f:8f:0a:cf:96:a0:09:fc:60:7f:66:83:48:
         91:5f:89:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 17:38:16 2026 by rpki-client