Route Origin Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/TYTLTAJU9AG8tO0agIZiHhxFq08.roa
File:                     TYTLTAJU9AG8tO0agIZiHhxFq08.roa (raw, json)
Hash identifier:          /PKc6Im1CYGeKVVzh5hzjRp3MnI6THRNouhIrYPvFow=
Subject key identifier:   4D:84:CB:4C:02:54:F4:01:BC:B4:ED:1A:80:86:62:1E:1C:45:AB:4F
Certificate issuer:       /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial:       01A067FF5476A0655AAC3037CC0368D3CC5F
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/TYTLTAJU9AG8tO0agIZiHhxFq08.roa
Signing time:             Thu 03 Sep 2026 15:59:41 +0000
ROA not before:           Thu 03 Sep 2026 15:59:41 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     218910
IP address blocks:        82.110.224.0/24 maxlen: 24
                          82.110.227.0/24 maxlen: 24
                          82.110.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 07:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:67:ff:54:76:a0:65:5a:ac:30:37:cc:03:68:d3:cc:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e20b034e2c497b1884488def106972704765029
        Validity
            Not Before: Sep  3 15:59:41 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4d84cb4c0254f401bcb4ed1a8086621e1c45ab4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:41:4f:3f:7e:33:a7:2a:d9:6f:49:e6:cb:45:
                    8e:53:18:aa:e3:73:84:ae:bf:f4:45:66:c0:2c:b2:
                    b9:07:1b:74:97:a3:95:39:12:cc:4f:74:cc:80:59:
                    f2:9e:68:64:96:be:f4:08:3c:68:18:38:c9:3a:c3:
                    a4:9a:95:07:72:37:21:54:2e:1f:2d:55:36:f1:53:
                    05:bd:18:b9:bd:44:59:d9:04:3c:2b:54:6e:1b:0a:
                    5a:f8:a5:28:68:c2:8f:d5:1e:e5:41:fb:24:a1:61:
                    c9:e4:ef:6a:19:a7:73:1d:9a:35:3a:98:27:94:26:
                    85:fa:20:41:f1:3f:fb:a7:86:43:f5:a1:77:04:a1:
                    f4:af:a5:2a:e3:8d:3e:9a:a6:6b:4c:b1:96:e3:e6:
                    f2:54:49:10:30:af:95:19:48:af:73:b2:51:88:5e:
                    40:1f:3d:4d:9c:29:f2:d2:77:d6:13:c1:05:d0:0a:
                    05:bd:a7:4a:6f:7f:a1:2b:f5:12:2f:80:52:52:59:
                    fd:d4:f9:71:14:45:5b:0b:2e:1f:3f:90:31:ba:8c:
                    dc:8f:79:09:2a:79:a4:54:6f:98:4a:7d:b5:c6:91:
                    76:93:b7:45:38:94:fa:16:1a:68:b5:43:f9:1a:bc:
                    4e:ae:3f:f8:87:19:c9:53:be:d0:f2:34:8c:5e:af:
                    bf:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:84:CB:4C:02:54:F4:01:BC:B4:ED:1A:80:86:62:1E:1C:45:AB:4F
            X509v3 Authority Key Identifier:
                keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/TYTLTAJU9AG8tO0agIZiHhxFq08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.110.224.0/24
                  82.110.227.0/24
                  82.110.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:84:12:1a:4c:df:b7:ba:88:a1:77:3d:c8:35:bf:c4:bf:e4:
         1e:cb:a4:2f:59:70:7d:4c:51:db:dc:e1:6f:cf:15:c3:7a:74:
         e5:46:0d:8b:49:e3:c6:eb:36:fe:44:d2:49:99:67:6a:2e:e6:
         a5:e4:ee:8b:60:fa:c9:d6:b8:ab:13:c2:2c:a4:53:17:0d:aa:
         75:a5:df:28:71:69:c3:14:2c:e4:82:5d:92:96:16:ae:64:cc:
         8c:26:17:d5:e8:85:25:8a:ba:04:42:d8:cf:4e:bf:1b:63:ae:
         3c:3a:11:d5:0f:a0:4a:0f:36:3c:e4:3f:c4:4d:64:20:c5:c9:
         04:f0:c3:57:68:cb:8c:fb:0d:cb:28:96:46:ab:88:95:b4:5c:
         a6:8f:64:ca:30:e0:19:57:17:4e:09:48:e3:d0:58:14:eb:1b:
         af:80:18:5b:f0:2f:fd:99:19:53:7a:54:77:e6:99:02:15:43:
         0b:1f:21:bb:73:4c:d1:7e:ff:ba:78:54:06:47:ef:fc:83:ec:
         59:ef:9a:b7:eb:5d:65:3f:5a:ba:0e:c9:4e:4d:10:16:80:d7:
         8f:a5:56:17:76:77:db:84:64:3e:13:19:2d:86:b2:a4:70:ac:
         32:f5:5e:a0:15:3b:dd:e3:d5:33:b7:f2:61:41:d6:fd:09:b0:
         e4:9b:ad:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 10:43:45 2026 by rpki-client