Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/d7WBrSolxeDeyFLECQqN4lP2KO4.roa
File:                     d7WBrSolxeDeyFLECQqN4lP2KO4.roa (raw, json)
Hash identifier:          rOxl3QcFlyapsfQmNDjaRgkkf5uDVqqD0y30johme5E=
Subject key identifier:   77:B5:81:AD:2A:25:C5:E0:DE:C8:52:C4:09:0A:8D:E2:53:F6:28:EE
Certificate issuer:       /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial:       019F1731764B8AB3B8B6A4DE97689FACC76D
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/d7WBrSolxeDeyFLECQqN4lP2KO4.roa
Signing time:             Tue 30 Jun 2026 06:22:25 +0000
ROA not before:           Tue 30 Jun 2026 06:22:25 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     402309
IP address blocks:        82.110.128.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Jul 2026 16:45:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:17:31:76:4b:8a:b3:b8:b6:a4:de:97:68:9f:ac:c7:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e20b034e2c497b1884488def106972704765029
        Validity
            Not Before: Jun 30 06:22:25 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=77b581ad2a25c5e0dec852c4090a8de253f628ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1b:19:e2:e9:6a:42:70:c8:1e:83:4d:8a:22:
                    5c:90:3b:c3:fa:b1:97:74:d2:e2:e5:6e:ac:1f:ff:
                    d2:e8:16:50:a3:f8:5b:95:a5:59:04:6c:25:82:66:
                    4d:9b:ec:a4:ba:e8:4e:a8:f2:60:14:0f:64:c1:3a:
                    89:a8:3c:ce:5c:2c:8f:c7:09:3d:95:89:7f:d2:a2:
                    70:65:ee:4f:8e:78:dd:0c:6c:71:26:eb:40:02:a7:
                    3a:a0:d7:52:43:7c:28:ea:26:2c:f6:1c:c5:47:4c:
                    66:af:cc:48:22:b8:52:90:3c:ec:69:c8:3a:14:31:
                    70:5e:61:6e:51:1e:5d:c3:5f:af:f2:f3:43:df:6e:
                    dd:1b:91:7e:ad:dc:74:c6:49:17:0e:82:d6:49:3d:
                    ea:1b:85:04:4e:68:54:d1:9b:ba:48:12:e2:87:9d:
                    67:86:22:e1:11:68:f0:b1:4e:67:9c:01:1f:79:47:
                    ae:71:0c:75:7a:23:12:86:15:75:20:8e:48:aa:64:
                    a4:85:61:64:c5:be:10:81:a2:66:90:20:b3:5e:73:
                    6c:6e:bb:38:b5:8d:ad:59:71:4d:2c:74:70:c0:1a:
                    7b:de:e4:a1:9c:79:f2:d0:f4:d4:d3:98:5a:3f:58:
                    8c:f4:dc:00:94:aa:4e:3b:64:55:cb:b0:fe:47:58:
                    2a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:B5:81:AD:2A:25:C5:E0:DE:C8:52:C4:09:0A:8D:E2:53:F6:28:EE
            X509v3 Authority Key Identifier:
                keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/d7WBrSolxeDeyFLECQqN4lP2KO4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.110.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c4:e0:f9:11:7e:33:31:56:ed:76:2b:e9:dd:3b:3d:59:28:da:
         d3:a3:93:64:bd:9d:82:e4:7c:eb:fa:59:52:59:5a:ff:e6:2d:
         6b:60:88:80:52:cc:8a:b5:e9:17:6d:3d:4f:3a:f6:0d:09:9b:
         ac:31:ec:08:a8:d3:1a:ee:f4:a6:20:fd:ce:f6:df:23:9f:25:
         55:40:f9:42:4a:bd:8d:70:39:e2:fd:b9:4b:5e:7a:84:2e:fd:
         0a:ed:e0:eb:78:ae:23:d8:ba:d7:23:7b:d5:15:39:9d:30:b5:
         e7:5c:25:24:32:f0:67:cc:d6:26:dc:32:c2:a1:f4:80:aa:87:
         51:13:e2:83:da:d2:bd:48:6a:d5:4b:f1:fb:3f:b4:1f:bf:03:
         12:ce:f7:1e:d7:4a:61:e0:81:27:05:39:4b:39:da:60:73:e4:
         f8:af:32:89:c6:15:e3:80:9b:46:23:bf:88:0b:00:88:3f:5d:
         38:80:90:8d:ab:01:1e:57:e7:00:3a:3c:63:6c:be:0b:7f:af:
         9f:c7:14:3b:a9:10:23:b9:38:89:51:ad:66:fc:21:65:c3:a7:
         5b:9a:96:d2:15:4c:2b:14:4f:60:ab:d1:30:0e:bb:22:7c:b7:
         64:db:22:78:e0:8d:eb:eb:14:26:bc:be:98:8a:41:00:09:52:
         02:76:bf:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:58:00 2026 by rpki-client