Route Origin Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fu7uTOJ6jfqSOV97QFNJ4TP3_rc.roa
File:                     fu7uTOJ6jfqSOV97QFNJ4TP3_rc.roa (raw, json)
Hash identifier:          4GhpLoJ4r2Zs6lFJLyrpz41V10kpzdoepRwUI/WZIFQ=
Subject key identifier:   7E:EE:EE:4C:E2:7A:8D:FA:92:39:5F:7B:40:53:49:E1:33:F7:FE:B7
Certificate issuer:       /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial:       01A03BF0C16380744D7C3622CE3543569155
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fu7uTOJ6jfqSOV97QFNJ4TP3_rc.roa
Signing time:             Wed 26 Aug 2026 02:40:28 +0000
ROA not before:           Wed 26 Aug 2026 02:40:28 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     197195
IP address blocks:        82.109.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 04 Sep 2026 13:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:3b:f0:c1:63:80:74:4d:7c:36:22:ce:35:43:56:91:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e20b034e2c497b1884488def106972704765029
        Validity
            Not Before: Aug 26 02:40:28 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7eeeee4ce27a8dfa92395f7b405349e133f7feb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a4:31:fa:3b:d0:b0:95:85:4e:8c:21:e2:e0:
                    18:fc:8d:34:a1:1e:f6:c4:88:c2:fa:55:18:ba:ca:
                    ec:a6:03:da:d0:bf:fe:c0:57:e2:72:eb:6c:f4:d0:
                    9c:1e:91:15:60:46:10:45:4a:56:6b:7a:de:9e:64:
                    43:57:58:83:3e:36:e3:28:a2:96:9d:d4:a4:52:d3:
                    ae:db:84:aa:80:82:a9:c8:7d:0a:a7:74:d8:33:fe:
                    36:d9:17:6c:d2:2b:44:91:9d:fd:c9:76:66:09:3e:
                    fb:4d:58:dd:0e:c1:c9:f6:72:c9:33:b1:c8:86:42:
                    ec:1e:db:e8:21:ef:cf:b2:3d:ad:9c:b4:0e:fb:ad:
                    3b:3d:8e:1b:36:a7:ad:27:9b:d7:fe:9f:42:50:a7:
                    cb:21:76:89:81:b3:ea:92:0e:2e:44:fb:f5:45:e0:
                    3e:67:15:4b:9f:af:de:4e:3a:31:83:d7:ab:a7:bb:
                    c4:fd:e6:99:18:d8:5f:c8:7e:fc:ae:4b:cb:aa:c5:
                    ac:c6:be:99:6c:1f:f1:69:e2:83:0e:fd:ae:ed:8a:
                    72:72:ad:c2:12:a3:7f:0e:55:1e:d2:06:a5:6b:87:
                    e1:5f:02:dd:51:eb:e2:03:5d:fd:ea:03:87:b8:c9:
                    75:54:3d:c4:aa:02:f8:38:83:a4:0a:7d:e7:da:15:
                    7e:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:EE:EE:4C:E2:7A:8D:FA:92:39:5F:7B:40:53:49:E1:33:F7:FE:B7
            X509v3 Authority Key Identifier:
                keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fu7uTOJ6jfqSOV97QFNJ4TP3_rc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.109.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:61:ba:d2:7c:09:73:42:37:11:7a:8e:44:4f:10:ad:60:a6:
         b5:a6:ad:50:10:c8:76:08:a0:70:b5:8c:f2:8c:3e:d3:94:44:
         86:a8:cd:60:45:e9:e2:b9:e3:a3:89:7a:db:c1:4c:8c:03:dd:
         3b:19:85:70:2b:bf:d9:14:94:b6:51:07:a6:d0:75:af:0a:2a:
         5b:20:e5:7c:96:e3:b3:eb:f9:7f:f7:36:e7:2c:e7:ba:fe:d9:
         c8:05:41:ad:0b:71:17:a0:1d:62:f0:70:f2:43:7a:c2:36:7b:
         4a:08:0e:e0:f7:c9:cf:f8:5a:22:80:cd:17:3a:15:01:00:fa:
         6f:67:36:c1:17:43:47:6d:e6:d2:52:c6:25:dd:77:99:8f:93:
         b4:76:c1:62:15:9b:7f:40:da:bb:04:ba:63:ca:4e:83:64:d2:
         0c:45:9e:bb:2b:3a:09:06:7d:c1:1c:c8:66:2f:4e:9d:81:65:
         da:1c:5e:01:ce:14:cc:3b:a2:83:4a:51:9e:ce:ab:21:d6:d4:
         31:6b:a9:a4:4b:a2:98:60:b2:ab:40:78:07:06:1e:89:e2:6f:
         b5:80:10:02:2a:68:1f:85:68:eb:cc:d4:54:ca:c7:67:d2:e2:
         e6:1a:4a:99:89:57:80:1d:ab:c1:73:8e:2c:1e:a0:5a:40:32:
         ad:f0:2c:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 18:57:20 2026 by rpki-client