Route Origin Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/uxiOUCquImPCO0TRl_ViYOik13M.roa
File:                     uxiOUCquImPCO0TRl_ViYOik13M.roa (raw, json)
Hash identifier:          x273zJ067d4b3oHrl2Q6720ihrZ2YerB25Fdsm7m0es=
Subject key identifier:   BB:18:8E:50:2A:AE:22:63:C2:3B:44:D1:97:F5:62:60:E8:A4:D7:73
Certificate issuer:       /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial:       01A05423E55E38F63E078A084993EEEBF000
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/uxiOUCquImPCO0TRl_ViYOik13M.roa
Signing time:             Sun 30 Aug 2026 19:27:13 +0000
ROA not before:           Sun 30 Aug 2026 19:27:13 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     49592
IP address blocks:        82.108.128.0/24 maxlen: 24
                          82.108.214.0/24 maxlen: 24
                          87.85.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 04 Sep 2026 13:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:54:23:e5:5e:38:f6:3e:07:8a:08:49:93:ee:eb:f0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e20b034e2c497b1884488def106972704765029
        Validity
            Not Before: Aug 30 19:27:13 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=bb188e502aae2263c23b44d197f56260e8a4d773
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:fc:cc:68:d6:0e:f8:62:6b:99:fb:f7:8a:0f:
                    44:8d:42:3e:bd:e3:69:17:1c:d2:0a:49:5d:11:6d:
                    d5:aa:e1:85:46:7b:f5:be:a7:84:4b:72:6b:9e:83:
                    33:75:a9:26:24:63:f7:1b:99:e5:35:ae:a9:f6:a2:
                    5e:0b:6f:6f:de:2b:78:97:54:f4:82:e5:47:cc:24:
                    33:db:98:e4:34:29:b4:b3:1a:30:26:59:da:a1:13:
                    17:dc:fc:dd:62:68:27:71:69:c4:72:98:b2:cd:47:
                    e5:d0:44:fb:b2:39:47:07:d8:c5:ac:53:60:b6:d2:
                    97:fa:2d:35:cf:0d:59:6a:4a:19:77:d0:8a:09:67:
                    28:f5:f2:11:10:0a:48:8b:9e:f2:66:26:a4:c5:9e:
                    08:23:d6:62:81:76:8d:d7:f1:a0:8e:a4:67:e4:df:
                    e0:99:78:a3:1a:0b:c1:fa:93:b4:c0:95:8f:ba:46:
                    3b:aa:9a:80:7f:bc:45:9e:16:ab:83:39:1b:d4:eb:
                    80:b8:eb:a5:e1:42:b7:b2:1f:ca:99:ba:f4:78:61:
                    6e:78:c8:40:dd:b2:cc:7a:82:1a:de:4a:5f:c9:c6:
                    d0:16:e6:7e:fb:2c:a6:88:dd:70:0b:72:21:cd:05:
                    2e:7b:07:b1:7a:5a:c3:65:a7:2d:c7:a0:1b:3a:56:
                    92:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:18:8E:50:2A:AE:22:63:C2:3B:44:D1:97:F5:62:60:E8:A4:D7:73
            X509v3 Authority Key Identifier:
                keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/uxiOUCquImPCO0TRl_ViYOik13M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.108.128.0/24
                  82.108.214.0/24
                  87.85.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d5:e2:c0:df:f4:1a:9a:7d:5d:b4:84:2d:1f:cf:ae:f0:d1:0b:
         4f:ae:62:89:58:0f:cd:ee:3f:19:8b:01:44:70:78:7e:17:a0:
         91:96:25:dd:89:db:63:2d:54:3b:dd:43:3d:aa:62:3b:84:e9:
         d3:cf:73:fc:dd:3f:e8:28:1e:9e:e9:a1:79:dc:98:cc:43:9b:
         ee:98:de:9a:f4:fb:9d:bd:bf:74:92:64:95:0d:fd:36:da:e4:
         e9:d4:c2:1a:b8:e1:14:8b:4f:4a:54:2a:07:3f:e4:25:35:49:
         95:4c:e0:5f:ca:4b:af:de:13:15:ff:53:e6:52:87:32:30:32:
         ce:c8:22:f8:27:5a:56:0d:dc:9d:7a:fd:e7:33:99:3a:47:b0:
         ca:54:00:fb:98:88:47:40:e7:dc:7c:d6:52:96:97:5a:9a:e1:
         76:9a:78:50:ac:2a:25:95:5c:c5:be:e1:64:a8:f2:07:32:33:
         6a:06:d2:00:0e:25:65:7f:a9:7e:27:a6:bf:bd:11:9d:4f:e6:
         c3:c6:7f:52:cd:dc:fa:38:0f:32:07:af:48:8c:5e:72:e4:d7:
         d6:de:ef:1f:fd:be:9f:59:4c:c8:96:c9:76:02:38:eb:e0:0f:
         52:fc:1a:04:91:21:3b:36:d0:d8:09:d6:aa:16:be:90:f9:3d:
         cb:30:7f:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 20:41:58 2026 by rpki-client