Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/76lozRibtd1WgkE14IjfKv7UzlA.roa
File:                     76lozRibtd1WgkE14IjfKv7UzlA.roa (raw, json)
Hash identifier:          qz6LlHLVP2N3lifY7p281eWfE8mFmYwFiCCTVjo1idY=
Subject key identifier:   EF:A9:68:CD:18:9B:B5:DD:56:82:41:35:E0:88:DF:2A:FE:D4:CE:50
Certificate issuer:       /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial:       019F4B28616BB37C511F03C6D2922353A869
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/76lozRibtd1WgkE14IjfKv7UzlA.roa
Signing time:             Fri 10 Jul 2026 08:32:45 +0000
ROA not before:           Fri 10 Jul 2026 08:32:45 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     152868
IP address blocks:        31.57.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Jul 2026 17:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:4b:28:61:6b:b3:7c:51:1f:03:c6:d2:92:23:53:a8:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
        Validity
            Not Before: Jul 10 08:32:45 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=efa968cd189bb5dd56824135e088df2afed4ce50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:3b:f8:7e:37:df:5b:44:88:e6:f9:a9:02:dc:
                    1c:34:fc:65:85:a5:73:28:97:a7:c3:da:24:1b:63:
                    da:a8:a1:cd:99:80:7f:d5:1c:45:88:9c:cb:57:a3:
                    d3:72:70:00:aa:99:dd:33:02:88:f2:61:35:11:da:
                    1d:a9:47:c3:2a:d9:67:1c:fa:3b:16:ca:f1:df:87:
                    53:1b:48:ed:fb:f6:c4:59:74:9b:75:19:76:05:75:
                    49:79:6a:c0:4c:5b:b1:f8:65:ed:c2:7a:cd:52:61:
                    6f:00:8f:41:59:d5:39:6f:7f:b7:f2:72:17:9a:1e:
                    d0:7c:e8:7a:65:40:a5:9f:3a:f8:8b:6a:e0:fd:55:
                    d7:59:a9:68:e2:f7:87:7c:1c:77:85:6a:64:81:87:
                    41:d5:0f:27:5a:24:2c:f1:7f:73:aa:70:27:34:c7:
                    4c:5b:d8:62:5d:d5:ae:0d:b9:2c:4c:d8:b8:3f:96:
                    5d:6a:bb:68:bb:2e:b8:32:14:26:4f:55:f5:ce:b6:
                    f8:23:07:1a:d3:d1:75:11:31:41:0e:66:d6:57:d8:
                    f4:c9:f1:8b:3b:81:44:8e:bb:02:68:85:b9:ba:cd:
                    93:bc:a9:66:b5:f1:2d:91:ac:12:c5:dd:0b:e9:22:
                    70:94:95:f7:e9:8d:e0:5a:fb:d8:90:21:b3:c8:a6:
                    d6:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:A9:68:CD:18:9B:B5:DD:56:82:41:35:E0:88:DF:2A:FE:D4:CE:50
            X509v3 Authority Key Identifier:
                keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/76lozRibtd1WgkE14IjfKv7UzlA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.57.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:01:ab:4c:69:a2:b0:9b:38:ef:61:d8:80:bf:d4:1e:55:b7:
         e1:93:f9:4a:ec:74:ae:ff:b6:24:3d:5a:0f:40:4e:2a:d7:b8:
         57:f5:7b:6e:df:de:f9:0a:58:26:b2:88:5b:a3:ec:f5:cf:bf:
         96:51:08:0e:ab:b5:46:63:da:81:f7:5c:cf:31:6b:f2:3f:fa:
         4f:74:18:d3:87:18:ac:37:1e:5b:38:b8:22:73:76:93:9c:c2:
         57:f9:b2:f2:ae:05:a3:f4:dc:e6:7e:07:07:57:56:5a:2a:e0:
         44:f1:d5:00:ed:7a:d4:2e:28:9f:be:eb:5d:21:3b:0e:bf:1a:
         3e:42:fa:03:ef:97:bf:87:79:a3:1a:67:c9:fe:17:08:42:c6:
         28:6a:5c:f1:f3:c1:55:fd:38:6c:d9:ff:36:95:fd:30:34:24:
         a0:e0:6c:50:a6:ca:ab:b8:72:8d:42:5b:84:1d:f6:b1:82:ec:
         3d:87:b3:25:eb:64:9f:2a:8a:d2:03:4f:fd:00:b2:c1:fd:fd:
         1e:54:35:6c:42:6b:c2:85:97:09:f8:92:39:d5:33:55:f0:a2:
         26:2f:14:37:02:89:b2:f2:21:45:15:12:74:a1:7a:54:82:59:
         eb:1d:93:4a:ef:05:7e:e6:be:7d:8c:79:a7:d0:0e:f3:57:40:
         98:1c:12:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:54:37 2026 by rpki-client