Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/VVML-GAv2S1l7SONXnGbUGZwPS8.roa
File:                     VVML-GAv2S1l7SONXnGbUGZwPS8.roa (raw, json)
Hash identifier:          m2Ey4dLpgKOxf+vtxFB5o68/ci2QRRarqe1wuP5cdjw=
Subject key identifier:   55:53:0B:F8:60:2F:D9:2D:65:ED:23:8D:5E:71:9B:50:66:70:3D:2F
Certificate issuer:       /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial:       019E682CAB96745306469818D51A63A6A1FE
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/VVML-GAv2S1l7SONXnGbUGZwPS8.roa
Signing time:             Wed 27 May 2026 06:43:38 +0000
ROA not before:           Wed 27 May 2026 06:43:38 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     53808
IP address blocks:        31.57.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 28 May 2026 08:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:68:2c:ab:96:74:53:06:46:98:18:d5:1a:63:a6:a1:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
        Validity
            Not Before: May 27 06:43:38 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=55530bf8602fd92d65ed238d5e719b5066703d2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:58:3d:50:f1:d3:63:d5:31:3c:5e:a4:90:7d:
                    47:06:72:25:44:66:fc:6e:76:19:b3:1c:12:d0:43:
                    7f:8e:f2:17:3b:4e:d5:61:2b:41:77:f8:07:0c:e6:
                    10:3f:7a:c5:9c:a0:97:44:3f:04:0c:86:62:46:8d:
                    7e:9c:04:ec:1b:e6:ec:62:5e:33:b8:ca:b4:02:cf:
                    b1:d9:2b:91:32:db:7c:ab:ab:76:f6:23:f2:91:fc:
                    7b:ae:9a:4e:89:75:30:6c:a0:67:64:c7:86:ae:7b:
                    c1:52:6b:9b:5b:20:ab:d2:2e:d1:b4:e6:8f:e9:69:
                    fe:f5:ce:9e:09:d2:7e:e9:6b:6b:41:08:1c:7c:1b:
                    7a:42:f0:e9:db:3b:d9:64:25:b2:10:91:8c:4f:23:
                    83:4c:62:c6:bb:de:8b:cf:99:46:a7:b7:21:9f:a5:
                    30:29:71:68:ef:50:f7:77:9d:8a:81:9d:73:99:9d:
                    23:d2:e3:88:1d:cd:e6:12:bb:c3:77:53:6a:02:e7:
                    f0:b2:53:d4:88:50:8b:db:4d:b5:32:4c:ec:c4:a2:
                    92:ca:55:38:cc:a8:c5:24:e4:cb:f8:6e:a9:29:27:
                    f2:9f:cd:e8:bd:c9:54:6a:05:e0:29:6b:a7:0f:1d:
                    76:6b:6c:cc:35:0f:cb:44:66:da:b4:aa:0d:c3:71:
                    65:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:53:0B:F8:60:2F:D9:2D:65:ED:23:8D:5E:71:9B:50:66:70:3D:2F
            X509v3 Authority Key Identifier:
                keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/VVML-GAv2S1l7SONXnGbUGZwPS8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.57.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:2e:b3:1e:4e:88:b1:99:94:b6:c1:03:61:c4:bf:ee:b2:1a:
         2e:01:24:a0:fc:6c:ad:f4:34:a9:72:43:c9:7e:20:1f:1b:b5:
         36:b8:03:f6:9b:5e:f9:42:e6:00:ce:a5:74:56:a7:6a:0f:07:
         5f:20:4a:e8:94:8c:c4:1c:3d:76:4f:d8:61:53:d8:14:94:ee:
         b5:0a:47:08:48:62:af:ba:19:4f:83:d2:39:1d:a1:e4:c5:5e:
         34:be:4e:3b:37:de:36:f1:5a:16:6f:ab:f6:76:9a:43:1c:84:
         dd:01:95:c5:13:35:80:94:6a:59:69:97:82:85:e9:b7:d3:23:
         f6:47:b0:0b:e2:df:1e:8b:28:f4:b0:d8:4c:ec:b0:04:57:c5:
         c1:ec:e5:70:60:ca:0e:34:4e:46:84:07:47:01:8b:d5:45:0f:
         2f:00:6f:2d:18:d5:76:38:07:74:2e:99:45:e7:d7:29:54:35:
         9c:a5:02:5f:c1:eb:2c:ef:50:70:d0:71:60:43:3f:52:68:6a:
         bf:c5:28:e2:b7:25:2f:cc:50:89:b7:27:9f:6c:5e:44:a0:f6:
         92:7a:b1:cd:a7:69:10:59:f0:18:6e:2c:86:07:85:fe:5a:94:
         56:37:d1:27:af:88:9c:f5:73:d8:34:bf:83:2c:c9:5e:fe:40:
         bb:20:4c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 27 15:54:49 2026 by rpki-client