Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/bEuvRQmh-m8fOzelUFYuR2sYi3Y.roa
File:                     bEuvRQmh-m8fOzelUFYuR2sYi3Y.roa (raw, json)
Hash identifier:          HPh6QDJmMgmpdc61B+ueXNZ4EOFKKlhHiNxnbTNejac=
Subject key identifier:   6C:4B:AF:45:09:A1:FA:6F:1F:3B:37:A5:50:56:2E:47:6B:18:8B:76
Certificate issuer:       /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial:       019F84E6EE47D0FCEC0C678814B5EDD1C22A
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/bEuvRQmh-m8fOzelUFYuR2sYi3Y.roa
Signing time:             Tue 21 Jul 2026 13:39:14 +0000
ROA not before:           Tue 21 Jul 2026 13:39:14 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     50809
IP address blocks:        77.83.73.0/24 maxlen: 24
                          213.226.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 13:39:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:84:e6:ee:47:d0:fc:ec:0c:67:88:14:b5:ed:d1:c2:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
        Validity
            Not Before: Jul 21 13:39:14 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6c4baf4509a1fa6f1f3b37a550562e476b188b76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:22:8d:8e:00:43:16:6b:cd:dd:23:90:3c:e6:
                    ce:1b:35:91:4f:8a:19:9c:75:92:32:6f:48:07:2d:
                    ce:09:b1:ce:07:9f:a0:d8:7f:b9:4c:e8:41:95:fc:
                    3f:06:9d:49:60:95:47:62:7e:73:39:46:03:cd:54:
                    4e:98:e7:9d:88:c6:bb:84:af:1b:8e:1f:31:1a:78:
                    29:47:49:8c:38:01:2d:41:6d:01:ba:f3:17:01:9a:
                    a6:2c:87:90:61:30:e1:1a:41:67:fe:bd:f3:49:84:
                    13:07:eb:27:c5:6e:da:f9:61:dd:96:87:1b:86:1f:
                    5f:94:4c:88:93:c3:22:a9:56:74:35:ce:c6:50:b5:
                    f9:57:e0:90:14:f6:a9:e0:2e:1a:25:a1:48:d3:75:
                    dc:14:c4:41:2b:62:09:d4:74:83:69:67:73:d3:52:
                    66:21:ea:5f:d1:d6:c2:33:b3:83:ed:45:a8:8e:0f:
                    2a:18:0d:f8:6a:8d:42:f3:12:3d:aa:7e:cf:6f:80:
                    46:1c:a6:31:8f:89:84:96:2b:5a:38:3f:8a:45:26:
                    c3:fb:c7:95:1b:9b:be:9f:8f:6e:20:44:6c:72:e2:
                    f8:2e:49:30:e3:53:16:0f:0b:49:98:20:7b:66:82:
                    87:59:36:f4:0f:92:91:92:56:f3:92:c7:1e:a4:d0:
                    36:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:4B:AF:45:09:A1:FA:6F:1F:3B:37:A5:50:56:2E:47:6B:18:8B:76
            X509v3 Authority Key Identifier:
                keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/bEuvRQmh-m8fOzelUFYuR2sYi3Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.83.73.0/24
                  213.226.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:18:d7:5d:41:94:5a:22:96:47:0a:e7:00:94:b3:44:3d:50:
         0d:ae:4d:4a:ed:c8:9c:a3:bc:04:17:e6:ea:ff:50:89:6e:ad:
         bd:14:cf:b7:4e:df:5d:5c:a9:94:75:0a:d5:73:cb:d9:74:2c:
         a4:1a:70:f5:63:60:ec:a2:e4:ff:9f:a4:f5:f4:32:b8:d6:27:
         cb:41:44:af:39:55:d6:2f:45:fc:15:33:9a:e9:ac:d4:e6:8d:
         66:bc:3c:f3:88:c6:42:b8:29:28:a4:8b:d1:c6:6a:7c:47:46:
         fb:9b:b4:b2:05:46:87:3d:b5:0b:af:1b:2b:54:ee:cb:26:95:
         4a:88:5f:cd:66:6e:29:f8:1c:b6:73:4f:b0:a4:fa:4a:4f:ae:
         aa:17:45:2c:93:53:bf:72:8f:0d:13:b8:ef:ae:18:a8:13:3f:
         86:b5:f7:e9:92:ac:29:ed:d0:b8:64:78:c3:7b:97:21:b2:82:
         9c:f4:eb:53:28:c1:33:00:5f:9b:ce:ad:19:65:bc:6b:9e:80:
         12:b0:89:0e:47:90:44:9a:df:f3:b5:aa:40:55:ae:15:4e:d3:
         fe:22:03:60:31:05:d7:c7:e1:e6:ea:bf:05:b9:d0:e2:ef:d7:
         72:ed:a1:6a:be:a9:c4:d4:ad:56:1c:d9:bc:c3:3d:93:3b:97:
         80:07:f0:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:12:13 2026 by rpki-client