Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/V2BW5Gy99A952SDUeuxXMLbkhEE.roa
File:                     V2BW5Gy99A952SDUeuxXMLbkhEE.roa (raw, json)
Hash identifier:          Gh8ffsF8NXI6iMraHNdUX8US2FErxcV/ICgChZPOHis=
Subject key identifier:   57:60:56:E4:6C:BD:F4:0F:79:D9:20:D4:7A:EC:57:30:B6:E4:84:41
Certificate issuer:       /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial:       019FD37B83CDBB3D05B43D639B6713C75A48
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/V2BW5Gy99A952SDUeuxXMLbkhEE.roa
Signing time:             Wed 05 Aug 2026 19:51:54 +0000
ROA not before:           Wed 05 Aug 2026 19:51:54 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     54702
IP address blocks:        77.111.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Aug 2026 22:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:d3:7b:83:cd:bb:3d:05:b4:3d:63:9b:67:13:c7:5a:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
        Validity
            Not Before: Aug  5 19:51:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=576056e46cbdf40f79d920d47aec5730b6e48441
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:29:c5:7c:e7:13:e3:75:67:a9:1c:53:8f:eb:
                    e6:80:d8:63:2a:b9:fe:87:b1:af:2c:cf:e5:06:a5:
                    3d:e1:ac:dd:a3:99:5e:d4:6e:c7:e3:54:6a:00:43:
                    97:b0:5d:46:ed:fb:55:a6:58:11:b9:07:cf:4a:c3:
                    e0:2e:ed:f4:64:5f:9c:78:3a:15:30:29:6e:88:af:
                    df:57:f8:c1:a7:e3:37:95:5a:61:0d:fc:92:24:f5:
                    0d:09:67:57:e7:14:9b:63:6c:2a:dd:7d:de:df:36:
                    0f:a4:21:1d:02:a8:9d:53:b3:ed:6b:74:34:34:7c:
                    97:a9:f1:4a:fb:86:b2:08:21:3b:d4:3c:4a:e0:06:
                    b5:2e:4d:23:b2:7c:10:4f:13:0d:69:a8:ab:07:2d:
                    78:b8:8b:a6:2a:c7:58:a4:c0:70:21:b4:0e:10:12:
                    27:28:5e:3c:0b:f5:6a:0c:90:65:62:06:37:8e:fc:
                    d4:4e:89:cd:a0:94:d3:f1:20:4c:2e:4b:47:23:2d:
                    a2:c1:ae:e5:aa:69:b9:e6:b4:ab:df:22:4e:3f:6b:
                    46:e0:77:ae:c9:24:a2:e6:f3:ae:11:d3:9f:41:40:
                    41:23:fb:3c:a4:2a:3b:93:44:67:7e:88:10:86:41:
                    8a:29:e1:0e:c1:6f:18:6e:ae:7e:f5:98:2c:7b:b4:
                    4b:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:60:56:E4:6C:BD:F4:0F:79:D9:20:D4:7A:EC:57:30:B6:E4:84:41
            X509v3 Authority Key Identifier:
                keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/V2BW5Gy99A952SDUeuxXMLbkhEE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.111.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:2a:89:91:ae:d1:67:c9:d6:3e:d3:fb:55:7b:0d:09:0d:92:
         39:3a:33:3a:70:e3:2c:d7:c6:22:66:a0:c7:fc:a4:75:cf:ac:
         78:02:22:16:56:f5:92:26:e1:b1:01:d2:8d:4b:9a:4d:06:5a:
         b6:4c:7b:29:f0:33:61:03:22:5a:aa:46:22:13:26:05:7e:5d:
         b8:11:fb:44:50:3b:0c:5a:ff:2e:b9:4c:dd:9a:40:b5:f3:c8:
         59:12:c5:2e:14:0c:77:a9:9c:5c:dc:53:51:07:00:11:35:b6:
         f8:ed:50:73:5d:da:d5:d1:a2:61:fa:90:e7:60:ed:5a:f7:0c:
         6b:87:19:a7:a3:33:c2:b6:3a:9b:ef:e9:0f:71:0e:4e:23:de:
         fc:58:88:20:04:9a:3b:a0:e9:fb:71:3b:12:2c:61:29:9d:0c:
         d2:dd:1a:ac:9b:e5:7b:d1:9b:c1:23:ea:49:be:0f:c8:11:f7:
         d3:1a:1c:b2:a4:c0:ba:99:a2:41:0b:d4:6f:00:5d:a3:82:02:
         5c:12:2e:84:7b:a9:3a:46:e9:5b:0d:3f:11:cc:2f:19:92:3f:
         34:4f:ce:fb:bd:38:e8:4a:f3:7d:91:b9:e9:d3:a7:15:90:2b:
         42:79:6f:3d:d9:1b:55:13:52:8e:40:d9:24:9c:d2:df:a9:0f:
         fd:69:0f:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 07:29:48 2026 by rpki-client