Route Origin Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/yMniSS9_2HyQYrKwnuj3rAy_JyA.roa
File:                     yMniSS9_2HyQYrKwnuj3rAy_JyA.roa (raw, json)
Hash identifier:          LLKPmYsiUq5vVwNOlpQIqAaKD21buRZKmyrOq8bIpJ0=
Subject key identifier:   C8:C9:E2:49:2F:7F:D8:7C:90:62:B2:B0:9E:E8:F7:AC:0C:BF:27:20
Certificate issuer:       /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial:       01A0AAE064C516F5C7B46E9F99999A35703E
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/yMniSS9_2HyQYrKwnuj3rAy_JyA.roa
Signing time:             Wed 16 Sep 2026 15:40:27 +0000
ROA not before:           Wed 16 Sep 2026 15:40:27 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     402072
IP address blocks:        77.111.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Sep 2026 09:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:aa:e0:64:c5:16:f5:c7:b4:6e:9f:99:99:9a:35:70:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
        Validity
            Not Before: Sep 16 15:40:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c8c9e2492f7fd87c9062b2b09ee8f7ac0cbf2720
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ec:e3:96:05:3b:ce:b4:e6:35:df:2e:17:95:
                    79:57:ba:b3:61:2e:35:3c:78:81:bd:a0:f4:13:4d:
                    3c:61:b5:83:b5:b5:60:43:68:2e:a2:97:a6:34:53:
                    60:35:c6:50:80:8e:15:e0:0e:88:9a:7c:d1:01:75:
                    73:f1:57:87:4f:7d:4b:fb:19:d4:52:e5:b2:49:7a:
                    f6:f4:43:13:67:d8:24:b7:9e:6d:ca:99:13:58:77:
                    53:81:a6:00:a1:c7:0f:92:27:b1:84:0b:63:dd:06:
                    41:e9:cf:d6:dc:6c:46:33:bb:7c:de:fa:56:38:3c:
                    b8:8e:7d:9a:d6:5a:5f:e2:be:b0:66:8f:1e:92:84:
                    66:f9:ef:5d:ef:18:cd:d2:78:fc:f9:38:ec:8a:bb:
                    7d:a4:c0:1d:00:bb:71:f8:3b:67:32:b5:a4:98:4f:
                    de:1b:c1:7f:7f:97:2a:af:0a:96:03:25:d2:e3:75:
                    a0:34:00:ad:b3:66:68:0a:38:63:09:fc:8f:7e:37:
                    51:06:f2:5d:d4:09:ff:6c:f3:bc:e9:e9:7d:6f:69:
                    50:37:33:8f:fd:5f:8c:c8:a4:15:84:1e:f0:ac:fe:
                    9f:83:30:27:b3:fd:69:93:a9:9f:14:d9:71:0c:f4:
                    53:a2:dd:9e:15:2d:68:d5:b1:dd:6a:b9:34:d0:0c:
                    56:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:C9:E2:49:2F:7F:D8:7C:90:62:B2:B0:9E:E8:F7:AC:0C:BF:27:20
            X509v3 Authority Key Identifier:
                keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/yMniSS9_2HyQYrKwnuj3rAy_JyA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.111.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c9:50:c6:14:5a:d0:30:2d:ea:53:02:5b:48:80:c7:cc:58:20:
         52:21:01:e0:3b:74:fc:0d:b4:ba:40:b2:a8:87:0c:53:a5:a5:
         89:03:2e:a5:80:1d:6a:04:1c:8c:3c:60:83:de:19:b9:77:a2:
         71:14:42:52:61:05:2a:76:19:e1:91:7c:08:6f:e5:f3:6f:3f:
         f7:9f:3f:45:ee:58:2a:e2:c7:33:46:9d:38:fb:e0:ce:ac:d3:
         d8:55:18:65:74:d0:d6:48:82:1f:81:ae:d8:f5:f4:2b:5b:95:
         4a:7b:0d:9c:59:24:a2:15:49:e8:14:49:3b:0a:1a:99:af:a1:
         ca:59:6a:d0:d2:06:81:c0:36:a2:83:30:b3:bd:f3:bd:c9:92:
         7f:49:99:26:4c:72:e1:1d:3b:9e:00:8a:0a:9e:0e:26:a2:d7:
         c5:a3:86:3c:42:64:05:fc:b6:86:b0:dd:df:fb:bd:6e:51:88:
         c4:c2:0c:e4:c3:5a:81:de:cb:20:7e:ef:46:2f:49:a6:d7:04:
         d3:5b:24:ba:4b:d0:4d:ef:3b:87:72:66:43:bd:3b:ad:fc:24:
         0f:2d:88:4d:08:96:7d:7f:39:62:e4:77:06:76:8c:79:c1:af:
         cf:9d:b7:f4:fc:be:20:72:4b:c2:9c:9a:4b:34:a8:7f:e3:68:
         ab:cf:9f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 18:21:03 2026 by rpki-client