Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/37372e38332e3130352e302f32342d3234203d3e20313939373431.roa
File:                     37372e38332e3130352e302f32342d3234203d3e20313939373431.roa (raw, json)
Hash identifier:          8A61rIzqSrEJnpw/O4rQ0Si4r5pxXJeNJWP+mHanvVo=
Subject key identifier:   DA:69:3C:1E:9B:57:D1:7E:FB:3F:09:ED:D4:F4:87:86:71:82:53:2A
Certificate issuer:       /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial:       1449A6197CD1C15B675E26179C9BF2E08F1CECC6
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/37372e38332e3130352e302f32342d3234203d3e20313939373431.roa
Signing time:             Wed 12 Aug 2026 07:55:19 +0000
ROA not before:           Wed 12 Aug 2026 07:50:19 +0000
ROA not after:            Wed 11 Aug 2027 07:55:19 +0000
asID:                     199741
IP address blocks:        77.83.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 01:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:49:a6:19:7c:d1:c1:5b:67:5e:26:17:9c:9b:f2:e0:8f:1c:ec:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
        Validity
            Not Before: Aug 12 07:50:19 2026 GMT
            Not After : Aug 11 07:55:19 2027 GMT
        Subject: CN=DA693C1E9B57D17EFB3F09EDD4F487867182532A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e9:2e:42:2b:ac:57:a6:e5:ef:af:45:1e:1d:
                    c3:2d:ef:df:bc:c0:87:8a:1e:b6:04:95:a2:f4:1b:
                    33:5a:54:4e:8e:5b:35:36:59:56:d9:41:4e:3c:48:
                    b9:a3:f7:f3:58:b2:7c:49:c0:87:b1:d3:48:7c:68:
                    92:3c:a7:36:ab:ab:33:24:09:9c:d9:1a:9e:19:49:
                    88:3c:95:32:b5:8f:d7:41:7b:07:aa:50:46:4f:a6:
                    77:f9:00:09:63:b1:e6:63:05:88:62:cc:15:dd:db:
                    b9:b3:3e:04:3c:ad:de:eb:14:07:55:a2:c3:3c:d1:
                    0b:4d:61:69:20:a1:85:28:cd:9d:fe:ae:5d:60:be:
                    b4:30:5b:00:a8:e0:52:99:18:c0:64:e4:18:3c:18:
                    ad:a5:7c:c9:dc:9d:c1:01:91:1b:80:8d:6a:2e:9b:
                    8b:a4:4b:b7:0c:16:d4:48:15:ca:b5:8d:ee:99:63:
                    cb:64:d7:c6:e0:ca:27:e7:19:25:6a:fa:84:20:b7:
                    02:cd:41:19:d2:ba:70:ea:06:e5:83:d5:d1:8f:c1:
                    ed:b7:f0:3c:90:e7:f9:ff:e9:43:c3:81:26:9b:fe:
                    13:01:56:86:2d:cf:3e:79:58:0d:35:63:47:2d:97:
                    24:da:2d:b6:c3:a4:49:f9:be:d2:26:c2:2d:54:de:
                    d9:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:69:3C:1E:9B:57:D1:7E:FB:3F:09:ED:D4:F4:87:86:71:82:53:2A
            X509v3 Authority Key Identifier:
                keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/37372e38332e3130352e302f32342d3234203d3e20313939373431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.83.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:ea:94:f0:10:d0:f4:65:39:1f:bc:e3:1f:36:08:d8:b4:42:
         3c:53:4b:4e:83:06:b9:34:bb:db:e6:c3:c5:0b:b3:c6:c9:0b:
         b5:1d:14:80:be:93:b6:32:e8:5d:d6:6c:e4:e4:40:79:09:14:
         6f:cb:23:28:df:d9:ee:4d:4c:54:8e:ab:10:02:a3:71:59:db:
         bb:50:08:29:2d:2b:a8:09:08:05:da:a0:06:49:af:ca:33:80:
         fd:fd:c6:bc:27:72:cd:73:ba:a0:16:cc:70:22:7f:fc:37:a1:
         72:bd:97:26:c6:a9:20:0d:7c:e6:5c:8a:92:31:e8:16:bb:34:
         b6:9d:87:16:a8:e9:79:12:3f:42:98:6e:f0:68:af:38:b2:41:
         a9:4b:e5:5c:be:f9:cd:47:06:3f:56:26:ca:1f:87:f7:9b:a0:
         d8:d8:6f:37:d2:a5:17:5b:ce:be:13:af:18:6d:eb:c4:c9:19:
         b6:ff:da:22:45:30:5b:4b:89:52:86:60:b7:d8:b7:c5:b6:72:
         c6:45:94:35:9a:b6:28:a8:04:14:e1:e9:12:23:ae:40:83:5c:
         ef:49:0e:99:bc:7e:ca:43:9c:63:69:f4:e5:cc:2e:5a:22:23:
         b0:eb:aa:a0:e4:60:49:e9:eb:8e:7a:fb:f3:d4:80:3a:5e:10:
         e7:0f:5a:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 08:34:26 2026 by rpki-client