Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/37372e38332e3130352e302f32342d3234203d3e203432383331.roa
File:                     37372e38332e3130352e302f32342d3234203d3e203432383331.roa (raw, json)
Hash identifier:          E3OKfUZEX/zthKQmuJXu4zX+Fg+FD1wELtq2dNHEGfY=
Subject key identifier:   0D:FA:6F:89:6F:11:ED:E0:A6:2F:BB:24:BF:53:53:D0:ED:8D:74:D4
Certificate issuer:       /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial:       1A67A17EAAF3AEAB0181270112EE4AFF57C901AD
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/37372e38332e3130352e302f32342d3234203d3e203432383331.roa
Signing time:             Tue 04 Aug 2026 16:49:19 +0000
ROA not before:           Tue 04 Aug 2026 16:44:19 +0000
ROA not after:            Tue 03 Aug 2027 16:49:19 +0000
asID:                     42831
IP address blocks:        77.83.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Aug 2026 08:44:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:67:a1:7e:aa:f3:ae:ab:01:81:27:01:12:ee:4a:ff:57:c9:01:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
        Validity
            Not Before: Aug  4 16:44:19 2026 GMT
            Not After : Aug  3 16:49:19 2027 GMT
        Subject: CN=0DFA6F896F11EDE0A62FBB24BF5353D0ED8D74D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:ea:23:7f:b3:bc:48:a2:ba:19:ee:f6:2b:d2:
                    a1:da:06:31:81:ab:7f:5b:e2:8c:31:52:89:eb:65:
                    1f:5b:6d:26:56:93:c8:be:9b:c8:f2:9e:47:b7:4b:
                    18:d9:16:80:50:7b:92:7b:d3:51:86:29:9a:41:f5:
                    33:b0:7a:7a:2a:e9:03:63:d1:86:3e:b5:9b:3f:86:
                    20:78:fe:27:38:0a:83:e8:a1:54:65:31:16:4a:e8:
                    4f:ce:c8:30:a0:5a:f8:7a:5f:4a:2f:75:91:f7:cd:
                    89:1a:3e:6f:48:d7:a1:6f:82:6f:a3:42:48:54:b1:
                    ae:6a:66:d1:ef:9c:73:e4:b2:8d:43:02:26:e6:00:
                    ec:b4:ad:5c:0b:fe:99:46:1f:76:7c:96:e1:8e:09:
                    06:62:5c:c5:7f:11:42:31:6c:eb:18:d0:fe:1e:ad:
                    c7:27:3e:48:fa:30:f3:67:19:a5:90:d7:82:2a:cd:
                    82:2c:b0:b8:97:5f:96:5e:d3:6b:bf:23:72:63:07:
                    93:7b:6e:c1:fe:4c:26:7f:97:df:38:82:71:bd:47:
                    c9:b7:7c:3d:dc:70:f9:24:d3:11:9b:2f:dd:29:09:
                    00:fd:dc:11:61:c8:69:54:6a:b2:ca:1b:a9:b0:9d:
                    9f:20:17:f4:7d:c3:14:5e:a6:c4:12:91:30:ef:69:
                    dd:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:FA:6F:89:6F:11:ED:E0:A6:2F:BB:24:BF:53:53:D0:ED:8D:74:D4
            X509v3 Authority Key Identifier:
                keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/37372e38332e3130352e302f32342d3234203d3e203432383331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.83.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:9b:c3:14:ea:51:d9:3d:fc:8c:f7:39:73:23:07:df:59:c4:
         06:44:bf:75:e5:27:b3:66:b9:42:c7:ff:f4:df:d7:fd:10:5f:
         96:00:84:2e:af:b6:ab:ff:5f:dc:47:23:50:67:e4:15:cc:a8:
         ae:64:dc:7c:3b:fd:48:d4:52:d5:87:bc:43:6d:0c:49:11:9d:
         bc:2e:1c:bd:57:3f:c6:2b:a0:11:78:15:31:70:68:8d:c6:53:
         41:85:33:0c:5a:2d:d1:98:f9:b4:0b:f8:d4:6a:34:51:c6:b9:
         f3:63:60:d4:74:c7:52:cf:67:cf:d5:8e:c4:60:2e:c2:86:13:
         42:bd:46:1d:0f:85:92:6a:8c:87:9b:07:63:f4:f2:47:95:f3:
         88:89:82:b5:69:4f:3b:d1:c3:f9:5f:e4:04:94:7b:7d:c8:0e:
         07:78:f7:a3:f9:63:1e:12:e5:05:86:e0:4a:c5:94:f8:e2:a2:
         59:e1:90:17:96:fd:32:a4:d5:26:0f:fe:66:a9:85:c4:20:c3:
         48:e2:37:cb:c5:f4:d2:cf:47:e0:9e:27:17:4e:0c:ef:2f:95:
         c3:ca:ea:cb:fd:7c:03:6d:db:db:c5:02:b9:47:06:39:1d:da:
         fd:b7:da:54:d7:84:28:2c:c3:e7:10:77:d1:b0:5b:9b:3b:d1:
         bc:f4:22:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 23:29:39 2026 by rpki-client