Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/kKgi-TtCN3ONXzc5dOLgjXmeD4Y.roa
File:                     kKgi-TtCN3ONXzc5dOLgjXmeD4Y.roa (raw, json)
Hash identifier:          ThrWPeEKYfxXyDvqo92XPXVjCuwCt73viQ6BGTVTHKs=
Subject key identifier:   90:A8:22:F9:3B:42:37:73:8D:5F:37:39:74:E2:E0:8D:79:9E:0F:86
Certificate issuer:       /CN=66a1d1a017802e5c57da5978544fc537403da73a
Certificate serial:       0199C00949CA5503974B52679899EAC92727
Authority key identifier: 66:A1:D1:A0:17:80:2E:5C:57:DA:59:78:54:4F:C5:37:40:3D:A7:3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZqHRoBeALlxX2ll4VE_FN0A9pzo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/kKgi-TtCN3ONXzc5dOLgjXmeD4Y.roa
Signing time:             Tue 07 Oct 2025 18:57:37 +0000
ROA not before:           Tue 07 Oct 2025 18:57:37 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     61029
IP address blocks:        37.72.96.0/24 maxlen: 24
                          37.72.97.0/24 maxlen: 24
                          37.72.98.0/24 maxlen: 24
                          37.72.99.0/24 maxlen: 24
                          37.72.100.0/24 maxlen: 24
                          37.72.101.0/24 maxlen: 24
                          37.72.102.0/24 maxlen: 24
                          37.72.103.0/24 maxlen: 24
                          37.72.104.0/24 maxlen: 24
                          37.72.105.0/24 maxlen: 24
                          37.72.106.0/24 maxlen: 24
                          37.72.107.0/24 maxlen: 24
                          2a00:8240::/29 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/ZqHRoBeALlxX2ll4VE_FN0A9pzo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/ZqHRoBeALlxX2ll4VE_FN0A9pzo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZqHRoBeALlxX2ll4VE_FN0A9pzo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 09:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:c0:09:49:ca:55:03:97:4b:52:67:98:99:ea:c9:27:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66a1d1a017802e5c57da5978544fc537403da73a
        Validity
            Not Before: Oct  7 18:57:37 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=90a822f93b4237738d5f373974e2e08d799e0f86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a8:c3:82:9e:a7:f1:f0:75:63:6b:c3:0c:ff:
                    04:63:44:b1:96:c0:2c:d7:03:72:50:8e:3f:5f:aa:
                    99:cb:6d:38:49:c5:72:a8:09:0e:d4:ce:4c:cd:40:
                    5f:55:92:0b:81:74:65:08:22:4a:de:cf:52:21:01:
                    70:08:c4:fd:88:aa:ba:98:ef:e1:a2:98:36:d0:51:
                    d3:0d:96:19:48:bd:dc:3a:19:79:60:3f:58:ca:27:
                    db:1d:94:5f:95:bd:db:7d:23:2c:f9:fb:80:d5:9d:
                    15:4e:94:04:8e:da:39:c3:f4:f8:4d:a7:c7:63:ef:
                    b0:47:92:cd:40:d5:8c:8c:e5:e0:a9:d1:2e:d8:e4:
                    15:ff:94:d7:a0:77:b7:9a:4d:3a:b1:09:89:e8:de:
                    14:91:ec:b2:d5:f4:cc:ef:9e:bc:58:9c:d2:bb:5b:
                    f8:d0:c2:3d:b5:54:ee:c5:38:44:bc:ef:4b:2f:39:
                    0f:90:c4:df:d0:61:e8:25:41:06:db:f7:99:dc:47:
                    9c:0a:23:6f:1e:12:d3:e1:c1:b6:3f:84:8c:31:08:
                    43:a2:8b:72:85:c8:7f:58:16:56:10:42:c4:c8:8f:
                    1b:68:01:f9:c0:99:ef:b8:d9:f7:ab:1f:27:92:ac:
                    9e:54:df:57:16:69:83:7f:54:8b:a1:5e:00:b6:8c:
                    2c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:A8:22:F9:3B:42:37:73:8D:5F:37:39:74:E2:E0:8D:79:9E:0F:86
            X509v3 Authority Key Identifier:
                keyid:66:A1:D1:A0:17:80:2E:5C:57:DA:59:78:54:4F:C5:37:40:3D:A7:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZqHRoBeALlxX2ll4VE_FN0A9pzo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/kKgi-TtCN3ONXzc5dOLgjXmeD4Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/ZqHRoBeALlxX2ll4VE_FN0A9pzo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.72.96.0-37.72.107.255
                IPv6:
                  2a00:8240::/29

    Signature Algorithm: sha256WithRSAEncryption
         26:d8:d2:a4:f1:68:d5:bb:0e:0e:fb:c8:9c:9f:c6:7f:dc:eb:
         76:c0:66:b5:be:bb:85:de:da:60:92:cf:a4:f3:7d:f0:c2:68:
         68:e7:52:80:04:f5:27:77:ac:c7:9a:e2:01:8c:ae:37:8c:40:
         4e:77:14:1f:1b:8a:7d:74:60:57:0e:6c:8f:cb:0d:08:28:a7:
         fe:23:d9:8b:71:fe:27:20:89:64:7e:33:e8:89:53:9f:28:d4:
         c8:b6:8f:d5:95:c0:91:50:09:94:29:69:7f:be:11:21:75:b9:
         8b:58:25:a0:00:06:bd:5e:27:05:be:9b:e1:00:68:5b:3f:4e:
         50:c5:30:12:da:6a:76:34:d1:ab:58:a0:37:a3:61:53:5e:09:
         dd:ff:b0:9b:55:e4:60:ea:73:da:1c:a7:c3:d0:85:76:03:3d:
         d4:71:6d:b2:49:72:dc:37:f8:d2:24:5c:5a:86:95:9d:b3:41:
         13:e2:10:d7:2e:fb:93:4a:bc:43:37:02:93:5a:ca:65:75:a8:
         4d:5d:94:36:89:ff:6d:e6:14:e1:a2:c1:f2:f3:fb:97:b5:d4:
         8f:b2:d8:9f:09:c3:89:84:a7:fa:bf:eb:dc:2c:44:02:c2:8c:
         e5:23:54:c4:c6:cc:37:2b:05:8a:ac:20:d2:3e:7f:89:e1:ab:
         36:90:5b:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:44:26 2025 by rpki-client