Route Origin Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/emq5038n41L4-KrF9rEK84TuCmM.roa
File:                     emq5038n41L4-KrF9rEK84TuCmM.roa (raw, json)
Hash identifier:          tbhk8tl9p+7OgyOvBycsSUl07NK+MpWMiisFcnuTa7A=
Subject key identifier:   7A:6A:B9:D3:7F:27:E3:52:F8:F8:AA:C5:F6:B1:0A:F3:84:EE:0A:63
Certificate issuer:       /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial:       01A0D2A8DD882032AC76E329C57CA5383F69
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/emq5038n41L4-KrF9rEK84TuCmM.roa
Signing time:             Thu 24 Sep 2026 09:04:37 +0000
ROA not before:           Thu 24 Sep 2026 09:04:37 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     212238
IP address blocks:        79.121.132.0/22 maxlen: 24
                          79.121.132.0/23 maxlen: 24
                          79.121.134.0/23 maxlen: 24
                          79.121.140.0/22 maxlen: 24
                          79.121.140.0/23 maxlen: 24
                          79.121.142.0/23 maxlen: 24
                          79.121.144.0/23 maxlen: 24
                          79.121.148.0/22 maxlen: 24
                          79.121.148.0/23 maxlen: 24
                          79.121.150.0/23 maxlen: 24
                          79.121.154.0/23 maxlen: 24
                          79.121.156.0/23 maxlen: 24
                          79.121.162.0/23 maxlen: 24
                          79.121.164.0/22 maxlen: 24
                          79.121.164.0/23 maxlen: 24
                          79.121.166.0/23 maxlen: 24
                          79.121.168.0/23 maxlen: 24
                          79.121.178.0/23 maxlen: 24
                          79.121.180.0/23 maxlen: 24
                          79.121.184.0/23 maxlen: 24
                          79.121.200.0/21 maxlen: 24
                          79.121.212.0/22 maxlen: 24
                          79.121.212.0/23 maxlen: 24
                          79.121.214.0/23 maxlen: 24
                          79.121.216.0/22 maxlen: 24
                          79.121.216.0/23 maxlen: 24
                          79.121.218.0/23 maxlen: 24
                          79.121.222.0/23 maxlen: 24
                          79.121.226.0/23 maxlen: 24
                          79.121.232.0/22 maxlen: 24
                          79.121.232.0/23 maxlen: 24
                          79.121.234.0/23 maxlen: 24
                          79.121.238.0/23 maxlen: 24
                          82.108.58.0/23 maxlen: 23
                          82.108.74.0/23 maxlen: 23
                          82.108.108.0/23 maxlen: 23
                          82.108.112.0/23 maxlen: 23
                          82.108.158.0/23 maxlen: 23
                          82.108.160.0/23 maxlen: 23
                          82.109.69.0/24 maxlen: 24
                          82.109.229.0/24 maxlen: 24
                          82.110.60.0/24 maxlen: 24
                          87.82.214.0/23 maxlen: 23
                          87.83.1.0/24 maxlen: 24
                          87.83.171.0/24 maxlen: 24
                          87.84.224.0/24 maxlen: 24
                          87.85.140.0/24 maxlen: 24
                          92.244.174.0/23 maxlen: 24
                          92.244.176.0/23 maxlen: 24
                          92.244.180.0/23 maxlen: 24
                          92.244.182.0/23 maxlen: 24
                          92.244.184.0/23 maxlen: 24
                          92.244.190.0/23 maxlen: 24
                          93.152.73.0/24 maxlen: 24
                          93.152.87.0/24 maxlen: 24
                          95.177.0.0/23 maxlen: 24
                          95.177.8.0/23 maxlen: 24
                          95.177.20.0/23 maxlen: 24
                          95.177.54.0/23 maxlen: 24
                          95.177.64.0/23 maxlen: 24
                          95.177.68.0/22 maxlen: 24
                          95.177.68.0/23 maxlen: 24
                          95.177.70.0/23 maxlen: 24
                          95.177.72.0/23 maxlen: 24
                          95.177.76.0/22 maxlen: 24
                          95.177.76.0/23 maxlen: 24
                          95.177.78.0/23 maxlen: 24
                          95.177.80.0/22 maxlen: 24
                          95.177.80.0/23 maxlen: 24
                          95.177.82.0/23 maxlen: 24
                          95.177.104.0/22 maxlen: 24
                          95.177.104.0/23 maxlen: 24
                          95.177.106.0/23 maxlen: 24
                          95.177.114.0/23 maxlen: 24
                          95.177.124.0/22 maxlen: 24
                          95.177.124.0/23 maxlen: 24
                          95.177.126.0/23 maxlen: 24
                          109.174.176.0/22 maxlen: 24
                          109.174.180.0/22 maxlen: 24
                          109.174.184.0/22 maxlen: 24
                          109.174.188.0/22 maxlen: 24
                          109.204.6.0/23 maxlen: 24
                          109.204.12.0/23 maxlen: 24
                          109.204.20.0/23 maxlen: 24
                          109.204.28.0/23 maxlen: 24
                          109.204.32.0/23 maxlen: 24
                          109.204.40.0/23 maxlen: 24
                          109.204.44.0/23 maxlen: 24
                          109.204.50.0/23 maxlen: 24
                          109.204.54.0/23 maxlen: 24
                          109.204.58.0/23 maxlen: 24
                          109.204.60.0/23 maxlen: 24
                          109.204.72.0/23 maxlen: 24
                          109.204.82.0/23 maxlen: 24
                          109.204.92.0/23 maxlen: 24
                          109.204.95.0/24 maxlen: 24
                          109.204.101.0/24 maxlen: 24
                          109.204.112.0/23 maxlen: 24
                          109.204.120.0/23 maxlen: 24
                          109.204.124.0/23 maxlen: 24
                          195.40.18.0/23 maxlen: 23
                          195.40.26.0/23 maxlen: 24
                          195.40.28.0/23 maxlen: 23
                          195.40.30.0/23 maxlen: 24
                          195.40.86.0/24 maxlen: 24
                          195.40.100.0/23 maxlen: 24
                          195.40.114.0/23 maxlen: 24
                          195.40.116.0/23 maxlen: 23
                          195.40.118.0/23 maxlen: 24
                          195.40.162.0/23 maxlen: 23
                          195.40.166.0/23 maxlen: 24
                          195.40.180.0/24 maxlen: 24
                          195.40.188.0/23 maxlen: 23
                          195.172.98.0/23 maxlen: 23
                          195.172.102.0/23 maxlen: 24
                          195.172.110.0/23 maxlen: 24
                          195.172.112.0/23 maxlen: 24
                          195.172.124.0/24 maxlen: 24
                          195.172.134.0/23 maxlen: 23
                          195.172.204.0/23 maxlen: 24
                          195.172.212.0/23 maxlen: 23
                          195.172.214.0/23 maxlen: 24
                          195.172.216.0/23 maxlen: 24
                          195.172.218.0/23 maxlen: 24
                          195.172.220.0/23 maxlen: 24
                          195.172.222.0/23 maxlen: 24
                          212.134.11.0/24 maxlen: 24
                          212.134.65.0/24 maxlen: 24
                          212.134.72.0/23 maxlen: 23
                          212.134.78.0/24 maxlen: 24
                          212.135.0.0/24 maxlen: 24
                          212.135.2.0/23 maxlen: 23
                          212.135.5.0/24 maxlen: 24
                          212.135.10.0/23 maxlen: 24
                          212.135.174.0/24 maxlen: 24
                          212.135.178.0/24 maxlen: 24
                          212.135.190.0/23 maxlen: 24
                          212.135.236.0/23 maxlen: 24
                          217.79.104.0/22 maxlen: 24
                          217.79.116.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d2:a8:dd:88:20:32:ac:76:e3:29:c5:7c:a5:38:3f:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e20b034e2c497b1884488def106972704765029
        Validity
            Not Before: Sep 24 09:04:37 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7a6ab9d37f27e352f8f8aac5f6b10af384ee0a63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:6d:02:fd:21:9b:8d:39:80:b3:08:74:f6:3a:
                    76:18:c5:59:0f:b0:ce:64:de:04:8e:7e:c3:2a:a9:
                    92:0f:8e:27:9f:f5:43:10:dc:4a:11:82:25:3a:15:
                    06:c3:fa:9f:38:90:9a:1d:3b:d1:89:f4:54:72:20:
                    40:27:9b:06:a7:67:98:c3:69:72:5d:c0:af:c7:c0:
                    36:69:a7:ef:98:fc:f1:12:36:59:39:9f:54:d3:2f:
                    9b:00:a9:fd:ca:f2:45:cb:09:9b:fc:57:ce:80:c5:
                    eb:9c:e2:61:07:41:f6:30:69:d9:74:e7:82:da:33:
                    8a:9a:0b:6d:b3:5e:fb:81:b4:cc:36:36:81:d1:47:
                    06:b9:34:07:0e:1c:b4:44:33:21:dd:4b:b6:3a:6c:
                    44:38:f6:33:25:71:2f:bb:1d:ff:d4:98:c1:b6:64:
                    31:eb:8a:f6:50:7d:64:7f:0f:ce:6b:d4:91:b7:8c:
                    40:38:ce:5e:01:13:d2:d9:dc:6b:23:3f:56:bc:bf:
                    4b:7b:58:c7:f4:18:5a:ca:b2:f7:b3:02:b1:c5:80:
                    97:c3:33:dd:e0:db:0c:6e:fc:91:5a:a6:d9:e9:5d:
                    d4:78:07:a9:f9:ad:6b:b0:15:2a:80:5f:25:d8:57:
                    1d:af:6a:e3:bb:1b:9b:4c:8d:2f:e0:f2:cf:82:4f:
                    8c:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:6A:B9:D3:7F:27:E3:52:F8:F8:AA:C5:F6:B1:0A:F3:84:EE:0A:63
            X509v3 Authority Key Identifier:
                keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/emq5038n41L4-KrF9rEK84TuCmM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.121.132.0/22
                  79.121.140.0-79.121.145.255
                  79.121.148.0/22
                  79.121.154.0-79.121.157.255
                  79.121.162.0-79.121.169.255
                  79.121.178.0-79.121.181.255
                  79.121.184.0/23
                  79.121.200.0/21
                  79.121.212.0-79.121.219.255
                  79.121.222.0/23
                  79.121.226.0/23
                  79.121.232.0/22
                  79.121.238.0/23
                  82.108.58.0/23
                  82.108.74.0/23
                  82.108.108.0/23
                  82.108.112.0/23
                  82.108.158.0-82.108.161.255
                  82.109.69.0/24
                  82.109.229.0/24
                  82.110.60.0/24
                  87.82.214.0/23
                  87.83.1.0/24
                  87.83.171.0/24
                  87.84.224.0/24
                  87.85.140.0/24
                  92.244.174.0-92.244.177.255
                  92.244.180.0-92.244.185.255
                  92.244.190.0/23
                  93.152.73.0/24
                  93.152.87.0/24
                  95.177.0.0/23
                  95.177.8.0/23
                  95.177.20.0/23
                  95.177.54.0/23
                  95.177.64.0/23
                  95.177.68.0-95.177.73.255
                  95.177.76.0-95.177.83.255
                  95.177.104.0/22
                  95.177.114.0/23
                  95.177.124.0/22
                  109.174.176.0/20
                  109.204.6.0/23
                  109.204.12.0/23
                  109.204.20.0/23
                  109.204.28.0/23
                  109.204.32.0/23
                  109.204.40.0/23
                  109.204.44.0/23
                  109.204.50.0/23
                  109.204.54.0/23
                  109.204.58.0-109.204.61.255
                  109.204.72.0/23
                  109.204.82.0/23
                  109.204.92.0/23
                  109.204.95.0/24
                  109.204.101.0/24
                  109.204.112.0/23
                  109.204.120.0/23
                  109.204.124.0/23
                  195.40.18.0/23
                  195.40.26.0-195.40.31.255
                  195.40.86.0/24
                  195.40.100.0/23
                  195.40.114.0-195.40.119.255
                  195.40.162.0/23
                  195.40.166.0/23
                  195.40.180.0/24
                  195.40.188.0/23
                  195.172.98.0/23
                  195.172.102.0/23
                  195.172.110.0-195.172.113.255
                  195.172.124.0/24
                  195.172.134.0/23
                  195.172.204.0/23
                  195.172.212.0-195.172.223.255
                  212.134.11.0/24
                  212.134.65.0/24
                  212.134.72.0/23
                  212.134.78.0/24
                  212.135.0.0/24
                  212.135.2.0/23
                  212.135.5.0/24
                  212.135.10.0/23
                  212.135.174.0/24
                  212.135.178.0/24
                  212.135.190.0/23
                  212.135.236.0/23
                  217.79.104.0/22
                  217.79.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:c7:b0:c8:e8:38:9b:9d:72:fc:6c:b9:e5:c0:d3:98:72:bd:
         f2:f1:6c:a2:b6:9a:78:77:99:aa:23:58:12:9c:19:40:61:15:
         b7:87:df:ee:cc:c1:81:fa:b3:a4:06:71:43:85:80:10:e9:1e:
         56:34:7b:88:99:6f:ef:9c:b6:aa:af:2e:40:d8:cf:f4:20:77:
         0e:2d:05:97:c8:30:1a:73:b0:92:da:40:80:f0:1b:dc:9b:cc:
         33:56:b8:4e:c3:28:5a:47:51:32:11:80:2d:0a:67:5b:dc:ae:
         6a:58:d0:0c:91:81:5d:af:31:14:1b:30:ea:b2:2c:6c:2b:e1:
         ee:5e:d4:74:78:6c:60:39:35:43:21:a3:a4:7a:fa:cc:70:88:
         d9:b0:7c:77:8b:d7:7a:e7:42:65:b6:5a:81:6b:95:9f:62:af:
         35:05:bc:14:c8:ed:73:4c:f1:23:f3:a9:82:d5:ad:95:37:4d:
         71:c3:d3:f3:2f:fd:24:64:2d:63:01:75:5f:16:a1:03:04:cf:
         4b:83:5f:ba:81:07:20:43:ff:72:3c:c0:5e:54:99:a8:9e:d5:
         24:89:e0:fc:7e:ba:3e:31:d2:23:f8:9b:c5:32:79:f1:c3:a3:
         ba:f3:06:e1:90:cb:2f:33:ee:35:24:4f:37:68:71:3b:01:47:
         e2:d1:85:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:57:37 2026 by rpki-client