Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/2B4yq0p_ELPkMxmt9YQDijZbxZQ.roa
File:                     2B4yq0p_ELPkMxmt9YQDijZbxZQ.roa (raw, json)
Hash identifier:          X9wZYDsEmc62GPcY42wknRjOgO4UALMyiRv87kEy04M=
Subject key identifier:   D8:1E:32:AB:4A:7F:10:B3:E4:33:19:AD:F5:84:03:8A:36:5B:C5:94
Certificate issuer:       /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial:       0199E2FBD4E2A0F699E7E75D9AAE24E2E3C7
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/2B4yq0p_ELPkMxmt9YQDijZbxZQ.roa
Signing time:             Tue 14 Oct 2025 13:49:38 +0000
ROA not before:           Tue 14 Oct 2025 13:49:38 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     214025
IP address blocks:        77.107.95.0/24 maxlen: 24
                          82.152.83.0/24 maxlen: 24
                          82.152.142.0/24 maxlen: 24
                          213.210.52.0/24 maxlen: 24
                          213.210.53.0/24 maxlen: 24
                          217.144.158.0/24 maxlen: 24
                          217.145.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:e2:fb:d4:e2:a0:f6:99:e7:e7:5d:9a:ae:24:e2:e3:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
        Validity
            Not Before: Oct 14 13:49:38 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=d81e32ab4a7f10b3e43319adf584038a365bc594
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:00:ce:7a:6a:fd:62:7f:c9:9c:81:be:7c:55:
                    5d:89:6f:30:93:b7:58:88:6e:b9:c3:c9:1a:5e:a0:
                    bb:62:a6:99:91:93:5b:4e:ec:17:fc:b1:20:93:4b:
                    6b:ca:7b:e1:c7:4e:98:04:00:d2:c9:45:66:dd:7b:
                    ac:09:a1:4c:98:87:b4:58:eb:7a:bc:e5:4b:dd:64:
                    55:b1:a9:d6:46:99:77:4b:ec:88:08:8e:b7:65:7e:
                    5c:55:f7:2f:d7:78:01:5f:a3:54:74:56:09:69:f3:
                    03:25:ba:be:87:55:3f:5d:9a:ae:a0:44:25:f5:5a:
                    e9:22:6a:3b:7f:69:8c:af:9c:aa:b2:74:f9:29:b6:
                    6b:7e:9e:f0:7c:a7:17:20:61:b7:fb:7e:10:b3:93:
                    9f:68:8e:c7:1e:3e:79:eb:5e:4c:d5:18:8d:4f:9f:
                    29:71:c6:dc:8b:a9:9f:b7:01:97:d9:42:d8:3a:a4:
                    43:e2:3f:da:74:41:91:f4:c5:6b:0d:3c:64:6d:7b:
                    bc:35:7d:5e:79:3f:f0:e1:da:1e:ee:67:76:54:7a:
                    6d:e9:26:8e:71:a7:f3:14:b2:a5:a9:b7:6d:1c:62:
                    6f:5c:33:d6:9c:f3:d8:8c:1c:98:8b:3c:f2:f7:7c:
                    e4:8d:bf:72:ac:78:fb:f8:74:7d:39:16:5f:0e:15:
                    ec:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:1E:32:AB:4A:7F:10:B3:E4:33:19:AD:F5:84:03:8A:36:5B:C5:94
            X509v3 Authority Key Identifier:
                keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/2B4yq0p_ELPkMxmt9YQDijZbxZQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.107.95.0/24
                  82.152.83.0/24
                  82.152.142.0/24
                  213.210.52.0/23
                  217.144.158.0/24
                  217.145.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:07:5b:c4:fb:4e:e4:b6:b6:50:ef:a7:e2:43:97:2b:62:53:
         34:7f:78:82:90:ae:c8:05:24:c6:94:1f:62:f9:d0:d9:86:7b:
         68:3a:11:4c:ed:e4:be:3f:29:db:94:ca:e3:2b:01:ae:f4:88:
         3a:61:b0:24:b3:ea:dc:5a:08:45:65:a7:91:f9:15:a8:77:95:
         90:96:13:ed:3c:9c:af:3e:9d:98:4c:c9:94:26:37:ac:0c:7b:
         9c:3d:40:ef:c7:00:66:f0:e5:38:28:3f:3b:10:ad:8a:9e:14:
         0c:95:26:cf:97:14:87:6e:15:b4:a2:04:ee:9e:b4:48:d7:21:
         35:a8:2b:55:3f:4c:4f:6c:c9:0b:47:25:2a:2d:a8:95:b7:19:
         f5:fb:f4:03:a5:5d:45:39:e0:5b:6f:6c:8a:b4:87:5c:74:3a:
         35:7d:c2:32:b5:c0:69:5b:ad:a1:55:e6:b9:83:a6:fa:5a:80:
         e1:48:21:bf:13:00:88:dc:5d:63:d1:90:52:7e:35:00:9a:27:
         98:be:90:dc:f6:86:99:4e:7a:37:cf:b6:fd:50:8a:42:42:fd:
         4d:d8:68:71:01:77:74:11:a6:96:1b:55:63:4c:c5:a6:c3:9f:
         f8:48:ca:2e:f8:41:a8:ab:5e:c1:b0:bd:52:49:87:7d:07:05:
         25:ba:7a:2f
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZni+9TioPaZ5+ddmq4k4uPHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjUxMDE0MTM0OTM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkODFlMzJhYjRhN2YxMGIzZTQzMzE5YWRmNTg0MDM4YTM2NWJjNTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4gDOemr9Yn/JnIG+fFVdiW8wk7dY
iG65w8kaXqC7YqaZkZNbTuwX/LEgk0trynvhx06YBADSyUVm3XusCaFMmIe0WOt6
vOVL3WRVsanWRpl3S+yICI63ZX5cVfcv13gBX6NUdFYJafMDJbq+h1U/XZquoEQl
9VrpImo7f2mMr5yqsnT5KbZrfp7wfKcXIGG3+34Qs5OfaI7HHj55615M1RiNT58p
ccbci6mftwGX2ULYOqRD4j/adEGR9MVrDTxkbXu8NX1eeT/w4doe7md2VHpt6SaO
cafzFLKlqbdtHGJvXDPWnPPYjByYizzy93zkjb9yrHj7+HR9ORZfDhXsXwIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFNgeMqtKfxCz5DMZrfWEA4o2W8WUMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvMkI0eXEwcF9FTFBrTXhtdDlZUURpalpieFpRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQATWtfAwQA
UphTAwQAUpiOAwQB1dI0AwQA2ZCeAwQA2ZFLMA0GCSqGSIb3DQEBCwUAA4IBAQCf
B1vE+07ktrZQ76fiQ5crYlM0f3iCkK7IBSTGlB9i+dDZhntoOhFM7eS+PynblMrj
KwGu9Ig6YbAks+rcWghFZaeR+RWod5WQlhPtPJyvPp2YTMmUJjesDHucPUDvxwBm
8OU4KD87EK2KnhQMlSbPlxSHbhW0ogTunrRI1yE1qCtVP0xPbMkLRyUqLaiVtxn1
+/QDpV1FOeBbb2yKtIdcdDo1fcIytcBpW62hVea5g6b6WoDhSCG/EwCI3F1j0ZBS
fjUAmieYvpDc9oaZTno3z7b9UIpCQv1N2GhxAXd0EaaWG1VjTMWmw5/4SMou+EGo
q17BsL1SSYd9BwUlunov
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:11:17 2025 by rpki-client