Route Origin Authorization

$ rpki-client -vvf rpki.pudu.be/repo/pudu/3/326130373a353463313a343130303a3a2f34302d313238203d3e203437363839.roa
File:                     326130373a353463313a343130303a3a2f34302d313238203d3e203437363839.roa (raw, json)
Hash identifier:          4cTFf0VW0IDheJ1WH/CC1b+GPvlbZVAkRoUKsXthgZQ=
Subject key identifier:   CD:3D:E2:B6:01:09:70:DA:A2:ED:A6:61:C0:5B:FF:BF:60:8C:85:DA
Certificate issuer:       /CN=36E709368620BD63612D7AF179D2A786396A87A5
Certificate serial:       6BBAD37609AC35BEC2B86D92F3A3E62786519929
Authority key identifier: 36:E7:09:36:86:20:BD:63:61:2D:7A:F1:79:D2:A7:86:39:6A:87:A5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/36E709368620BD63612D7AF179D2A786396A87A5.cer
Subject info access:      rsync://rpki.pudu.be/repo/pudu/3/326130373a353463313a343130303a3a2f34302d313238203d3e203437363839.roa
Signing time:             Sat 06 Jun 2026 13:24:36 +0000
ROA not before:           Sat 06 Jun 2026 13:19:36 +0000
ROA not after:            Sat 05 Jun 2027 13:24:36 +0000
asID:                     47689
IP address blocks:        2a07:54c1:4100::/40 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.pudu.be/repo/pudu/3/36E709368620BD63612D7AF179D2A786396A87A5.crl
                          rsync://rpki.pudu.be/repo/pudu/3/36E709368620BD63612D7AF179D2A786396A87A5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/36E709368620BD63612D7AF179D2A786396A87A5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 10:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:ba:d3:76:09:ac:35:be:c2:b8:6d:92:f3:a3:e6:27:86:51:99:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36E709368620BD63612D7AF179D2A786396A87A5
        Validity
            Not Before: Jun  6 13:19:36 2026 GMT
            Not After : Jun  5 13:24:36 2027 GMT
        Subject: CN=CD3DE2B6010970DAA2EDA661C05BFFBF608C85DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:dd:ca:24:4b:97:a1:1e:e2:92:d2:de:d7:88:
                    20:ae:60:92:22:59:62:1b:28:f9:eb:af:1b:e2:d0:
                    39:29:4e:26:0d:05:ee:f2:34:67:3c:09:f8:e5:f1:
                    0b:b6:87:c5:13:46:a2:2f:43:30:4a:1c:32:62:d8:
                    c1:6c:2f:fd:ce:8f:7f:61:5f:2e:d5:7a:03:c1:cd:
                    1a:07:c9:1d:88:ee:aa:0d:a6:a2:88:14:96:7d:72:
                    a9:e2:ff:1a:ca:8f:62:37:87:fd:50:04:ea:62:77:
                    da:e4:fd:0d:d6:94:93:0c:55:0c:a0:9e:d8:5d:85:
                    17:f9:50:35:f5:23:cb:b2:9a:c1:7f:c9:98:4a:a9:
                    05:c3:62:46:44:67:6c:9d:46:86:8e:ae:29:9c:39:
                    d7:4e:5d:0e:a9:0b:01:08:37:b7:7f:ed:7e:e0:10:
                    47:29:1d:57:c7:31:94:39:e6:14:00:ea:a7:81:46:
                    97:3e:0d:e4:08:b3:4a:fa:28:0a:1d:2d:8d:bc:5c:
                    c1:5e:9b:c5:f9:b8:27:09:1b:28:74:6c:cd:f1:bb:
                    fc:2d:2b:76:25:d8:84:fa:42:37:04:8b:b3:ef:34:
                    1e:b5:93:47:8f:0e:bc:75:e1:6b:32:09:f0:4d:92:
                    ff:2f:5a:ae:70:5e:ba:c5:2b:7d:a4:6e:47:2f:69:
                    5f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:3D:E2:B6:01:09:70:DA:A2:ED:A6:61:C0:5B:FF:BF:60:8C:85:DA
            X509v3 Authority Key Identifier:
                keyid:36:E7:09:36:86:20:BD:63:61:2D:7A:F1:79:D2:A7:86:39:6A:87:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.pudu.be/repo/pudu/3/36E709368620BD63612D7AF179D2A786396A87A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/36E709368620BD63612D7AF179D2A786396A87A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.pudu.be/repo/pudu/3/326130373a353463313a343130303a3a2f34302d313238203d3e203437363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1:4100::/40

    Signature Algorithm: sha256WithRSAEncryption
         09:ca:1e:36:13:75:0d:e0:7f:88:db:10:66:38:40:e3:55:44:
         e9:24:74:f9:80:f8:15:72:ce:08:95:1e:6b:5a:b5:46:5e:d9:
         ab:b6:3d:ec:55:cf:86:43:45:d7:48:28:99:75:cd:49:62:82:
         13:88:45:6d:4c:33:0e:88:05:55:e9:22:18:4c:ce:dc:82:46:
         42:55:b1:9a:dd:fb:43:9c:f3:59:10:22:31:96:24:54:46:c5:
         14:8e:d8:9b:68:98:f1:06:6a:39:d2:2c:7f:b3:37:7b:70:4e:
         c5:aa:b1:d5:05:42:c9:55:bd:b5:80:05:12:3c:d4:0f:40:b1:
         ec:9c:a6:6d:cb:e1:aa:72:4e:08:5e:bc:a4:bf:c7:fe:cb:85:
         e4:2d:50:b8:8f:af:f4:33:8f:54:03:cc:74:7a:d6:95:e7:4b:
         52:da:67:40:42:24:0b:31:cf:3f:e5:39:ce:40:1e:fc:5b:21:
         28:54:13:1c:9f:2e:bb:ee:5e:03:ab:3a:0a:ce:00:d4:a5:ea:
         27:b1:99:dd:ca:8c:40:78:c6:36:81:cb:5d:b5:ed:0e:7c:46:
         92:e9:e4:9a:f4:3a:25:1b:93:93:cb:e6:d4:ce:b9:c2:f0:8e:
         74:d5:e8:29:ef:01:2f:63:a3:30:fc:a8:2f:6f:17:b0:3d:d9:
         6c:7e:54:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:00:29 2026 by rpki-client