Route Origin Authorization

$ rpki-client -vvf rpki.pudu.be/repo/pudu/3/326130373a353463313a343166663a3a2f34382d3438203d3e203536373632.roa
File:                     326130373a353463313a343166663a3a2f34382d3438203d3e203536373632.roa (raw, json)
Hash identifier:          +kq/wMvTkC2DhdfhajllwbstCCsT8imFPoFuPEZT3/A=
Subject key identifier:   D4:D3:B0:13:A1:20:C6:7F:F9:D1:5C:D4:4F:91:BC:BA:E5:36:C5:51
Certificate issuer:       /CN=36E709368620BD63612D7AF179D2A786396A87A5
Certificate serial:       58EE46B68752374C0D40A32CF0F5F854EC0BEB0D
Authority key identifier: 36:E7:09:36:86:20:BD:63:61:2D:7A:F1:79:D2:A7:86:39:6A:87:A5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/36E709368620BD63612D7AF179D2A786396A87A5.cer
Subject info access:      rsync://rpki.pudu.be/repo/pudu/3/326130373a353463313a343166663a3a2f34382d3438203d3e203536373632.roa
Signing time:             Sat 06 Jun 2026 13:24:36 +0000
ROA not before:           Sat 06 Jun 2026 13:19:36 +0000
ROA not after:            Sat 05 Jun 2027 13:24:36 +0000
asID:                     56762
IP address blocks:        2a07:54c1:41ff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.pudu.be/repo/pudu/3/36E709368620BD63612D7AF179D2A786396A87A5.crl
                          rsync://rpki.pudu.be/repo/pudu/3/36E709368620BD63612D7AF179D2A786396A87A5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/36E709368620BD63612D7AF179D2A786396A87A5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 10:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:ee:46:b6:87:52:37:4c:0d:40:a3:2c:f0:f5:f8:54:ec:0b:eb:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36E709368620BD63612D7AF179D2A786396A87A5
        Validity
            Not Before: Jun  6 13:19:36 2026 GMT
            Not After : Jun  5 13:24:36 2027 GMT
        Subject: CN=D4D3B013A120C67FF9D15CD44F91BCBAE536C551
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:da:1c:26:86:d6:ca:68:fa:43:f9:ba:e1:42:
                    76:f2:0f:6d:bb:f5:3b:69:5e:59:bf:18:61:18:29:
                    25:a9:c6:31:de:d7:93:04:b1:96:d1:b6:c2:7d:d5:
                    15:3e:23:96:65:6e:83:c6:57:44:0c:d6:68:bf:ad:
                    67:a9:12:8b:ec:42:e2:1a:61:7f:0b:21:22:4a:b9:
                    44:5a:dc:26:d1:6e:93:23:44:78:ce:a8:e7:4c:dd:
                    9b:1d:b7:0d:a6:67:c1:21:44:0c:2f:64:d1:85:51:
                    54:f0:9a:bf:25:db:b8:13:17:07:00:8e:be:05:c4:
                    88:55:55:72:d5:ad:7b:96:bb:26:43:84:b1:f8:16:
                    59:c0:be:95:d1:25:4b:f6:3c:47:31:0a:f2:52:88:
                    c6:d1:6a:56:cf:8e:3d:20:a1:fd:ac:41:ef:14:f0:
                    37:14:f7:be:df:3e:02:cb:59:d6:9b:fa:eb:52:f3:
                    fe:c4:79:78:be:e2:e6:38:b7:bc:43:b2:4e:97:e4:
                    5f:e2:4a:ed:5e:c0:8b:96:3f:c1:1a:0a:8e:80:8e:
                    2e:70:85:69:7d:6e:07:c9:0c:4f:41:d3:44:8f:4e:
                    f7:19:83:04:c6:d1:cc:a6:bf:02:fc:da:4f:e1:a0:
                    47:45:63:fa:34:e8:b7:09:2b:de:a0:ef:59:36:bc:
                    98:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:D3:B0:13:A1:20:C6:7F:F9:D1:5C:D4:4F:91:BC:BA:E5:36:C5:51
            X509v3 Authority Key Identifier:
                keyid:36:E7:09:36:86:20:BD:63:61:2D:7A:F1:79:D2:A7:86:39:6A:87:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.pudu.be/repo/pudu/3/36E709368620BD63612D7AF179D2A786396A87A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/36E709368620BD63612D7AF179D2A786396A87A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.pudu.be/repo/pudu/3/326130373a353463313a343166663a3a2f34382d3438203d3e203536373632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1:41ff::/48

    Signature Algorithm: sha256WithRSAEncryption
         2c:f7:bb:3e:11:e8:03:94:fd:db:ea:8a:b7:3f:7c:4c:d6:e6:
         ac:d1:e4:e0:36:69:f7:ca:52:28:99:b1:ee:62:6f:3c:52:a2:
         ff:84:9a:b0:6b:8f:cb:7e:fa:e0:f8:68:35:39:c6:f6:76:bf:
         c1:63:8d:73:fd:8e:7b:7f:cf:62:05:7e:c5:cb:04:32:cf:25:
         77:9a:45:b4:63:25:9f:76:6f:12:87:b0:1e:d2:87:ec:f3:38:
         3b:b5:5c:6a:d8:34:b4:f4:d2:fb:d1:e3:f9:34:7e:e5:03:55:
         18:24:b8:e8:19:59:30:c3:ae:38:85:9f:7f:b8:8c:4f:49:d0:
         0b:ff:68:09:26:a7:6b:23:5f:e4:1d:09:43:7d:32:6b:d2:8f:
         c4:ec:40:b2:0f:d4:92:6d:ff:d7:31:de:1d:58:cc:a9:8f:4c:
         2b:c0:34:69:d5:06:a9:11:14:b3:c0:77:93:a8:5c:f5:58:26:
         27:07:b9:b5:4b:fa:bd:08:49:e9:a2:fa:54:d8:c1:8e:f9:87:
         54:04:4f:3c:15:99:7c:80:0e:f8:6b:fb:cf:9c:b6:84:2b:bb:
         ca:fd:ac:77:16:50:23:dd:66:b7:fe:bc:d0:77:55:b9:65:22:
         38:52:c4:c3:6e:d2:28:6e:29:91:85:04:9d:2f:cc:06:15:16:
         91:68:1c:f4
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 13 20:21:35 2026 by rpki-client