Route Origin Authorization

$ rpki-client -vvf rpki.ruinet.work/repo/CowGrassland/0/326131343a373538333a663466633a3a2f34382d3438203d3e20323131353735.roa
File:                     326131343a373538333a663466633a3a2f34382d3438203d3e20323131353735.roa (raw, json)
Hash identifier:          kdywiuAs/cETnnZJ3FT+WVqkkRAVJZZx9nknTESbdb8=
Subject key identifier:   BF:22:E1:34:BF:0A:A6:89:86:60:E7:AC:FA:3E:0F:14:0F:85:DD:EE
Certificate issuer:       /CN=E2D8063C20C5FF1C1C1ACC3AD4E9D0C0C8648229
Certificate serial:       088752B082246C984D3300ACE78477299987E43C
Authority key identifier: E2:D8:06:3C:20:C5:FF:1C:1C:1A:CC:3A:D4:E9:D0:C0:C8:64:82:29
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/E2D8063C20C5FF1C1C1ACC3AD4E9D0C0C8648229.cer
Subject info access:      rsync://rpki.ruinet.work/repo/CowGrassland/0/326131343a373538333a663466633a3a2f34382d3438203d3e20323131353735.roa
Signing time:             Tue 03 Feb 2026 12:31:58 +0000
ROA not before:           Tue 03 Feb 2026 12:26:58 +0000
ROA not after:            Tue 02 Feb 2027 12:31:58 +0000
asID:                     211575
IP address blocks:        2a14:7583:f4fc::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ruinet.work/repo/CowGrassland/0/E2D8063C20C5FF1C1C1ACC3AD4E9D0C0C8648229.crl
                          rsync://rpki.ruinet.work/repo/CowGrassland/0/E2D8063C20C5FF1C1C1ACC3AD4E9D0C0C8648229.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/E2D8063C20C5FF1C1C1ACC3AD4E9D0C0C8648229.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:87:52:b0:82:24:6c:98:4d:33:00:ac:e7:84:77:29:99:87:e4:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2D8063C20C5FF1C1C1ACC3AD4E9D0C0C8648229
        Validity
            Not Before: Feb  3 12:26:58 2026 GMT
            Not After : Feb  2 12:31:58 2027 GMT
        Subject: CN=BF22E134BF0AA6898660E7ACFA3E0F140F85DDEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c0:44:f2:5a:19:73:e2:82:0b:cc:28:7b:ef:
                    c0:1d:b6:86:80:63:52:d0:42:4e:0c:43:43:e9:19:
                    11:ca:15:0d:77:8d:6b:6e:f8:73:9f:f6:bf:c5:35:
                    fe:ce:4f:08:ef:64:40:3b:28:39:5d:ac:29:60:3a:
                    72:45:74:5a:80:6b:f5:f4:88:b5:05:df:5e:6d:fe:
                    b2:38:5e:d1:74:6f:bb:a7:d8:86:f0:e2:5b:9d:6b:
                    5e:a0:b1:88:7b:6c:ea:06:a1:8c:6e:4a:48:4b:bc:
                    e8:82:dd:8b:26:ce:db:8d:4b:78:62:f2:55:fd:d0:
                    ee:1f:76:de:73:00:53:38:fb:0b:ee:f2:8b:84:d3:
                    dd:e3:9a:49:2a:1b:61:7e:46:ff:f1:9d:12:b5:e6:
                    2b:19:74:64:9a:17:7c:94:0d:b1:73:3a:99:8e:b8:
                    10:a4:dd:17:ca:ca:46:da:5b:4d:01:8d:fd:74:70:
                    e0:96:82:05:9d:00:8a:cb:34:6a:91:43:e0:4f:a3:
                    69:81:8c:9b:f5:93:cd:ee:71:e9:1d:d5:c8:8e:e5:
                    53:08:d5:f6:d0:a7:31:cc:b5:5e:e2:cf:33:bb:42:
                    69:48:c6:f8:d1:db:1a:17:9d:07:61:b7:d5:92:8d:
                    cd:4e:55:24:66:f4:2f:34:ce:b1:26:92:a5:83:1c:
                    e6:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:22:E1:34:BF:0A:A6:89:86:60:E7:AC:FA:3E:0F:14:0F:85:DD:EE
            X509v3 Authority Key Identifier:
                keyid:E2:D8:06:3C:20:C5:FF:1C:1C:1A:CC:3A:D4:E9:D0:C0:C8:64:82:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ruinet.work/repo/CowGrassland/0/E2D8063C20C5FF1C1C1ACC3AD4E9D0C0C8648229.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/E2D8063C20C5FF1C1C1ACC3AD4E9D0C0C8648229.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ruinet.work/repo/CowGrassland/0/326131343a373538333a663466633a3a2f34382d3438203d3e20323131353735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7583:f4fc::/48

    Signature Algorithm: sha256WithRSAEncryption
         46:6f:1c:fc:8f:d0:fd:1f:ed:60:ae:67:ff:c8:07:f8:19:de:
         df:5a:b0:0d:45:37:27:e1:45:7a:76:a0:29:08:78:14:d4:a6:
         5b:25:66:9b:6e:65:5e:f7:4a:90:02:08:29:8a:87:51:0e:a2:
         ba:06:56:83:d6:cd:77:54:62:80:3a:7c:ec:5b:1f:8b:04:c4:
         67:4d:a6:60:96:e1:8f:fe:77:f2:89:cf:a1:c1:f6:01:e8:e3:
         37:cb:23:af:96:e1:83:5b:85:a4:63:45:c4:3f:8d:0d:7d:34:
         e5:09:7e:0b:25:05:33:e8:21:68:af:e4:68:01:81:ba:f9:6a:
         07:c4:75:25:23:3d:d1:96:d6:e7:d4:d0:27:70:80:28:e6:a0:
         46:77:95:03:52:1b:43:78:71:e6:68:56:32:d5:62:96:f2:ef:
         1e:b4:f8:02:3f:f1:c7:b9:89:ac:69:66:4e:13:3d:80:53:16:
         f6:27:cc:9f:83:66:32:ea:87:cf:61:ce:85:4e:29:fe:10:fc:
         11:f1:07:03:e6:3d:4e:0e:52:d2:da:80:9c:13:b3:57:3e:99:
         64:ad:6d:5a:e2:4d:1b:10:fb:a2:2b:e2:95:cc:df:e3:a7:50:
         56:7b:09:7d:73:12:35:cb:1b:95:28:83:b4:f1:2f:d5:98:8f:
         ff:42:0e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:24:54 2026 by rpki-client