Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/326130613a363034303a336638303a3a2f34312d3438203d3e203134363138.roa
File:                     326130613a363034303a336638303a3a2f34312d3438203d3e203134363138.roa (raw, json)
Hash identifier:          ZIuBwk2Q9o7H1LBTlQPRAM92cYe/3FAQ+wYOICqn9yc=
Subject key identifier:   00:39:09:82:00:90:30:EA:4E:89:55:85:72:12:D6:A3:A5:26:00:F3
Certificate issuer:       /CN=6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51
Certificate serial:       10E27E2FDDF38F06EDD1EA6D2F3607370F09C7A3
Authority key identifier: 6E:F8:DF:8B:74:C5:D8:BB:67:37:EC:42:CE:03:2A:B4:B0:3E:0C:51
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/326130613a363034303a336638303a3a2f34312d3438203d3e203134363138.roa
Signing time:             Sat 06 Jun 2026 08:19:39 +0000
ROA not before:           Sat 06 Jun 2026 08:14:39 +0000
ROA not after:            Sat 05 Jun 2027 08:19:39 +0000
asID:                     14618
IP address blocks:        2a0a:6040:3f80::/41 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:e2:7e:2f:dd:f3:8f:06:ed:d1:ea:6d:2f:36:07:37:0f:09:c7:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51
        Validity
            Not Before: Jun  6 08:14:39 2026 GMT
            Not After : Jun  5 08:19:39 2027 GMT
        Subject: CN=00390982009030EA4E8955857212D6A3A52600F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e0:ed:c8:9b:1c:45:0c:20:79:a6:8b:e3:d0:
                    37:32:86:38:1b:f5:79:50:af:a4:00:0b:fe:07:74:
                    9e:d5:d4:04:98:8c:2f:95:2c:7d:b0:4e:e0:71:a5:
                    0b:8c:68:c6:0b:88:7d:65:9a:04:59:e4:c9:b5:80:
                    8f:df:a4:27:09:58:d1:f5:b4:37:3e:97:b4:b8:5c:
                    57:ed:02:4b:7a:33:51:74:10:93:cd:b4:29:4e:d0:
                    96:79:1e:9a:34:82:9b:dc:d6:3a:70:0e:fc:78:e6:
                    4e:73:ca:b8:3a:ee:b4:35:f3:8d:70:67:70:da:ed:
                    af:da:b4:62:cc:0a:91:ce:74:83:68:5a:bd:d7:d2:
                    2f:c6:48:b2:62:8b:b8:5b:71:3b:84:7e:36:e9:d5:
                    5e:a0:00:e0:55:4e:95:18:ca:c2:12:c2:1e:12:98:
                    24:c7:e8:2f:f6:b1:f5:43:2a:32:6b:ba:35:bb:0f:
                    67:5f:18:a3:58:81:2b:da:95:8a:26:0b:ac:3e:a4:
                    47:d0:9a:13:fa:79:9b:11:76:bc:93:df:2b:a8:24:
                    7c:e7:f4:65:9b:c9:af:31:35:ae:16:07:f5:6a:e3:
                    fd:43:52:ee:bd:22:99:28:71:17:c9:1f:d6:63:22:
                    9b:d4:a1:9f:d3:c5:26:b5:5a:b5:3a:08:28:bc:33:
                    10:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:39:09:82:00:90:30:EA:4E:89:55:85:72:12:D6:A3:A5:26:00:F3
            X509v3 Authority Key Identifier:
                keyid:6E:F8:DF:8B:74:C5:D8:BB:67:37:EC:42:CE:03:2A:B4:B0:3E:0C:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/326130613a363034303a336638303a3a2f34312d3438203d3e203134363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:3f80::/41

    Signature Algorithm: sha256WithRSAEncryption
         ba:80:21:97:86:0c:96:48:27:4c:cb:0c:27:bf:fc:f5:a6:f9:
         47:b4:44:83:c7:7c:61:05:9f:f5:ec:3a:02:1e:36:6d:c1:6e:
         64:42:bd:4c:f7:74:64:91:0e:e6:02:71:cd:c9:06:22:e4:95:
         18:32:9b:49:13:c5:3b:10:6b:fc:0f:97:88:b4:21:f4:9d:9c:
         fa:26:46:87:6a:3a:45:7f:aa:14:37:de:fe:b2:b5:70:a4:cc:
         72:d1:dc:8b:0d:d3:b6:ab:ac:92:a2:5d:3b:64:b6:2a:3e:73:
         d0:85:50:b5:dd:f3:da:64:c3:3f:b1:01:b9:c0:1e:0f:6f:f7:
         06:50:6c:d3:d4:d9:31:b0:9d:7f:1a:16:c9:93:02:be:c1:b0:
         e7:fb:d7:49:67:04:69:35:1f:55:99:ba:31:5a:f5:8e:b5:c4:
         41:5b:67:22:9e:2f:94:c7:08:ab:05:47:64:8d:e1:fa:51:6c:
         0c:c2:f7:0d:bd:44:a8:a8:06:f9:0c:a5:24:ca:68:87:08:b3:
         01:26:de:f0:30:53:e3:66:43:7a:1c:be:02:3d:dc:b3:d6:08:
         83:2f:59:af:a0:97:a4:76:7a:e9:e6:bc:9a:90:0a:76:41:33:
         b2:b5:57:e6:c1:9a:4d:78:47:1c:20:0d:62:34:99:b0:44:48:
         05:50:e3:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:48:03 2026 by rpki-client