Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/326130613a363034303a336638303a3a2f34312d3438203d3e203136353039.roa
File:                     326130613a363034303a336638303a3a2f34312d3438203d3e203136353039.roa (raw, json)
Hash identifier:          eBsqOoGIrV1lc0haZYlZZnvljOUHJXzG1G8J+aHN17U=
Subject key identifier:   DF:42:E1:B2:EF:C8:6E:05:9D:B0:88:13:E6:1B:53:4F:05:50:90:69
Certificate issuer:       /CN=6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51
Certificate serial:       7B8A7791CD8269D9F2D60559E13FE3177A1E571E
Authority key identifier: 6E:F8:DF:8B:74:C5:D8:BB:67:37:EC:42:CE:03:2A:B4:B0:3E:0C:51
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/326130613a363034303a336638303a3a2f34312d3438203d3e203136353039.roa
Signing time:             Sat 06 Jun 2026 08:19:42 +0000
ROA not before:           Sat 06 Jun 2026 08:14:42 +0000
ROA not after:            Sat 05 Jun 2027 08:19:42 +0000
asID:                     16509
IP address blocks:        2a0a:6040:3f80::/41 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:8a:77:91:cd:82:69:d9:f2:d6:05:59:e1:3f:e3:17:7a:1e:57:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51
        Validity
            Not Before: Jun  6 08:14:42 2026 GMT
            Not After : Jun  5 08:19:42 2027 GMT
        Subject: CN=DF42E1B2EFC86E059DB08813E61B534F05509069
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:78:53:b5:91:bb:9a:69:8a:20:bf:7b:58:38:
                    05:22:b0:7b:e7:bd:69:24:dc:79:af:97:8d:25:24:
                    b4:46:b0:ac:c3:b8:a2:db:dc:e7:49:db:0e:7d:e4:
                    1d:52:d5:5e:79:29:35:f6:96:e2:58:bb:1b:34:b2:
                    39:0f:7f:dc:4d:f2:e0:3d:66:b5:95:d4:a6:68:93:
                    6e:6a:74:01:6c:a2:82:0f:5f:90:aa:df:a5:37:c5:
                    5b:42:a7:ec:af:b0:fb:78:73:6e:84:40:a0:f5:e8:
                    26:fd:b9:c5:04:3e:d9:79:f0:f4:d6:45:8e:04:e7:
                    bc:be:56:fa:b1:60:eb:74:3f:e7:80:f4:0b:d5:e8:
                    27:4a:d2:8a:c0:f9:e9:b9:d2:89:f2:84:90:ed:1d:
                    c3:de:97:2e:a5:b7:49:b9:0e:6c:13:f8:d8:16:51:
                    56:fa:6e:51:f9:9c:f8:ba:1b:0d:0a:89:7f:10:b0:
                    e3:e1:92:15:9e:e6:f4:cd:17:6e:da:c0:b9:2b:13:
                    ba:6a:1c:a2:50:5c:5e:53:55:1f:aa:84:7e:6d:b1:
                    11:ce:b1:b0:c5:e2:54:e3:7a:02:17:bb:0a:d2:67:
                    ee:40:d5:2e:2c:9c:a9:c3:92:a2:7c:bb:1b:7c:c2:
                    be:16:b3:a0:04:c6:f6:95:39:ba:23:35:98:f1:2b:
                    d8:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:42:E1:B2:EF:C8:6E:05:9D:B0:88:13:E6:1B:53:4F:05:50:90:69
            X509v3 Authority Key Identifier:
                keyid:6E:F8:DF:8B:74:C5:D8:BB:67:37:EC:42:CE:03:2A:B4:B0:3E:0C:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/326130613a363034303a336638303a3a2f34312d3438203d3e203136353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:3f80::/41

    Signature Algorithm: sha256WithRSAEncryption
         54:b1:6f:3e:de:bb:d1:41:f0:8c:83:10:86:cd:2d:76:1e:fa:
         24:c3:7b:96:9e:25:7a:98:ce:2a:13:ab:85:c5:71:44:a5:53:
         be:61:6b:d0:8a:15:22:42:ea:e9:aa:ca:43:73:32:60:67:18:
         5b:98:1d:00:2b:3c:16:7e:f4:1d:79:56:c5:5c:e3:68:ae:13:
         0e:dc:08:17:c4:1a:f9:11:21:a9:02:73:e0:e2:e3:58:b2:6f:
         aa:7b:3e:d3:10:8b:15:2a:d1:78:86:56:70:af:2e:53:b0:45:
         2f:eb:1a:d1:53:85:3c:d8:93:36:3a:a3:49:01:32:c8:a0:05:
         9e:cd:b5:0b:cc:90:c5:0b:03:1b:c6:f3:51:34:90:3d:37:6a:
         bb:69:e4:3d:0e:4c:f5:73:e7:74:2a:f0:8e:f1:55:96:e2:6a:
         77:4b:01:3e:c6:d7:f4:bb:16:bf:01:95:55:df:9f:38:83:e8:
         a2:a9:f1:f2:64:b8:aa:ea:37:2c:03:60:8a:4a:ae:4a:1b:79:
         9f:37:27:84:03:c0:e1:fa:6b:27:22:9e:fa:2f:e1:f0:77:d2:
         06:6a:e7:ad:03:ce:59:c3:6c:32:86:18:76:61:fc:c2:53:40:
         6c:b9:24:59:e8:d6:7f:93:e0:92:b0:61:50:7f:90:5a:82:34:
         06:a9:bc:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:18:10 2026 by rpki-client