Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/326130353a646663313a393630303a3a2f34302d3430203d3e20323136343535.roa
File:                     326130353a646663313a393630303a3a2f34302d3430203d3e20323136343535.roa (raw, json)
Hash identifier:          s3vZksQWbyouGRJqfpkziZUFeKyXQLPp4pKI5MlbQ60=
Subject key identifier:   96:27:3C:4A:D1:F4:29:43:40:9E:32:D3:45:FE:4F:9D:15:3C:A4:A3
Certificate issuer:       /CN=CC6ECC4620C33298BAAEF1709AD6D0595CD2565C
Certificate serial:       66BD77CAF7BFED13D413BEE8DF7415DC4DDA23C8
Authority key identifier: CC:6E:CC:46:20:C3:32:98:BA:AE:F1:70:9A:D6:D0:59:5C:D2:56:5C
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/326130353a646663313a393630303a3a2f34302d3430203d3e20323136343535.roa
Signing time:             Sat 06 Jun 2026 03:25:51 +0000
ROA not before:           Sat 06 Jun 2026 03:20:51 +0000
ROA not after:            Sat 05 Jun 2027 03:25:51 +0000
asID:                     216455
IP address blocks:        2a05:dfc1:9600::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:bd:77:ca:f7:bf:ed:13:d4:13:be:e8:df:74:15:dc:4d:da:23:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC6ECC4620C33298BAAEF1709AD6D0595CD2565C
        Validity
            Not Before: Jun  6 03:20:51 2026 GMT
            Not After : Jun  5 03:25:51 2027 GMT
        Subject: CN=96273C4AD1F42943409E32D345FE4F9D153CA4A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:18:ec:9f:f0:36:5e:c8:58:68:fe:8a:92:95:
                    fb:b7:7e:99:4f:3f:1e:15:7b:9c:1d:b2:0b:49:a5:
                    4d:79:14:7a:18:34:db:d8:b5:8b:9a:3b:b5:f3:99:
                    0d:a2:8c:70:6e:5d:29:94:78:59:04:78:8d:7c:80:
                    75:86:d4:0f:b3:6d:b2:bc:53:45:c2:d7:ea:eb:29:
                    7d:23:87:56:01:5d:d3:b4:7b:39:3f:7b:a4:a9:2d:
                    80:9e:39:6d:63:cb:f5:1f:1d:c9:76:a8:22:bc:ec:
                    3e:ec:51:57:b2:ad:42:bc:ae:07:dd:a2:5b:65:f0:
                    71:a0:b9:73:e6:c3:53:d1:c9:fe:4b:56:7e:29:b6:
                    41:23:c8:8f:41:99:fd:5b:17:b6:ea:f6:7a:75:ce:
                    83:10:04:bb:82:87:be:fc:40:48:36:39:e0:c2:20:
                    0a:49:49:69:e4:21:30:82:6e:dd:1a:6c:64:e2:78:
                    2d:69:d0:cf:a8:99:26:ce:1d:45:92:8f:33:63:c9:
                    25:f3:9b:49:d4:0a:8d:e4:17:64:a2:21:f6:97:90:
                    bd:33:12:b2:dc:8e:92:68:40:ff:a6:4c:3c:8e:77:
                    18:ad:ad:26:99:b2:ee:24:0d:73:f0:45:5e:f6:97:
                    ff:79:38:3c:11:db:6b:bd:c9:40:16:9f:3b:17:6d:
                    43:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:27:3C:4A:D1:F4:29:43:40:9E:32:D3:45:FE:4F:9D:15:3C:A4:A3
            X509v3 Authority Key Identifier:
                keyid:CC:6E:CC:46:20:C3:32:98:BA:AE:F1:70:9A:D6:D0:59:5C:D2:56:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/CC6ECC4620C33298BAAEF1709AD6D0595CD2565C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/3/326130353a646663313a393630303a3a2f34302d3430203d3e20323136343535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:9600::/40

    Signature Algorithm: sha256WithRSAEncryption
         06:3c:56:e8:8c:1f:6f:3e:da:9b:1d:de:0e:fe:cd:68:01:f1:
         62:6e:ae:1d:32:2c:ec:b9:e1:35:c3:78:4f:aa:9c:c9:16:d1:
         0b:6b:a9:c2:62:ea:13:3f:45:e5:1e:56:97:2d:d1:77:83:a2:
         1a:1a:1d:87:d1:77:ad:cd:20:03:55:e4:f0:35:72:7a:18:67:
         4a:04:30:98:5c:3b:08:f5:8d:9d:e1:fe:14:bb:9b:8a:e9:25:
         6e:55:75:cd:4d:e1:d9:68:f2:90:79:de:94:84:ea:a9:29:52:
         bc:49:29:0a:8c:38:57:28:ee:a5:02:ed:96:b8:ef:e7:67:c0:
         7c:b0:dc:40:9c:41:4f:80:87:9e:a0:30:9a:07:91:31:7c:e7:
         23:fd:c2:63:60:d7:cc:e1:3d:e5:e3:ea:b1:56:54:de:1a:e6:
         0c:c6:e6:22:ec:ca:41:ec:07:e9:bd:86:30:aa:b8:4b:c9:73:
         ed:f5:8e:7b:f4:2b:04:b2:04:b1:65:2a:a1:82:5d:75:99:c2:
         f0:58:2d:cf:ef:fe:46:1c:88:d8:ca:e5:06:81:9b:9d:bb:e8:
         ee:e8:93:fe:af:91:f9:04:98:0f:f8:58:98:58:38:70:55:ed:
         17:3d:4f:21:26:5d:04:e0:7b:eb:c8:2e:cd:c2:50:40:a2:37:
         bf:23:44:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:58:02 2026 by rpki-client