Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS207778.roa
File:                     AS207778.roa (raw, json)
Hash identifier:          9JL91LKDKVHjIycaWw+Ttx//IoMzQUsQCPjPdPQAxgw=
Subject key identifier:   A4:22:F7:97:5F:F5:48:DF:51:8C:97:74:92:BA:5C:03:F2:73:D9:95
Certificate issuer:       /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8
Certificate serial:       456A59DED9E78113A6331CE37D7AD8FFA085DDC1
Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS207778.roa
Signing time:             Fri 05 Jun 2026 08:45:52 +0000
ROA not before:           Fri 05 Jun 2026 08:40:52 +0000
ROA not after:            Fri 04 Jun 2027 08:45:52 +0000
asID:                     207778
IP address blocks:        2a07:54c1:4931::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 22:46:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:6a:59:de:d9:e7:81:13:a6:33:1c:e3:7d:7a:d8:ff:a0:85:dd:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8
        Validity
            Not Before: Jun  5 08:40:52 2026 GMT
            Not After : Jun  4 08:45:52 2027 GMT
        Subject: CN=A422F7975FF548DF518C977492BA5C03F273D995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b6:4f:ab:5d:4c:0e:c2:05:b6:05:a3:fb:cf:
                    23:4f:c5:01:15:d4:49:61:c9:bb:3d:6e:b5:e1:b5:
                    a6:48:bf:62:c7:dd:68:76:1a:78:3a:81:70:55:eb:
                    14:da:04:52:7f:b4:dd:7d:26:43:c0:80:9e:84:fb:
                    79:57:8a:de:62:f5:23:25:82:eb:9f:11:e8:a2:b4:
                    39:11:c7:34:b1:32:27:cf:4b:27:a3:5c:e2:85:13:
                    00:d2:d0:97:6a:84:ff:7b:e2:f3:bc:48:49:ed:f8:
                    22:e8:84:fd:6b:b0:a8:a5:02:1b:80:37:d8:44:a1:
                    c5:68:db:96:d6:f2:19:85:31:bb:de:40:25:c1:b7:
                    18:15:92:f2:72:e3:6d:78:29:4b:57:dd:80:b1:c3:
                    f2:59:3f:c4:1d:02:af:da:48:06:66:bf:1d:af:c8:
                    42:39:63:ff:93:a0:9c:f1:1d:e1:af:1f:89:9c:92:
                    15:be:4f:4f:98:49:a6:b1:12:3c:91:4b:83:21:69:
                    48:6c:30:74:5a:73:27:f7:00:4c:47:3b:47:50:ef:
                    f0:b5:67:35:fa:76:1b:7e:1f:e2:6e:b0:48:a0:ad:
                    df:33:86:47:2a:e7:0a:76:b8:c1:99:9b:94:19:ff:
                    d2:e9:69:14:cf:9d:70:7a:a4:32:08:cd:6a:17:6f:
                    dd:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:22:F7:97:5F:F5:48:DF:51:8C:97:74:92:BA:5C:03:F2:73:D9:95
            X509v3 Authority Key Identifier:
                keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS207778.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1:4931::/48

    Signature Algorithm: sha256WithRSAEncryption
         91:d5:3f:df:d3:85:df:ae:0c:a3:40:23:ba:a2:92:ba:69:ce:
         70:3f:70:f9:d5:d6:af:19:ea:50:4b:bf:8f:29:fe:b5:a4:57:
         ec:ff:7e:74:61:79:a6:16:bc:67:e6:c7:33:98:2a:a2:05:0c:
         36:ba:39:32:13:30:dc:19:06:39:35:a9:8f:94:bf:57:d8:6b:
         86:a4:9f:87:5e:bc:90:a2:1f:ac:01:2c:35:0d:76:d3:d6:42:
         21:66:ee:41:14:30:8a:bf:af:e6:ba:11:e4:ee:19:67:d1:45:
         aa:92:32:09:54:1e:f1:ea:44:2d:be:43:85:1a:39:42:5a:42:
         3c:8c:ff:0a:ec:6f:11:5e:6b:49:a0:db:a1:95:ad:ac:fe:6a:
         a7:2c:48:e9:62:66:d8:64:4c:8f:ae:42:d5:03:4c:81:ac:a2:
         39:2c:a2:7a:b6:69:c2:50:de:d4:d2:3f:ea:31:ef:95:58:d0:
         b3:c4:13:2c:fe:c4:9a:b2:74:f9:ce:e0:3b:19:59:68:d3:22:
         bf:b1:dc:a5:b3:ff:89:a2:e0:65:2d:50:64:a9:1f:91:b2:9d:
         3f:3f:7d:3b:74:be:54:c1:25:b7:15:77:7c:82:3e:3e:ce:78:
         5a:91:d9:55:a5:14:88:4f:8c:11:f4:46:b3:45:2a:9b:34:c3:
         8c:0a:9a:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:25:56 2026 by rpki-client