Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/326130363a396638313a333030323a3a2f34382d3438203d3e20313531333439.roa
File:                     326130363a396638313a333030323a3a2f34382d3438203d3e20313531333439.roa (raw, json)
Hash identifier:          JdSr8NsM4wBKEKjRrJ7vGhZ+7bQ8LoZUe6+JTBlE3KA=
Subject key identifier:   C6:F2:7D:1B:64:6B:E8:94:50:E9:27:96:0F:5A:6C:AF:75:2F:22:B4
Certificate issuer:       /CN=72D1DDE1B1B045D8BE439DDD101486E6717C93CC
Certificate serial:       2D9BA95D2D5C47B1B9EDBC722DFD3CF689A7C6FF
Authority key identifier: 72:D1:DD:E1:B1:B0:45:D8:BE:43:9D:DD:10:14:86:E6:71:7C:93:CC
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/326130363a396638313a333030323a3a2f34382d3438203d3e20313531333439.roa
Signing time:             Fri 05 Jun 2026 20:46:14 +0000
ROA not before:           Fri 05 Jun 2026 20:41:14 +0000
ROA not after:            Fri 04 Jun 2027 20:46:14 +0000
asID:                     151349
IP address blocks:        2a06:9f81:3002::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 15:24:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:9b:a9:5d:2d:5c:47:b1:b9:ed:bc:72:2d:fd:3c:f6:89:a7:c6:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72D1DDE1B1B045D8BE439DDD101486E6717C93CC
        Validity
            Not Before: Jun  5 20:41:14 2026 GMT
            Not After : Jun  4 20:46:14 2027 GMT
        Subject: CN=C6F27D1B646BE89450E927960F5A6CAF752F22B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:4d:4b:6b:1d:0a:5f:7f:d6:17:b5:ee:8c:1d:
                    96:83:7e:5a:ab:8e:f6:19:46:2c:82:c4:de:ce:eb:
                    6d:04:45:99:ea:49:72:27:e9:6c:ca:48:cf:70:e4:
                    cc:6b:ef:df:c4:2c:b8:36:f2:d8:e6:45:d5:8a:97:
                    3d:15:a5:59:fa:fd:10:99:97:59:8f:54:5d:eb:72:
                    e0:9b:c9:7e:8b:78:93:97:72:7b:af:3c:59:ba:d8:
                    61:97:9d:ca:e6:a7:9f:17:98:98:02:a1:75:62:0c:
                    7c:29:d1:d0:7c:a9:f6:7b:28:4b:ab:f7:f1:55:7c:
                    2d:75:5a:1e:89:bb:02:8a:71:81:d3:35:a8:e9:8f:
                    13:6b:cf:b3:8b:25:0a:07:95:b2:6b:f0:57:76:82:
                    5c:30:9f:4b:ca:c6:88:1d:2a:e9:80:37:82:eb:89:
                    c5:1f:d0:a3:85:f4:74:d5:87:89:e4:8a:c9:bf:6f:
                    e1:64:8f:53:a1:22:25:7e:f6:d4:0f:e9:4c:92:8d:
                    73:5b:b0:e1:66:bc:08:cc:94:03:de:31:61:8d:83:
                    f4:63:92:da:76:b2:37:fe:0f:58:58:fd:6f:f9:cb:
                    53:15:50:4b:d2:b0:6f:9c:0a:ef:13:93:22:da:d9:
                    e2:d5:9f:1a:48:a9:73:08:c6:4b:c3:a2:fc:75:a0:
                    d9:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:F2:7D:1B:64:6B:E8:94:50:E9:27:96:0F:5A:6C:AF:75:2F:22:B4
            X509v3 Authority Key Identifier:
                keyid:72:D1:DD:E1:B1:B0:45:D8:BE:43:9D:DD:10:14:86:E6:71:7C:93:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/72D1DDE1B1B045D8BE439DDD101486E6717C93CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/1/326130363a396638313a333030323a3a2f34382d3438203d3e20313531333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:9f81:3002::/48

    Signature Algorithm: sha256WithRSAEncryption
         1b:6b:71:43:b8:8a:55:c4:46:4d:ef:e9:7d:87:81:09:ab:4d:
         b2:ca:5f:fa:a1:6e:9d:3d:2a:0d:71:d5:32:a1:01:da:92:b8:
         b7:28:9f:f1:97:e9:8f:0f:6b:6c:04:9a:0c:33:5a:8d:f8:a2:
         b8:7a:56:ff:b8:47:35:12:20:b5:48:cb:7e:47:f5:eb:4c:b6:
         a3:15:93:e5:77:09:b4:eb:1d:b3:ac:63:ac:6c:2d:78:1c:fc:
         aa:4a:d6:fd:b8:d1:66:8a:af:51:db:0f:41:15:1a:a5:41:35:
         22:88:77:b4:e9:45:51:2a:4b:64:07:fe:24:5f:85:42:40:1b:
         38:95:8d:41:c7:bb:7b:1a:25:7e:ce:a1:8e:ae:a8:80:6b:61:
         49:89:a1:f0:ee:4a:ca:56:66:b5:ae:4e:42:f0:35:a5:8e:f1:
         84:be:8c:b9:f1:13:dc:89:74:40:c1:4a:3c:a2:10:12:33:f5:
         36:20:65:c7:f3:14:58:78:dd:d3:a2:a2:3d:d2:fc:47:0f:51:
         f6:49:e7:be:cc:e5:8b:1b:d5:58:98:7d:f2:c9:43:4f:c9:ec:
         37:84:73:21:07:6c:d8:a5:c2:b3:f2:6f:77:e5:a4:67:4f:02:
         a1:9f:19:05:98:5b:c8:9d:bf:b7:25:3c:6a:d2:88:a6:c9:ba:
         15:6f:78:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:20:31 2026 by rpki-client