Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/326130613a363034343a626130303a3a2f34302d3430203d3e20323134373233.roa
File:                     326130613a363034343a626130303a3a2f34302d3430203d3e20323134373233.roa (raw, json)
Hash identifier:          Me4H7YZgZygEIvpxgeeEc04IMatngbdJsoUf/hlBlAQ=
Subject key identifier:   71:AB:18:6D:27:FC:7F:13:AC:E3:32:9C:73:99:DB:DB:27:76:71:54
Certificate issuer:       /CN=6003354361AF66B2F37153B9A7365EE572F6822E
Certificate serial:       6177381E1077BA89BE0577B033BFE3166D78A2B8
Authority key identifier: 60:03:35:43:61:AF:66:B2:F3:71:53:B9:A7:36:5E:E5:72:F6:82:2E
Authority info access:    rsync://krill.47272.net/repo/HYEHOST/5/6003354361AF66B2F37153B9A7365EE572F6822E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/326130613a363034343a626130303a3a2f34302d3430203d3e20323134373233.roa
Signing time:             Thu 04 Jun 2026 19:37:43 +0000
ROA not before:           Thu 04 Jun 2026 19:32:43 +0000
ROA not after:            Thu 03 Jun 2027 19:37:43 +0000
asID:                     214723
IP address blocks:        2a0a:6044:ba00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.mft
                          rsync://krill.47272.net/repo/HYEHOST/5/6003354361AF66B2F37153B9A7365EE572F6822E.cer
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 06:35:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:77:38:1e:10:77:ba:89:be:05:77:b0:33:bf:e3:16:6d:78:a2:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6003354361AF66B2F37153B9A7365EE572F6822E
        Validity
            Not Before: Jun  4 19:32:43 2026 GMT
            Not After : Jun  3 19:37:43 2027 GMT
        Subject: CN=71AB186D27FC7F13ACE3329C7399DBDB27767154
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:25:70:53:9a:37:7f:49:19:a9:3c:91:81:e3:
                    c4:77:f8:2b:3f:03:18:b5:5a:85:9a:3f:bf:70:cc:
                    04:97:c2:8d:84:84:57:3d:9d:2b:13:1d:28:30:7f:
                    83:b1:1f:53:08:c0:73:0b:ef:87:54:d5:bd:fa:c4:
                    ff:c3:d3:24:21:11:8c:51:c2:7a:ac:d7:7a:3a:28:
                    dd:99:52:9a:7f:cd:24:e5:04:80:f7:6c:04:17:69:
                    68:f5:ca:50:03:5e:5b:d8:a2:43:f4:4a:1c:0a:f4:
                    e5:89:a6:48:09:ef:34:6b:80:60:f7:fd:41:86:43:
                    1d:0e:f0:3c:7b:22:c3:d5:a2:68:01:74:69:b7:6d:
                    48:ce:3a:30:c6:e1:e1:49:11:a1:4d:a1:20:12:46:
                    14:3a:6e:2f:27:34:e0:55:93:8c:54:d0:ff:4c:f4:
                    5e:7a:c0:66:eb:25:0d:53:d5:96:cb:fb:96:34:db:
                    62:a3:86:52:6b:f4:d6:63:2e:6e:a2:47:7b:1e:af:
                    ac:8a:29:22:ea:dc:16:dd:4c:07:15:2d:e7:85:08:
                    ae:75:23:77:10:ea:4b:14:75:90:9b:33:fb:4c:18:
                    8a:6a:0f:34:65:b6:6e:e2:3f:3a:df:e8:37:f8:57:
                    e3:a1:ee:42:e2:68:6f:74:9d:c8:08:7f:7b:41:7b:
                    c4:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:AB:18:6D:27:FC:7F:13:AC:E3:32:9C:73:99:DB:DB:27:76:71:54
            X509v3 Authority Key Identifier:
                keyid:60:03:35:43:61:AF:66:B2:F3:71:53:B9:A7:36:5E:E5:72:F6:82:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/6003354361AF66B2F37153B9A7365EE572F6822E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/326130613a363034343a626130303a3a2f34302d3430203d3e20323134373233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:ba00::/40

    Signature Algorithm: sha256WithRSAEncryption
         82:4d:1a:d8:a8:c2:f3:ba:2a:7e:6d:26:28:62:ab:46:c7:65:
         c2:63:3a:56:97:56:6f:6c:a5:b1:e7:2b:23:5b:da:f1:90:6a:
         e5:51:85:cc:10:74:d8:8b:ba:48:2d:8e:c9:2d:41:cf:34:f8:
         81:9d:00:45:f4:b1:23:0d:a6:92:4e:cd:9d:9c:09:98:32:ec:
         49:d0:4f:f2:cd:da:92:cc:8b:68:ba:d5:89:0b:93:10:f3:93:
         d0:52:b8:dc:6d:3f:3c:fd:2e:84:1f:70:82:13:0f:a4:ed:6b:
         be:20:38:d2:c1:37:e8:a3:c5:a4:3d:0b:93:29:88:38:1e:f5:
         cc:ab:5b:1a:2d:3a:df:d6:7c:b0:7c:89:55:89:d2:79:1a:30:
         3c:ed:e4:61:57:67:49:b0:75:96:a2:0c:a1:cb:b6:02:c8:f9:
         16:7b:cf:41:0c:65:b1:dc:1f:4f:0f:c5:0f:0c:42:95:04:42:
         ab:25:6f:05:48:c0:52:82:8e:56:bf:fc:26:e1:f4:81:8e:10:
         d3:9c:90:f1:06:f8:72:58:4c:15:33:b7:c5:1c:73:11:fb:eb:
         09:6b:65:6d:d6:80:ef:1a:d6:4b:52:1a:04:9a:ec:83:08:ec:
         d7:8a:a2:5e:5e:ec:7f:70:52:76:1b:f0:15:da:e0:35:c4:89:
         e0:44:b5:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:42:11 2026 by rpki-client