Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/326130373a353463313a343236313a3a2f34382d3438203d3e203436373636.roa
File:                     326130373a353463313a343236313a3a2f34382d3438203d3e203436373636.roa (raw, json)
Hash identifier:          wbZ+dtGZUT4l0qbhwzr/zEDydlpNzZ1PEDiOmvwzOTk=
Subject key identifier:   E3:5E:F5:5F:F6:10:88:60:9B:65:01:60:2A:E0:EC:31:61:B0:29:45
Certificate issuer:       /CN=E19302BE91C9D4211CDF4AFF091055A173B3593B
Certificate serial:       2C16F306B1948A2267FBCC24FE9F5046DC445547
Authority key identifier: E1:93:02:BE:91:C9:D4:21:1C:DF:4A:FF:09:10:55:A1:73:B3:59:3B
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/E19302BE91C9D4211CDF4AFF091055A173B3593B.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/326130373a353463313a343236313a3a2f34382d3438203d3e203436373636.roa
Signing time:             Sat 06 Jun 2026 08:16:45 +0000
ROA not before:           Sat 06 Jun 2026 08:11:45 +0000
ROA not after:            Sat 05 Jun 2027 08:16:45 +0000
asID:                     46766
IP address blocks:        2a07:54c1:4261::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/E19302BE91C9D4211CDF4AFF091055A173B3593B.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/E19302BE91C9D4211CDF4AFF091055A173B3593B.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/E19302BE91C9D4211CDF4AFF091055A173B3593B.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 10:36:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:16:f3:06:b1:94:8a:22:67:fb:cc:24:fe:9f:50:46:dc:44:55:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E19302BE91C9D4211CDF4AFF091055A173B3593B
        Validity
            Not Before: Jun  6 08:11:45 2026 GMT
            Not After : Jun  5 08:16:45 2027 GMT
        Subject: CN=E35EF55FF61088609B6501602AE0EC3161B02945
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:51:27:d6:d4:c7:3a:64:34:7e:40:f8:2c:3c:
                    c5:16:b2:cf:23:ea:83:b4:80:81:00:8d:5d:91:61:
                    39:08:fd:d1:6b:8d:10:60:81:6b:cf:a8:51:3b:b0:
                    42:76:22:06:09:7f:aa:a0:12:30:59:8c:55:87:9c:
                    f2:50:1f:4b:6e:ab:a3:87:e7:eb:c5:af:c0:ec:00:
                    c0:02:97:44:07:01:64:9d:45:ba:be:1c:63:78:85:
                    e9:c9:8e:ff:6f:d4:de:9c:db:46:b4:b5:4c:77:eb:
                    5f:11:da:8f:c2:bd:42:cb:36:b5:62:fc:d7:bc:6f:
                    7b:93:ac:da:6d:5b:fd:03:f0:cb:26:5d:33:a3:03:
                    fd:0c:ba:f4:b3:fe:a2:42:50:ea:6d:f0:47:6d:3f:
                    d5:06:f4:d3:14:29:9e:32:b8:e9:b9:8c:8e:02:dc:
                    f8:17:4e:9e:01:60:a3:cf:f0:43:09:1c:32:3e:0c:
                    5c:bc:32:a2:be:1b:e2:f0:40:63:66:e0:ae:7c:bc:
                    98:1f:5b:fe:c2:4a:85:ed:74:ca:03:dd:8f:ca:c1:
                    fd:27:c7:b6:6f:d2:91:df:8c:c1:fe:4a:db:65:29:
                    21:1e:68:ab:a7:e6:1b:14:0b:2f:1f:f0:7e:07:b4:
                    f2:c8:7b:08:c0:19:ab:9e:57:5d:6a:77:e6:a1:b9:
                    0a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:5E:F5:5F:F6:10:88:60:9B:65:01:60:2A:E0:EC:31:61:B0:29:45
            X509v3 Authority Key Identifier:
                keyid:E1:93:02:BE:91:C9:D4:21:1C:DF:4A:FF:09:10:55:A1:73:B3:59:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/E19302BE91C9D4211CDF4AFF091055A173B3593B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/E19302BE91C9D4211CDF4AFF091055A173B3593B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/326130373a353463313a343236313a3a2f34382d3438203d3e203436373636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1:4261::/48

    Signature Algorithm: sha256WithRSAEncryption
         8a:1f:d0:64:32:82:1c:4c:35:49:c1:7f:65:90:cd:57:16:e6:
         9a:c2:32:09:c5:93:7e:af:64:5f:36:e8:6c:c6:4e:3e:b6:59:
         31:b4:3d:88:4a:00:c2:9f:0f:cb:5b:fd:d2:bd:60:8c:73:36:
         ba:67:65:31:40:c7:95:db:6b:92:c6:28:5c:d5:87:16:76:8b:
         29:cd:33:24:33:e0:54:fc:43:d3:28:55:f4:db:a6:66:ac:f6:
         a7:7e:9c:93:fe:51:1e:7f:6a:87:8a:cc:7e:ae:76:3f:60:79:
         d1:f1:76:f7:28:95:47:4a:c7:4c:99:c9:4b:eb:f7:23:cf:b3:
         3c:65:48:c0:46:8a:81:0b:94:3f:8e:b0:fb:ba:04:84:2f:87:
         46:e5:8b:80:cc:7d:03:87:6a:80:2b:89:25:88:78:37:0c:a1:
         77:06:e5:18:9c:3b:43:44:87:2d:cd:12:58:eb:4b:cb:28:33:
         5f:72:d2:b3:71:64:0b:d0:f1:d3:4b:5c:9c:c8:74:e5:07:40:
         db:fe:e1:68:be:49:e0:c1:a9:26:77:3f:35:63:be:ef:ba:ed:
         46:b3:ed:21:cd:c5:19:8d:ab:b5:05:49:d0:5f:35:f5:fe:7f:
         6a:9d:3b:83:ba:11:01:74:c2:ca:a1:f5:29:f2:4e:4b:18:63:
         df:95:de:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:08:52 2026 by rpki-client