Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/326130613a363034303a626131353a3a2f34382d3438203d3e20313939353138.roa
File:                     326130613a363034303a626131353a3a2f34382d3438203d3e20313939353138.roa (raw, json)
Hash identifier:          OHxNg3mEk2yrCiqmarcp9ktr7d5zswzhL1Z7ACbYmvw=
Subject key identifier:   A5:98:90:62:70:47:1C:97:D8:9A:7F:55:39:02:85:DD:82:75:43:03
Certificate issuer:       /CN=0F728B914670434DCF5633E81E2B8721DF75CEB8
Certificate serial:       5EDE81E83C29730B2BA5E234AC27E5A846E30AB2
Authority key identifier: 0F:72:8B:91:46:70:43:4D:CF:56:33:E8:1E:2B:87:21:DF:75:CE:B8
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0F728B914670434DCF5633E81E2B8721DF75CEB8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/326130613a363034303a626131353a3a2f34382d3438203d3e20313939353138.roa
Signing time:             Sat 06 Jun 2026 10:16:51 +0000
ROA not before:           Sat 06 Jun 2026 10:11:51 +0000
ROA not after:            Sat 05 Jun 2027 10:16:51 +0000
asID:                     199518
IP address blocks:        2a0a:6040:ba15::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/0F728B914670434DCF5633E81E2B8721DF75CEB8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/0F728B914670434DCF5633E81E2B8721DF75CEB8.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0F728B914670434DCF5633E81E2B8721DF75CEB8.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:de:81:e8:3c:29:73:0b:2b:a5:e2:34:ac:27:e5:a8:46:e3:0a:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F728B914670434DCF5633E81E2B8721DF75CEB8
        Validity
            Not Before: Jun  6 10:11:51 2026 GMT
            Not After : Jun  5 10:16:51 2027 GMT
        Subject: CN=A598906270471C97D89A7F55390285DD82754303
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:5c:d1:a0:97:05:8a:70:49:7b:3b:1d:2a:80:
                    2f:86:94:b7:b8:fa:1b:7f:b1:2d:4c:af:1e:3f:95:
                    69:1a:21:24:35:26:5f:7e:97:2c:31:8a:6d:52:39:
                    6d:bb:77:f0:6a:f8:b4:9b:23:42:9e:bb:13:1a:e3:
                    b6:81:8b:ef:53:28:7d:7f:d3:e1:76:eb:64:30:a8:
                    e3:85:f9:9b:13:2d:ee:f7:fa:57:ae:d8:38:2f:b5:
                    6b:39:70:e7:1b:90:91:c3:3b:b9:0d:a3:ef:06:bf:
                    30:90:7c:b6:1c:03:93:5b:ea:b1:a5:cb:0a:5d:03:
                    13:ad:bf:70:26:30:c2:f1:11:7e:71:39:10:80:03:
                    3b:f0:3f:30:68:55:c2:80:c7:81:be:c5:dd:6e:d2:
                    6b:28:da:2b:3d:b2:f0:f0:f1:0a:23:69:cb:0e:76:
                    ad:40:b0:4d:4f:f1:d4:fc:26:08:78:01:47:3d:6e:
                    a3:c8:c5:5f:f1:d1:2a:41:d6:f8:2a:99:04:28:35:
                    27:44:74:83:ef:30:18:8b:fe:89:4f:50:07:b7:6a:
                    54:8c:2a:3b:b3:7c:b8:3f:40:d7:a2:b3:22:ca:87:
                    72:bf:52:07:9f:10:8a:0f:1e:7e:66:d1:56:8d:09:
                    3f:bf:77:96:26:9b:44:f2:44:21:8d:fe:ed:a0:08:
                    10:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:98:90:62:70:47:1C:97:D8:9A:7F:55:39:02:85:DD:82:75:43:03
            X509v3 Authority Key Identifier:
                keyid:0F:72:8B:91:46:70:43:4D:CF:56:33:E8:1E:2B:87:21:DF:75:CE:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/0F728B914670434DCF5633E81E2B8721DF75CEB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0F728B914670434DCF5633E81E2B8721DF75CEB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/326130613a363034303a626131353a3a2f34382d3438203d3e20313939353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:ba15::/48

    Signature Algorithm: sha256WithRSAEncryption
         2e:4b:66:8f:1e:71:2c:c1:1d:f1:3e:45:56:99:20:2c:56:30:
         00:bf:6a:3d:94:33:76:cc:81:49:3b:bb:ea:91:f8:80:54:ab:
         b2:7c:c6:4d:07:74:a9:4a:a5:39:55:4c:ba:0f:04:82:0f:e5:
         23:70:8a:7e:8f:1c:b0:e3:e0:1a:78:3d:12:77:93:39:de:d7:
         9e:14:ef:f4:15:d6:37:84:81:15:9e:79:ec:77:39:dd:b0:87:
         f1:66:7a:53:ba:d8:7e:20:dd:f4:06:3a:ec:bb:52:ba:4f:e0:
         36:b7:11:ba:4a:30:12:cc:e1:e9:31:2d:46:91:9f:d5:1a:02:
         4a:62:94:40:bb:30:68:b0:45:c7:65:a7:2b:62:2f:9c:c7:49:
         ab:37:ec:56:28:9b:e7:c3:14:26:13:1f:0a:6f:de:44:0c:dc:
         32:90:4e:6b:77:7c:16:82:36:e2:e5:44:c5:7a:fb:f6:63:f7:
         ab:46:e7:24:25:d9:90:13:20:95:a0:58:2a:1e:64:c7:cb:5f:
         bf:2f:a6:7f:b6:69:82:4b:9b:a1:80:cd:c8:36:49:c1:77:cf:
         9d:bc:89:eb:ed:1b:47:18:15:fe:e3:80:ca:3f:57:22:88:81:
         8f:19:f0:fb:15:b7:0a:87:1a:8d:0b:11:18:45:1f:08:ea:aa:
         6f:09:6e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:40:22 2026 by rpki-client