Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/326130613a363034303a626131373a3a2f34382d3438203d3e20313939353138.roa
File:                     326130613a363034303a626131373a3a2f34382d3438203d3e20313939353138.roa (raw, json)
Hash identifier:          LWWEhXhIIW9cUlRarj54c26L77w21mm1Ueq7jkKf5kc=
Subject key identifier:   9C:70:E0:F3:02:46:18:29:51:98:8F:D5:A0:39:EA:AF:E4:22:A5:28
Certificate issuer:       /CN=0F728B914670434DCF5633E81E2B8721DF75CEB8
Certificate serial:       0722E1BE21308ED4677E33D1C19E4304D805392C
Authority key identifier: 0F:72:8B:91:46:70:43:4D:CF:56:33:E8:1E:2B:87:21:DF:75:CE:B8
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0F728B914670434DCF5633E81E2B8721DF75CEB8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/326130613a363034303a626131373a3a2f34382d3438203d3e20313939353138.roa
Signing time:             Sat 06 Jun 2026 10:16:50 +0000
ROA not before:           Sat 06 Jun 2026 10:11:50 +0000
ROA not after:            Sat 05 Jun 2027 10:16:50 +0000
asID:                     199518
IP address blocks:        2a0a:6040:ba17::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/0F728B914670434DCF5633E81E2B8721DF75CEB8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/0F728B914670434DCF5633E81E2B8721DF75CEB8.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0F728B914670434DCF5633E81E2B8721DF75CEB8.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:22:e1:be:21:30:8e:d4:67:7e:33:d1:c1:9e:43:04:d8:05:39:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F728B914670434DCF5633E81E2B8721DF75CEB8
        Validity
            Not Before: Jun  6 10:11:50 2026 GMT
            Not After : Jun  5 10:16:50 2027 GMT
        Subject: CN=9C70E0F30246182951988FD5A039EAAFE422A528
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ce:bd:96:2a:f9:1c:cb:34:47:a3:ef:f3:e9:
                    8d:f0:93:dc:a5:6e:04:d1:de:44:17:34:ac:80:99:
                    e2:2a:76:cc:a0:c6:93:43:d6:47:53:b1:aa:95:a5:
                    f6:fc:71:4f:a1:65:dc:0f:5d:ca:d1:b5:c8:53:cb:
                    04:35:17:9a:ee:27:40:4a:dd:55:12:f2:cb:61:43:
                    06:7b:4e:a6:35:5c:e1:79:c2:a4:84:1f:6f:04:e6:
                    18:bf:fe:96:fc:b8:50:2c:65:41:1e:53:e2:49:61:
                    de:3b:6d:85:37:e2:ad:cf:5d:f3:75:df:15:11:1b:
                    ab:86:d8:26:c0:12:e6:1c:85:5e:00:d7:43:0f:9d:
                    ba:de:85:c7:f6:eb:62:56:63:5f:e9:62:09:f8:88:
                    53:4d:2c:93:2c:01:09:44:ea:6f:31:c8:c1:85:49:
                    23:77:71:84:bf:a4:35:2a:ee:7f:04:5f:20:4f:9a:
                    7e:ba:e4:e4:ea:76:74:64:cb:06:90:29:2e:c4:fb:
                    d2:62:02:dd:8d:e6:b7:63:96:ee:fd:b7:1e:19:f5:
                    bb:0c:b0:6d:e7:38:bd:fe:b7:32:95:2d:31:7a:c6:
                    96:6b:6b:72:af:f1:a7:d2:7e:5e:6c:9d:6c:3f:64:
                    9d:7e:76:50:f0:38:9c:c3:76:5e:ef:63:3f:20:71:
                    08:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:70:E0:F3:02:46:18:29:51:98:8F:D5:A0:39:EA:AF:E4:22:A5:28
            X509v3 Authority Key Identifier:
                keyid:0F:72:8B:91:46:70:43:4D:CF:56:33:E8:1E:2B:87:21:DF:75:CE:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/0F728B914670434DCF5633E81E2B8721DF75CEB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0F728B914670434DCF5633E81E2B8721DF75CEB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/326130613a363034303a626131373a3a2f34382d3438203d3e20313939353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:ba17::/48

    Signature Algorithm: sha256WithRSAEncryption
         83:84:95:41:db:da:2f:08:c8:b3:b9:70:7b:54:e1:e9:f4:e5:
         5d:b8:ec:d0:ff:0f:f8:6c:63:34:f8:68:b9:df:60:78:72:ee:
         64:04:b6:dd:03:e9:85:56:57:c0:3a:1d:c0:ce:b2:25:f6:d2:
         49:59:d8:b5:a1:18:5f:f2:8e:80:be:e2:24:5d:bc:f8:5e:28:
         d7:a2:68:dd:c4:3e:92:b7:d3:06:6a:b0:cc:e6:4d:27:74:3b:
         e8:3e:11:16:35:9d:be:01:a7:0b:f1:f5:18:9c:a0:fb:c3:7b:
         95:b2:1e:3f:ef:ae:a3:f6:f5:8f:4c:ab:64:fa:ea:ad:c8:eb:
         1f:00:83:7f:a1:00:83:eb:54:3b:7c:6a:f4:e7:0a:2b:3a:e1:
         e2:85:9e:13:fa:aa:2a:33:f1:8d:b5:7f:07:ca:67:b7:83:d0:
         50:ff:cd:44:bc:de:9b:f0:64:48:76:a8:f3:0d:99:f4:b1:87:
         d7:4b:1c:69:15:ba:87:70:63:44:81:78:02:36:5a:d6:64:bc:
         a3:d4:5d:ca:e4:f5:2f:12:25:9b:54:b8:5c:6d:5f:1c:a3:7e:
         0b:e9:cd:98:d4:62:e2:83:2b:09:31:4d:ed:e9:c3:0d:24:32:
         59:84:92:b0:8a:6c:11:e4:23:9e:85:88:13:96:3c:92:c8:60:
         4c:54:be:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:39:20 2026 by rpki-client