Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/326130613a363034303a626131643a3a2f34382d3438203d3e20313939353138.roa
File:                     326130613a363034303a626131643a3a2f34382d3438203d3e20313939353138.roa (raw, json)
Hash identifier:          Y6NyMTKdWEwnZgl3Gs0HR2L/TaA1It6JwMLEiTPl6S0=
Subject key identifier:   5A:E5:43:2E:E8:3F:44:10:BB:57:98:16:76:46:48:10:52:AF:62:16
Certificate issuer:       /CN=0F728B914670434DCF5633E81E2B8721DF75CEB8
Certificate serial:       609D73DDCF563EAA8058F275AD92B85985B190BD
Authority key identifier: 0F:72:8B:91:46:70:43:4D:CF:56:33:E8:1E:2B:87:21:DF:75:CE:B8
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0F728B914670434DCF5633E81E2B8721DF75CEB8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/326130613a363034303a626131643a3a2f34382d3438203d3e20313939353138.roa
Signing time:             Sat 06 Jun 2026 10:16:48 +0000
ROA not before:           Sat 06 Jun 2026 10:11:48 +0000
ROA not after:            Sat 05 Jun 2027 10:16:48 +0000
asID:                     199518
IP address blocks:        2a0a:6040:ba1d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/0F728B914670434DCF5633E81E2B8721DF75CEB8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/0F728B914670434DCF5633E81E2B8721DF75CEB8.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0F728B914670434DCF5633E81E2B8721DF75CEB8.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Jun 2026 00:16:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:9d:73:dd:cf:56:3e:aa:80:58:f2:75:ad:92:b8:59:85:b1:90:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F728B914670434DCF5633E81E2B8721DF75CEB8
        Validity
            Not Before: Jun  6 10:11:48 2026 GMT
            Not After : Jun  5 10:16:48 2027 GMT
        Subject: CN=5AE5432EE83F4410BB5798167646481052AF6216
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:44:94:f4:9b:a3:00:fd:e4:b4:3c:99:80:bc:
                    40:bc:23:f4:53:f0:26:64:3a:01:2f:91:8d:b7:39:
                    05:cd:a3:dd:b3:6a:b1:81:8e:98:3b:6e:b2:2f:e1:
                    6a:3a:6f:5a:68:75:48:2f:bf:08:b5:75:82:3f:33:
                    d1:3a:4a:9e:1b:31:7a:dc:07:77:69:9e:87:54:91:
                    2a:52:ff:9b:c5:b8:be:3b:7a:f2:59:d1:8d:51:81:
                    2d:5d:61:f3:c1:b4:c8:48:60:02:d0:37:2b:e9:22:
                    c8:fd:3a:d0:af:fa:cd:a8:b2:6b:0b:4c:23:df:95:
                    35:82:bd:89:7c:3b:93:7e:2b:00:3f:7d:42:3e:a1:
                    d7:65:cd:97:f2:60:a6:10:c0:e2:3c:b7:6e:b5:1f:
                    f2:7e:e4:ab:e8:63:92:90:b5:1e:a9:43:5a:c0:b4:
                    5f:c7:b2:a1:fe:c6:12:d0:84:f7:d3:db:b7:9c:a2:
                    d2:b1:41:2b:d9:7a:b2:cf:33:a9:e6:d4:84:65:72:
                    d4:9a:bc:fb:94:34:b5:82:1c:44:cb:ee:a1:ba:82:
                    cb:a9:5b:6a:8c:94:b2:c2:62:6f:76:2f:d2:c7:0b:
                    aa:30:c7:e9:04:6f:d7:97:c4:12:de:56:71:9f:68:
                    8b:09:fb:17:8f:77:7f:90:65:a6:4e:0b:c4:fc:d4:
                    ec:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:E5:43:2E:E8:3F:44:10:BB:57:98:16:76:46:48:10:52:AF:62:16
            X509v3 Authority Key Identifier:
                keyid:0F:72:8B:91:46:70:43:4D:CF:56:33:E8:1E:2B:87:21:DF:75:CE:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/0F728B914670434DCF5633E81E2B8721DF75CEB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0F728B914670434DCF5633E81E2B8721DF75CEB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/326130613a363034303a626131643a3a2f34382d3438203d3e20313939353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:ba1d::/48

    Signature Algorithm: sha256WithRSAEncryption
         74:1a:60:85:89:69:12:1e:13:34:41:fb:85:26:1d:4a:c6:a8:
         6f:f5:79:40:68:3d:12:d6:5c:ba:a8:de:4c:ee:0d:cb:e9:33:
         11:fa:66:74:a9:46:ef:ce:47:a4:b4:ec:9d:46:56:08:52:79:
         69:70:a4:80:d8:56:03:79:fa:a2:e1:b6:68:87:91:b9:20:60:
         70:c6:85:09:a3:b9:f6:12:ed:81:1c:d7:19:7d:2a:b9:1d:97:
         9d:b5:36:46:04:56:d5:16:eb:2b:a6:bb:3b:86:b0:19:59:a3:
         03:d5:05:11:b0:3c:b1:c9:88:94:d7:61:71:3c:5c:67:d8:18:
         42:5b:d8:b2:2f:20:56:12:e2:a4:21:90:44:1d:f1:2d:34:75:
         48:b0:d3:cc:f3:31:ea:45:86:5b:e9:97:bb:8a:89:32:e3:41:
         c9:fa:49:71:46:97:17:e9:93:48:71:ed:bd:10:1c:4f:f6:75:
         ca:5a:e7:fa:19:e8:3b:36:26:ca:54:09:ef:78:83:58:55:19:
         44:8d:09:e6:a8:66:82:c2:28:66:ef:2a:d9:5a:cd:3d:32:78:
         c8:fd:6c:4a:fe:cf:c1:d4:2c:c9:58:88:39:c9:c6:c2:bd:be:
         74:53:2f:91:3f:d5:48:0f:b5:33:2f:57:55:36:6d:08:69:c5:
         7e:95:0d:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:25:44 2026 by rpki-client