Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/326130613a363034303a626135353a3a2f34382d3438203d3e20313939353138.roa
File:                     326130613a363034303a626135353a3a2f34382d3438203d3e20313939353138.roa (raw, json)
Hash identifier:          8B8uDxCh3ir5VOcFdUscseC3urfAsY/u4hSNIZoVyHw=
Subject key identifier:   8F:B0:7B:63:3A:57:D9:98:F3:9A:CC:09:AC:EC:F5:6E:E8:42:64:CE
Certificate issuer:       /CN=0F728B914670434DCF5633E81E2B8721DF75CEB8
Certificate serial:       16E9CFA865E7923C88224CB7612BED96A92D055E
Authority key identifier: 0F:72:8B:91:46:70:43:4D:CF:56:33:E8:1E:2B:87:21:DF:75:CE:B8
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0F728B914670434DCF5633E81E2B8721DF75CEB8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/326130613a363034303a626135353a3a2f34382d3438203d3e20313939353138.roa
Signing time:             Sat 06 Jun 2026 10:16:48 +0000
ROA not before:           Sat 06 Jun 2026 10:11:48 +0000
ROA not after:            Sat 05 Jun 2027 10:16:48 +0000
asID:                     199518
IP address blocks:        2a0a:6040:ba55::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/0F728B914670434DCF5633E81E2B8721DF75CEB8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/0F728B914670434DCF5633E81E2B8721DF75CEB8.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0F728B914670434DCF5633E81E2B8721DF75CEB8.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:e9:cf:a8:65:e7:92:3c:88:22:4c:b7:61:2b:ed:96:a9:2d:05:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F728B914670434DCF5633E81E2B8721DF75CEB8
        Validity
            Not Before: Jun  6 10:11:48 2026 GMT
            Not After : Jun  5 10:16:48 2027 GMT
        Subject: CN=8FB07B633A57D998F39ACC09ACECF56EE84264CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:70:0f:1c:56:9b:f1:e3:df:2b:67:27:0f:70:
                    df:34:b9:3c:14:24:b5:4f:d3:29:1f:3e:12:3d:16:
                    a3:ca:68:c0:39:e7:dc:59:05:70:eb:f6:86:1d:d0:
                    cb:2a:7b:f9:c2:97:24:29:ec:79:80:2e:57:3f:50:
                    9d:3f:37:47:51:1c:a0:6f:ae:d3:5e:53:f9:4d:18:
                    3a:4a:c8:cf:da:d8:2e:29:dc:80:32:ae:ba:a6:7b:
                    ef:c2:da:6d:58:95:9c:b6:34:3d:e0:66:38:bb:9c:
                    9d:d9:1b:3e:78:e8:dc:cb:b9:37:ac:da:34:4b:27:
                    f9:ae:77:36:31:0f:e0:5e:76:45:c7:c7:e9:f6:5f:
                    67:ef:e9:f4:9f:d6:ab:02:7d:fe:fe:a6:b9:84:e9:
                    3c:5b:76:c5:70:83:3d:41:6c:e0:13:c6:20:41:7a:
                    db:5c:04:ed:04:25:37:9c:0f:13:80:04:67:5d:5b:
                    ac:0c:2c:4e:af:3f:d8:d5:41:26:7c:bf:66:55:9a:
                    a1:e8:dd:60:79:c0:c8:1d:4a:a3:b8:a7:27:4e:85:
                    fc:da:06:c2:ae:d5:76:40:b5:2b:bc:2c:c7:a6:71:
                    87:58:73:aa:85:4b:20:39:62:3f:8c:8d:63:7c:96:
                    1f:bf:bc:32:a0:ff:30:bf:71:d7:c9:dd:6e:2c:a0:
                    e0:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:B0:7B:63:3A:57:D9:98:F3:9A:CC:09:AC:EC:F5:6E:E8:42:64:CE
            X509v3 Authority Key Identifier:
                keyid:0F:72:8B:91:46:70:43:4D:CF:56:33:E8:1E:2B:87:21:DF:75:CE:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/0F728B914670434DCF5633E81E2B8721DF75CEB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0F728B914670434DCF5633E81E2B8721DF75CEB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/326130613a363034303a626135353a3a2f34382d3438203d3e20313939353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:ba55::/48

    Signature Algorithm: sha256WithRSAEncryption
         96:20:28:22:0b:14:bb:4a:45:f3:bb:e9:de:8a:5a:9f:03:28:
         7c:91:6f:92:a2:df:07:10:65:22:11:df:0d:73:3d:0d:a7:d8:
         43:a3:c3:d9:9b:85:b2:95:1b:34:77:03:4a:8e:3a:ca:4b:f5:
         2a:73:04:27:a4:54:46:ad:e8:3b:87:9b:a8:83:b5:55:97:1f:
         bc:11:21:b1:c7:c9:ac:85:dd:64:de:e4:49:94:a7:98:5c:41:
         18:b5:09:ad:18:4d:3b:be:ac:6e:70:35:54:94:87:93:5e:6d:
         58:31:c6:64:0f:e7:95:98:44:42:ca:e3:bf:06:65:22:85:67:
         37:be:ac:65:dc:19:2c:98:df:35:3f:85:7f:79:79:87:d1:18:
         69:b8:4e:9b:9c:ac:f8:55:35:01:4c:19:4d:f2:7d:9f:6a:d5:
         10:84:90:64:45:b9:1a:45:e2:80:38:92:b4:1f:7d:8f:92:4d:
         ad:4f:49:77:7d:a8:3c:91:45:3b:e6:bb:59:ad:53:83:e8:7b:
         ce:25:21:1d:3c:7a:00:5d:54:d5:a9:0d:03:d7:98:e0:cd:a9:
         88:42:c4:22:f5:7c:4a:b2:ee:d8:e2:e2:37:03:1d:65:d9:71:
         04:e3:7a:a5:67:7d:75:2a:d6:97:7c:c0:28:44:e3:af:a3:c0:
         20:04:0c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:08:15 2026 by rpki-client