Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/326130613a363034303a626135373a3a2f34382d3438203d3e20313939353138.roa
File:                     326130613a363034303a626135373a3a2f34382d3438203d3e20313939353138.roa (raw, json)
Hash identifier:          AnnwfPPeSHyDka1nduTMcg3dWAEP0evIwGEY96jVTvM=
Subject key identifier:   46:7D:26:BE:62:33:A3:70:87:5C:05:E7:7B:03:E1:86:81:6A:B5:7D
Certificate issuer:       /CN=0F728B914670434DCF5633E81E2B8721DF75CEB8
Certificate serial:       62BCDCE548089D84A1CE16C27EEC642C5BB9D551
Authority key identifier: 0F:72:8B:91:46:70:43:4D:CF:56:33:E8:1E:2B:87:21:DF:75:CE:B8
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0F728B914670434DCF5633E81E2B8721DF75CEB8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/326130613a363034303a626135373a3a2f34382d3438203d3e20313939353138.roa
Signing time:             Sat 06 Jun 2026 10:16:51 +0000
ROA not before:           Sat 06 Jun 2026 10:11:51 +0000
ROA not after:            Sat 05 Jun 2027 10:16:51 +0000
asID:                     199518
IP address blocks:        2a0a:6040:ba57::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/0F728B914670434DCF5633E81E2B8721DF75CEB8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/0F728B914670434DCF5633E81E2B8721DF75CEB8.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0F728B914670434DCF5633E81E2B8721DF75CEB8.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:bc:dc:e5:48:08:9d:84:a1:ce:16:c2:7e:ec:64:2c:5b:b9:d5:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F728B914670434DCF5633E81E2B8721DF75CEB8
        Validity
            Not Before: Jun  6 10:11:51 2026 GMT
            Not After : Jun  5 10:16:51 2027 GMT
        Subject: CN=467D26BE6233A370875C05E77B03E186816AB57D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:02:bc:63:58:13:0c:94:a3:e0:68:7d:8d:7c:
                    c8:83:18:e7:24:27:b8:5c:36:e0:c6:d3:60:a4:20:
                    db:7d:76:7c:60:15:a6:e8:4c:fa:c4:06:a0:54:98:
                    75:74:db:e4:32:70:89:f1:7f:98:ce:78:b2:4c:90:
                    10:3e:64:3f:4d:3b:6f:6d:2a:0f:8d:c0:68:06:b6:
                    35:91:5e:b3:b8:9a:0d:9f:31:35:59:c9:e4:82:e4:
                    37:51:3f:26:1c:7c:b0:70:48:16:df:a2:2e:16:1f:
                    bb:81:a2:73:ad:69:c6:e4:31:53:04:32:0c:99:d4:
                    b0:01:5a:7b:32:aa:28:34:2c:c2:ce:77:1f:e2:aa:
                    43:ee:c5:49:22:d0:ba:34:3e:22:99:07:28:23:08:
                    01:1c:db:9a:31:8c:9a:06:37:11:39:f0:a6:ea:1e:
                    bc:ad:a1:e0:71:d0:25:be:f4:db:73:c8:e1:76:d4:
                    c5:a9:14:c5:1d:60:9d:76:d8:41:fa:79:7b:dc:56:
                    25:7d:40:89:59:f0:71:fc:7c:dc:c0:89:d5:af:40:
                    c9:ff:46:0a:ce:1b:c6:54:bc:51:4e:8f:1c:2c:52:
                    83:9a:72:4a:dd:8b:b6:ad:8b:a9:7c:f8:e6:23:6d:
                    c6:4d:c6:4d:19:7c:34:2f:2c:c4:cb:ee:19:8a:f2:
                    03:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:7D:26:BE:62:33:A3:70:87:5C:05:E7:7B:03:E1:86:81:6A:B5:7D
            X509v3 Authority Key Identifier:
                keyid:0F:72:8B:91:46:70:43:4D:CF:56:33:E8:1E:2B:87:21:DF:75:CE:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/0F728B914670434DCF5633E81E2B8721DF75CEB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0F728B914670434DCF5633E81E2B8721DF75CEB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/326130613a363034303a626135373a3a2f34382d3438203d3e20313939353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:ba57::/48

    Signature Algorithm: sha256WithRSAEncryption
         59:16:02:a0:89:3b:af:ef:e7:91:87:48:d3:f9:78:eb:42:79:
         35:d0:2f:d3:06:3b:81:d3:67:d8:df:b2:43:91:4a:e2:46:00:
         91:c5:19:0f:14:d0:ea:bc:ca:3f:08:80:d3:40:a4:ab:a2:35:
         03:a0:69:59:38:9a:fa:c1:c1:6f:41:5b:29:d5:16:5c:54:71:
         1b:ff:f1:9c:da:5f:bc:c6:4c:4c:c1:dc:ba:4f:cf:50:7b:6a:
         e0:95:01:c3:20:43:ce:37:46:66:a2:20:ae:37:20:a9:83:3e:
         20:d9:c5:69:f7:33:a2:f3:c2:c6:71:98:a5:ff:cc:0a:65:cb:
         43:4c:f1:92:bb:3a:9f:c9:68:36:c5:a4:ae:d8:3e:78:c6:c9:
         51:1d:84:0e:c6:6f:04:22:2a:b6:e3:ea:ba:d0:41:58:3a:84:
         ca:0f:87:ca:52:9b:c1:fd:9a:a2:75:15:c9:ce:f7:bc:2e:a8:
         51:48:1b:22:51:a1:a0:9c:50:26:1b:ff:f9:62:f7:59:c7:4e:
         4b:92:7b:8a:df:76:6f:00:39:b7:86:c9:38:af:d0:e2:29:75:
         30:de:04:2b:18:ac:da:7b:97:0f:ff:83:c2:37:61:41:55:c0:
         c9:f5:b3:14:5a:a5:86:60:4f:b8:dd:22:db:db:f1:8a:f7:06:
         61:55:0e:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:15:35 2026 by rpki-client