Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/326130613a363034303a626137353a3a2f34382d3438203d3e20313939353138.roa
File:                     326130613a363034303a626137353a3a2f34382d3438203d3e20313939353138.roa (raw, json)
Hash identifier:          kGUYz6bkEVw+AWX+nwAmfYYmwqUDJ5YykgsUz6P5cmE=
Subject key identifier:   0B:10:48:EE:46:D6:D2:DE:62:A4:D6:97:00:CA:1D:22:7A:B6:E1:0B
Certificate issuer:       /CN=0F728B914670434DCF5633E81E2B8721DF75CEB8
Certificate serial:       3C18BD6356319BBB060CBAF5475EA2DD1F5B8EB4
Authority key identifier: 0F:72:8B:91:46:70:43:4D:CF:56:33:E8:1E:2B:87:21:DF:75:CE:B8
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0F728B914670434DCF5633E81E2B8721DF75CEB8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/326130613a363034303a626137353a3a2f34382d3438203d3e20313939353138.roa
Signing time:             Sat 06 Jun 2026 10:16:49 +0000
ROA not before:           Sat 06 Jun 2026 10:11:49 +0000
ROA not after:            Sat 05 Jun 2027 10:16:49 +0000
asID:                     199518
IP address blocks:        2a0a:6040:ba75::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/0F728B914670434DCF5633E81E2B8721DF75CEB8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/0F728B914670434DCF5633E81E2B8721DF75CEB8.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0F728B914670434DCF5633E81E2B8721DF75CEB8.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 19:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:18:bd:63:56:31:9b:bb:06:0c:ba:f5:47:5e:a2:dd:1f:5b:8e:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F728B914670434DCF5633E81E2B8721DF75CEB8
        Validity
            Not Before: Jun  6 10:11:49 2026 GMT
            Not After : Jun  5 10:16:49 2027 GMT
        Subject: CN=0B1048EE46D6D2DE62A4D69700CA1D227AB6E10B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:04:53:3e:df:16:eb:ee:13:55:08:a3:d8:d4:
                    ab:d2:b6:46:0e:96:6d:95:1c:a9:e5:f9:66:b6:44:
                    83:c0:4e:0c:ac:1f:f2:c5:c7:ee:77:95:d4:3c:86:
                    a6:c0:81:81:0b:91:37:61:df:fa:6c:ef:4a:8a:50:
                    20:2f:8c:dc:ed:9d:48:a3:69:97:3a:72:70:2f:d8:
                    20:b8:f6:4c:a9:d6:d7:8b:5a:90:a6:b4:2b:37:d3:
                    97:3e:71:4e:2c:f7:dd:ae:d7:6b:b4:96:ad:2d:8a:
                    2e:bb:17:59:56:27:21:17:01:1b:20:a8:c2:87:1e:
                    a7:2e:0d:d3:18:fc:47:72:6e:7d:50:d4:bc:d8:6a:
                    02:79:3d:bf:f9:59:39:86:69:38:d0:8f:6e:26:a5:
                    3c:23:45:df:14:75:f3:7f:60:20:47:cb:54:4c:34:
                    35:48:37:83:0a:c7:a5:bc:42:22:48:98:e1:a5:9f:
                    0b:b8:bc:5f:07:d8:76:4a:a8:35:4f:6c:fc:f1:61:
                    dd:dd:37:d0:b4:df:9e:09:b5:10:3f:11:fe:9a:ba:
                    fe:46:84:89:1e:f9:f5:21:31:54:0c:8d:a7:aa:93:
                    c4:cb:21:97:f9:11:ad:02:3a:3d:b2:05:f3:d6:37:
                    40:b1:a8:de:02:4b:ea:1a:e0:e4:45:aa:ef:8a:10:
                    8d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:10:48:EE:46:D6:D2:DE:62:A4:D6:97:00:CA:1D:22:7A:B6:E1:0B
            X509v3 Authority Key Identifier:
                keyid:0F:72:8B:91:46:70:43:4D:CF:56:33:E8:1E:2B:87:21:DF:75:CE:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/0F728B914670434DCF5633E81E2B8721DF75CEB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0F728B914670434DCF5633E81E2B8721DF75CEB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/326130613a363034303a626137353a3a2f34382d3438203d3e20313939353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:ba75::/48

    Signature Algorithm: sha256WithRSAEncryption
         7d:3b:45:fe:d7:ec:4c:b6:e0:c3:a6:d2:71:f4:6f:c0:82:73:
         45:a4:4e:30:54:ea:d3:c1:55:08:6d:0e:8d:3f:57:b4:3a:68:
         eb:0e:45:41:f6:38:ec:ea:58:66:00:8b:2f:8d:69:0b:d9:f6:
         6d:1c:df:92:34:79:3e:f7:98:70:5e:03:b8:39:62:63:81:17:
         f4:12:f1:a7:98:cc:fc:49:4f:d1:a9:cf:1f:f7:76:4b:ad:c1:
         2a:21:ac:b6:7d:8a:06:bd:1b:a6:18:e1:cf:a6:6b:ab:06:8d:
         3a:2d:87:46:4d:06:a2:07:1c:9e:27:51:3a:cf:4d:cf:56:2f:
         67:ee:c1:83:6b:59:9f:20:01:0d:25:c7:bc:33:a0:60:e7:50:
         8a:2f:b6:89:c1:ce:58:be:4f:54:d8:d3:29:d4:af:4b:12:b9:
         28:95:2f:ea:a0:29:f7:2c:fb:6a:ae:15:c5:55:cc:d4:ae:ea:
         fd:6a:14:c7:a5:b0:46:b0:04:23:24:ad:33:8d:3f:ef:b2:d1:
         89:09:3b:15:52:2d:73:85:6a:a7:be:83:0b:60:50:e9:63:43:
         84:24:6a:94:f8:a9:d7:6f:c7:7e:3b:82:f3:5a:72:8b:8a:f2:
         ba:b1:7b:cf:82:2a:47:a9:58:60:70:17:35:c3:ba:c4:d7:c8:
         b4:5a:f4:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:26:55 2026 by rpki-client