Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/326130613a363034303a626164653a3a2f34382d3438203d3e20313939353138.roa
File:                     326130613a363034303a626164653a3a2f34382d3438203d3e20313939353138.roa (raw, json)
Hash identifier:          /PNIIK283EDvirWxDCoocr++KRRJLTuHfIp3Wrw3mNY=
Subject key identifier:   F2:D4:03:10:BD:91:E0:AA:F3:D1:BA:3F:62:3F:26:4E:2B:AB:C9:27
Certificate issuer:       /CN=0F728B914670434DCF5633E81E2B8721DF75CEB8
Certificate serial:       1F29725A5A06B681173817C7DCE7D96E5F827A2D
Authority key identifier: 0F:72:8B:91:46:70:43:4D:CF:56:33:E8:1E:2B:87:21:DF:75:CE:B8
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0F728B914670434DCF5633E81E2B8721DF75CEB8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/326130613a363034303a626164653a3a2f34382d3438203d3e20313939353138.roa
Signing time:             Sat 06 Jun 2026 10:16:49 +0000
ROA not before:           Sat 06 Jun 2026 10:11:49 +0000
ROA not after:            Sat 05 Jun 2027 10:16:49 +0000
asID:                     199518
IP address blocks:        2a0a:6040:bade::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/0F728B914670434DCF5633E81E2B8721DF75CEB8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/0F728B914670434DCF5633E81E2B8721DF75CEB8.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0F728B914670434DCF5633E81E2B8721DF75CEB8.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:29:72:5a:5a:06:b6:81:17:38:17:c7:dc:e7:d9:6e:5f:82:7a:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F728B914670434DCF5633E81E2B8721DF75CEB8
        Validity
            Not Before: Jun  6 10:11:49 2026 GMT
            Not After : Jun  5 10:16:49 2027 GMT
        Subject: CN=F2D40310BD91E0AAF3D1BA3F623F264E2BABC927
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:6e:e1:82:d7:8e:b9:19:98:42:8a:df:2e:c0:
                    55:1b:4e:11:38:67:2f:89:ef:ca:28:be:71:3c:3d:
                    a6:46:27:a7:56:48:92:c2:22:42:7e:61:40:5a:e9:
                    5e:07:3e:15:81:94:7a:fc:94:41:69:7a:70:d9:05:
                    8d:71:3c:a5:ca:72:56:21:42:91:c6:dc:6d:bf:52:
                    9e:a7:70:99:14:51:13:4e:06:ab:4e:c0:0f:5e:a2:
                    bf:09:a1:50:a8:c6:56:d2:36:84:8d:cd:be:21:32:
                    f7:6d:5c:c8:ff:ed:bf:31:57:a8:76:2e:87:c0:28:
                    fb:3d:94:06:3e:9c:02:44:cc:bd:c9:58:04:e2:1d:
                    76:b1:63:cc:78:33:85:08:55:d7:7b:b1:a4:ed:40:
                    22:ac:de:d1:9e:10:1b:a2:80:55:4c:f6:64:c2:f7:
                    77:61:4d:09:11:5f:28:a8:de:c1:c4:55:e3:66:9c:
                    9c:f5:28:12:6b:f7:7a:cf:51:25:23:fc:f2:57:49:
                    0f:ba:f1:75:97:44:57:cc:8c:f3:50:ac:74:af:8c:
                    6c:35:d5:27:94:f6:77:f5:b6:2e:1c:6c:a1:10:06:
                    5a:60:17:fd:6a:92:c7:47:6f:50:75:66:8f:f5:38:
                    2d:e4:ae:f1:59:97:88:08:44:c0:42:9c:07:63:de:
                    1e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:D4:03:10:BD:91:E0:AA:F3:D1:BA:3F:62:3F:26:4E:2B:AB:C9:27
            X509v3 Authority Key Identifier:
                keyid:0F:72:8B:91:46:70:43:4D:CF:56:33:E8:1E:2B:87:21:DF:75:CE:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/0F728B914670434DCF5633E81E2B8721DF75CEB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0F728B914670434DCF5633E81E2B8721DF75CEB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/326130613a363034303a626164653a3a2f34382d3438203d3e20313939353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:bade::/48

    Signature Algorithm: sha256WithRSAEncryption
         a4:6b:0f:28:d8:da:eb:0f:d9:db:a0:eb:43:5a:7a:94:a2:48:
         ba:5b:24:ef:48:f2:68:ab:32:e7:85:7a:d1:e2:69:7d:c5:ef:
         b9:ca:50:ff:20:b5:f4:fe:61:b6:11:d3:cd:3c:67:51:b4:76:
         2f:58:df:4b:9b:e8:b0:1e:a8:c3:dc:24:4b:e2:67:87:ab:67:
         aa:6f:ec:d2:5b:83:f9:c5:58:14:72:3d:7a:ec:56:ee:43:fa:
         26:c5:49:a8:ed:cd:5d:6e:cc:87:0d:4e:7f:5e:3c:5d:68:75:
         f8:37:36:4b:f6:5d:40:9e:aa:fa:c8:dd:5e:dd:14:9e:1f:a1:
         3a:86:28:28:2f:a1:57:b1:c1:96:10:a6:6e:2f:c8:75:0c:50:
         00:de:33:40:c4:99:96:03:e1:b2:40:6d:5a:fb:d3:3f:53:7a:
         4f:4a:b1:17:d6:7f:8c:87:46:4c:4f:ee:b3:b8:ae:d6:c9:8c:
         bd:8b:46:e4:8f:fd:d5:5f:65:e7:40:ed:5c:7c:cb:cd:82:7d:
         62:02:35:d2:16:ae:fd:0c:75:f1:81:34:7f:dd:15:41:24:3d:
         65:ed:d4:2f:ec:bf:59:95:aa:90:dc:f0:2e:92:30:41:ce:bc:
         50:1e:58:2c:68:02:46:5e:8f:fb:38:e2:b9:72:53:6c:24:02:
         86:e0:42:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:06:31 2026 by rpki-client