Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/326130613a363034303a626166373a3a2f34382d3438203d3e20313939353138.roa
File:                     326130613a363034303a626166373a3a2f34382d3438203d3e20313939353138.roa (raw, json)
Hash identifier:          adRx1LN3tUpp2glLTO/ZRhM+HR5JDWOpfHGDVLTyp7o=
Subject key identifier:   BB:ED:65:44:42:5B:F3:63:DF:B0:4C:CF:07:1E:75:CB:F7:E0:18:F5
Certificate issuer:       /CN=0F728B914670434DCF5633E81E2B8721DF75CEB8
Certificate serial:       6EF8782033EF9782CE2C543401B1243724EB96A3
Authority key identifier: 0F:72:8B:91:46:70:43:4D:CF:56:33:E8:1E:2B:87:21:DF:75:CE:B8
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0F728B914670434DCF5633E81E2B8721DF75CEB8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/326130613a363034303a626166373a3a2f34382d3438203d3e20313939353138.roa
Signing time:             Mon 27 Jul 2026 20:32:56 +0000
ROA not before:           Mon 27 Jul 2026 20:27:56 +0000
ROA not after:            Mon 26 Jul 2027 20:32:56 +0000
asID:                     199518
IP address blocks:        2a0a:6040:baf7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/0F728B914670434DCF5633E81E2B8721DF75CEB8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/0F728B914670434DCF5633E81E2B8721DF75CEB8.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0F728B914670434DCF5633E81E2B8721DF75CEB8.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:f8:78:20:33:ef:97:82:ce:2c:54:34:01:b1:24:37:24:eb:96:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F728B914670434DCF5633E81E2B8721DF75CEB8
        Validity
            Not Before: Jul 27 20:27:56 2026 GMT
            Not After : Jul 26 20:32:56 2027 GMT
        Subject: CN=BBED6544425BF363DFB04CCF071E75CBF7E018F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:68:0b:3a:94:96:1a:89:b7:36:b1:6d:48:c7:
                    4c:26:e1:30:d6:84:01:c6:04:a4:04:c4:51:cb:81:
                    98:63:c0:bc:04:b5:42:99:ea:7e:89:88:be:ab:82:
                    7c:f9:3a:82:71:10:aa:72:5a:82:29:ba:e3:65:46:
                    55:68:46:25:97:ba:3b:b8:0e:a7:1e:d2:c8:47:68:
                    e5:b3:be:a9:0c:bd:16:3a:40:cb:b4:61:04:d4:9f:
                    f0:da:f9:b0:a5:03:cb:4a:9f:5d:2f:29:c5:f5:49:
                    cd:12:7d:3a:68:78:1a:d7:68:a0:7f:c6:16:cf:a6:
                    e5:25:69:ab:07:c7:b8:79:61:50:2a:a5:03:80:ad:
                    29:99:49:98:72:cb:16:57:8c:28:03:03:07:58:eb:
                    44:13:27:00:24:76:85:a4:69:92:4b:2d:01:57:37:
                    60:ae:54:37:89:93:11:25:b1:32:d9:e4:36:d0:7e:
                    65:6a:93:38:56:96:86:90:5e:2d:bd:10:b5:35:56:
                    31:9d:63:a1:12:fb:7b:e9:f8:f1:47:c2:76:a3:13:
                    69:49:3a:da:00:bf:e0:b2:33:36:db:94:63:8b:84:
                    68:2e:59:29:d7:63:b4:fd:a1:25:d3:ac:36:0f:49:
                    df:e8:95:0b:5a:43:aa:1f:ab:71:70:cb:60:8b:d7:
                    0a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:ED:65:44:42:5B:F3:63:DF:B0:4C:CF:07:1E:75:CB:F7:E0:18:F5
            X509v3 Authority Key Identifier:
                keyid:0F:72:8B:91:46:70:43:4D:CF:56:33:E8:1E:2B:87:21:DF:75:CE:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/0F728B914670434DCF5633E81E2B8721DF75CEB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0F728B914670434DCF5633E81E2B8721DF75CEB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/326130613a363034303a626166373a3a2f34382d3438203d3e20313939353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:baf7::/48

    Signature Algorithm: sha256WithRSAEncryption
         af:ee:03:5c:07:33:09:b3:f3:d8:04:7c:b8:8a:11:ed:e1:d9:
         d0:60:c5:36:2c:a8:70:ff:f3:b0:8a:c3:ab:a6:0e:f4:3a:99:
         55:73:de:90:14:42:6d:79:93:19:dc:71:30:23:27:ef:f2:87:
         45:19:aa:67:c2:5f:74:18:97:6a:73:84:ff:b9:b5:08:05:90:
         f9:03:f7:b1:f4:52:3e:e0:cb:de:b6:33:40:e3:c3:b0:37:09:
         56:2e:80:c8:9e:7f:af:27:3b:d0:ff:6f:c8:6b:b8:ae:19:fb:
         75:85:fa:ae:4f:20:87:ea:d7:36:3b:c6:16:79:f8:79:50:07:
         13:e1:e5:5d:53:4e:6f:76:35:f1:0a:40:85:bf:66:4e:96:0d:
         0c:57:9b:87:7a:65:ab:2d:5b:d4:08:bc:b9:e8:a0:5d:7b:0f:
         13:3a:92:f0:70:d1:f2:05:e2:84:99:10:da:5d:bd:1d:76:d2:
         0c:fb:ee:70:90:bd:c2:16:76:4b:8f:b8:c1:f0:3b:30:f4:0f:
         04:4f:64:07:f3:2b:c8:7d:b3:18:f5:7b:e9:24:96:3d:62:05:
         69:ff:e1:8d:87:bd:e7:68:3a:f4:5b:80:6d:e8:5b:2a:7d:5e:
         62:66:7b:f1:75:b6:4d:29:8c:44:e2:67:dd:84:76:06:13:08:
         6b:8a:b9:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:34:22 2026 by rpki-client