Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/326130613a363034303a626166663a3a2f34382d3438203d3e20313939353138.roa
File:                     326130613a363034303a626166663a3a2f34382d3438203d3e20313939353138.roa (raw, json)
Hash identifier:          NbQLBZvtpbybqgBd7D+OnWb64mzJ1iCJyP6olkRFa80=
Subject key identifier:   9E:F7:86:1B:8F:30:B7:67:AF:EE:FE:6A:46:23:FD:2B:E3:D3:C0:AF
Certificate issuer:       /CN=0F728B914670434DCF5633E81E2B8721DF75CEB8
Certificate serial:       664F1B0DAA40CDBE8E8EBBAA8B24D58B078A7413
Authority key identifier: 0F:72:8B:91:46:70:43:4D:CF:56:33:E8:1E:2B:87:21:DF:75:CE:B8
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0F728B914670434DCF5633E81E2B8721DF75CEB8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/326130613a363034303a626166663a3a2f34382d3438203d3e20313939353138.roa
Signing time:             Sat 06 Jun 2026 10:16:48 +0000
ROA not before:           Sat 06 Jun 2026 10:11:48 +0000
ROA not after:            Sat 05 Jun 2027 10:16:48 +0000
asID:                     199518
IP address blocks:        2a0a:6040:baff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/0F728B914670434DCF5633E81E2B8721DF75CEB8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/0F728B914670434DCF5633E81E2B8721DF75CEB8.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0F728B914670434DCF5633E81E2B8721DF75CEB8.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Jun 2026 00:16:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:4f:1b:0d:aa:40:cd:be:8e:8e:bb:aa:8b:24:d5:8b:07:8a:74:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F728B914670434DCF5633E81E2B8721DF75CEB8
        Validity
            Not Before: Jun  6 10:11:48 2026 GMT
            Not After : Jun  5 10:16:48 2027 GMT
        Subject: CN=9EF7861B8F30B767AFEEFE6A4623FD2BE3D3C0AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9e:0a:30:ff:72:ee:45:d9:67:69:10:c4:c6:
                    81:cd:18:bd:19:ed:9f:32:2b:a6:4f:8b:84:87:d3:
                    44:af:3d:bc:8f:2d:aa:2c:71:6b:23:0d:da:d2:e6:
                    6f:3d:c5:cc:e7:91:73:b3:93:2b:13:6a:e7:7e:03:
                    54:bc:7d:37:96:5c:69:d6:08:14:07:74:67:a7:67:
                    b7:38:66:e7:b4:99:fa:4a:29:f9:a0:3c:91:59:65:
                    46:b3:07:3b:56:6c:b8:96:cc:1e:3f:78:cd:55:d8:
                    d9:af:ec:d0:9f:0f:a3:cd:48:6d:40:3a:08:58:76:
                    1b:27:85:5a:09:ab:fe:40:c9:7a:e4:56:ed:9a:56:
                    cb:72:2d:1f:98:bf:e9:32:ab:7a:35:bb:1f:c4:5b:
                    b2:de:03:90:e8:9c:52:69:49:e0:43:c6:bc:e1:bf:
                    94:74:63:18:48:43:a4:dd:94:74:d1:6f:d9:92:58:
                    8b:d5:43:f0:1a:ab:a4:c7:08:88:37:4a:cb:c7:a9:
                    48:cd:ad:e4:1e:be:eb:f9:a3:e3:8f:df:7b:c8:93:
                    56:93:db:91:dd:79:82:63:b7:17:91:88:d2:be:4e:
                    20:82:f6:b6:2a:d4:82:a7:60:9a:f9:12:2d:1e:7a:
                    fa:38:dd:a1:83:73:e9:4b:a5:29:d7:cf:bb:18:01:
                    73:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:F7:86:1B:8F:30:B7:67:AF:EE:FE:6A:46:23:FD:2B:E3:D3:C0:AF
            X509v3 Authority Key Identifier:
                keyid:0F:72:8B:91:46:70:43:4D:CF:56:33:E8:1E:2B:87:21:DF:75:CE:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/0F728B914670434DCF5633E81E2B8721DF75CEB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0F728B914670434DCF5633E81E2B8721DF75CEB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/326130613a363034303a626166663a3a2f34382d3438203d3e20313939353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:baff::/48

    Signature Algorithm: sha256WithRSAEncryption
         18:10:07:56:24:bc:ef:ab:3a:4e:26:4a:e4:dc:c5:65:93:6c:
         61:4f:f0:87:11:83:a9:fb:ba:2a:7c:0b:e4:8a:d9:67:66:16:
         d6:82:91:22:85:bd:f1:c8:77:67:75:ec:18:28:78:d5:43:5e:
         eb:0a:35:3d:8d:45:88:a7:b9:ca:fc:cb:42:d0:f5:03:3e:c3:
         cf:14:6e:85:ff:b6:53:08:69:9c:ad:31:84:fc:3a:c9:ea:51:
         c1:40:0e:6b:ba:52:4e:39:73:a6:aa:aa:27:e4:ce:d6:0d:f9:
         64:32:8b:cd:94:8c:19:a8:d1:54:97:83:f5:92:7a:a0:0a:9e:
         1b:bf:d5:19:02:22:4a:ef:d0:45:b4:14:36:c2:c0:16:62:0b:
         8c:96:93:fd:27:a8:27:72:b8:26:28:5f:f1:e4:6e:9b:c9:8e:
         4a:fd:f0:e2:04:06:a8:5b:84:4d:36:71:e4:ad:59:b5:1c:2c:
         32:66:5c:d0:b0:5d:a2:fd:86:16:64:05:2e:f5:0d:b2:de:4b:
         1d:4a:43:69:8f:eb:1f:fe:f6:b7:1e:e5:99:b6:85:b6:48:e1:
         b4:ff:bc:9d:24:f3:53:96:9c:2f:75:54:09:68:28:b5:51:87:
         ba:74:86:4c:45:6a:b3:35:a2:35:8f:8e:ed:e5:a4:ef:4a:18:
         2b:2d:f4:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:25:45 2026 by rpki-client