Route Origin Authorization

$ rpki-client -vvvf rsync.rpki.as205941.org/repo/AS205941/1/326131333a633863343a3a2f33322d3332203d3e2030.roa
File:                     326131333a633863343a3a2f33322d3332203d3e2030.roa (raw, json)
Hash identifier:          6lH3XF7MQsfigRUnrH0pFLJKHpZuXeJr080n693ZPac=
Subject key identifier:   D1:10:02:66:EE:6D:36:1E:FC:CB:17:B5:85:6F:CB:07:84:2C:82:45
Certificate issuer:       /CN=2EE1DA546F075888B23DD21EA2AC5FE61C943160
Certificate serial:       47A21C1AAA466EEA15C7D45638C28ABA1D1C1FE3
Authority key identifier: 2E:E1:DA:54:6F:07:58:88:B2:3D:D2:1E:A2:AC:5F:E6:1C:94:31:60
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/2EE1DA546F075888B23DD21EA2AC5FE61C943160.cer
Subject info access:      rsync://rsync.rpki.as205941.org/repo/AS205941/1/326131333a633863343a3a2f33322d3332203d3e2030.roa
Signing time:             Tue 03 Nov 2026 10:27:54 +0000
ROA not before:           Tue 03 Nov 2026 10:22:54 +0000
ROA not after:            Tue 02 Nov 2027 10:27:54 +0000
asID:                     0
IP address blocks:        2a13:c8c4::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rsync.rpki.as205941.org/repo/AS205941/1/2EE1DA546F075888B23DD21EA2AC5FE61C943160.crl
                          rsync://rsync.rpki.as205941.org/repo/AS205941/1/2EE1DA546F075888B23DD21EA2AC5FE61C943160.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/2EE1DA546F075888B23DD21EA2AC5FE61C943160.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Nov 2026 12:16:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:a2:1c:1a:aa:46:6e:ea:15:c7:d4:56:38:c2:8a:ba:1d:1c:1f:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EE1DA546F075888B23DD21EA2AC5FE61C943160
        Validity
            Not Before: Nov  3 10:22:54 2026 GMT
            Not After : Nov  2 10:27:54 2027 GMT
        Subject: CN=D1100266EE6D361EFCCB17B5856FCB07842C8245
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:fd:ae:bb:cc:2e:58:fa:36:9c:99:17:9a:3b:
                    3f:66:60:48:56:71:66:e4:aa:6b:3e:3c:bc:8e:ab:
                    61:35:8a:14:a8:42:9d:7e:29:ce:da:40:95:2a:50:
                    72:a9:d5:30:10:46:b2:e5:4f:d9:a7:75:61:8a:f9:
                    ec:fa:6a:b9:77:9b:3f:7d:98:58:c4:19:9b:8d:27:
                    61:4c:7f:49:77:9a:27:01:28:2a:9a:b6:87:b6:e3:
                    d6:7b:fd:4b:13:10:b0:c3:36:6e:a2:39:09:c1:8b:
                    90:c7:45:35:f1:13:cd:c8:d1:37:72:3d:2c:1a:1e:
                    04:ff:f5:17:4b:a7:35:df:73:5a:59:38:63:06:3b:
                    b1:d5:de:96:1f:c5:aa:e4:a2:1e:d5:9f:12:cb:07:
                    af:27:fb:8f:d4:b9:02:a2:8f:70:8a:d1:3d:43:13:
                    01:b2:42:bd:4d:03:70:91:36:f6:51:78:18:72:f4:
                    80:60:87:02:4e:e4:bc:4b:d6:8f:57:f1:1c:ad:14:
                    7f:26:6c:db:ad:a9:df:55:bc:aa:b2:8b:a0:d3:94:
                    2c:06:79:6e:54:75:3f:8e:0d:72:f7:20:99:2f:14:
                    a4:f3:45:34:5e:44:e7:e0:ae:b3:a8:3b:9a:ee:31:
                    1d:1a:4e:de:a8:18:71:72:2c:5a:c3:02:f8:68:5d:
                    d9:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:10:02:66:EE:6D:36:1E:FC:CB:17:B5:85:6F:CB:07:84:2C:82:45
            X509v3 Authority Key Identifier:
                keyid:2E:E1:DA:54:6F:07:58:88:B2:3D:D2:1E:A2:AC:5F:E6:1C:94:31:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rpki.as205941.org/repo/AS205941/1/2EE1DA546F075888B23DD21EA2AC5FE61C943160.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/2EE1DA546F075888B23DD21EA2AC5FE61C943160.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rpki.as205941.org/repo/AS205941/1/326131333a633863343a3a2f33322d3332203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:c8c4::/32

    Signature Algorithm: sha256WithRSAEncryption
         3a:ac:77:dd:24:4d:4b:09:c8:cf:ed:7f:9f:fc:b7:1c:d2:0e:
         b7:41:b0:64:df:9e:c1:82:a1:98:66:c7:ae:4e:d5:fe:8a:2f:
         9f:4c:f4:cf:c2:5d:67:49:87:b5:bf:be:3a:3f:83:82:77:3b:
         ba:db:54:39:45:78:8b:8e:01:91:57:bd:b1:b0:a9:6e:40:c2:
         38:b3:5a:3e:c7:0a:98:52:61:82:63:c3:26:6d:b9:05:ac:6b:
         c8:62:e7:bc:9a:30:aa:4d:70:b3:de:43:bf:ab:8d:70:e4:2f:
         8c:d6:47:a2:5c:30:ed:e3:22:55:65:96:ea:16:d2:6e:52:70:
         16:10:fc:94:3a:15:8b:39:66:10:64:a0:7d:85:47:37:dd:30:
         00:3e:e6:75:f2:6b:04:44:86:02:a7:0a:8b:c8:b1:35:65:78:
         03:d7:06:94:6a:b4:f2:0d:4b:72:45:d5:be:a9:f3:12:d1:6c:
         e2:2c:c1:2d:8b:e1:6e:a0:0d:18:d4:98:b9:41:db:7d:ff:59:
         97:ba:4f:24:d3:2b:6d:d1:87:6f:19:f7:e6:f6:ff:21:04:5e:
         1c:13:63:56:92:43:46:a7:93:f5:b1:7f:aa:39:a4:6b:47:61:
         76:ff:3f:53:fb:fb:9c:75:d7:a9:22:62:c9:32:84:8f:68:5c:
         e0:4a:70:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 04:30:52 2026 by rpki-client