Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS265614.roa
File:                     AS265614.roa (raw, json)
Hash identifier:          l/ug8+SXCLiRNnFY+SYjN4fITc32ow6H9W1pIQYpWkg=
Subject key identifier:   51:17:76:DC:E7:83:56:8E:5E:99:15:8F:53:74:2E:FB:B2:80:8D:45
Certificate issuer:       /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial:       1088823A871FEEB7BA6746B0BCF43950C8C9268F
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS265614.roa
Signing time:             Wed 04 Feb 2026 13:03:24 +0000
ROA not before:           Wed 04 Feb 2026 12:58:24 +0000
ROA not after:            Wed 03 Feb 2027 13:03:24 +0000
asID:                     265614
IP address blocks:        2a13:9500:133::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 19 Feb 2026 15:25:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:88:82:3a:87:1f:ee:b7:ba:67:46:b0:bc:f4:39:50:c8:c9:26:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
        Validity
            Not Before: Feb  4 12:58:24 2026 GMT
            Not After : Feb  3 13:03:24 2027 GMT
        Subject: CN=511776DCE783568E5E99158F53742EFBB2808D45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5b:d1:17:85:ea:90:8b:89:9b:d1:42:8a:8a:
                    a7:11:e0:65:8c:e9:db:48:98:49:48:bb:6a:8b:9e:
                    65:77:25:13:f1:c7:05:34:6a:38:61:1b:21:07:7a:
                    d4:37:ce:68:37:47:8f:a1:77:6d:3d:b5:97:7c:92:
                    de:69:84:5b:ec:8e:44:48:28:ba:8e:07:90:1e:34:
                    c7:a9:9c:eb:16:40:11:03:71:04:3d:d1:cf:c4:ce:
                    6b:41:4e:b0:31:fc:f3:a9:ed:e9:2c:81:06:86:72:
                    47:bb:00:50:e8:83:31:cc:b2:b4:9b:ac:db:02:4b:
                    38:36:ef:1c:46:57:91:59:e8:e4:52:59:6a:e7:b1:
                    e4:6a:84:d5:b6:82:80:d3:35:b9:cf:46:d0:cb:0d:
                    55:c4:39:81:b7:52:5c:70:89:3a:4d:f3:45:9f:31:
                    5c:e6:41:76:e1:7c:e6:f2:cd:94:11:c0:ae:80:57:
                    aa:5d:90:53:ec:15:d6:00:2d:19:23:2c:86:94:94:
                    53:e8:6b:45:0e:cd:48:93:15:c8:40:5d:e3:c1:be:
                    3c:85:82:c0:78:29:71:e0:28:a3:ef:e0:a6:44:9a:
                    e2:4f:1c:72:26:6c:15:06:75:66:e8:36:f9:e6:fa:
                    db:b2:72:0a:32:f0:f0:61:c3:02:dc:9c:f3:b2:7d:
                    4a:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:17:76:DC:E7:83:56:8E:5E:99:15:8F:53:74:2E:FB:B2:80:8D:45
            X509v3 Authority Key Identifier:
                keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS265614.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:9500:133::/48

    Signature Algorithm: sha256WithRSAEncryption
         6b:47:75:52:3f:0a:49:5a:27:5e:db:dd:93:3c:79:20:3e:44:
         7b:89:a0:a3:d8:6b:73:3d:f8:a1:50:df:e7:7d:dd:15:c3:7e:
         5d:0e:7c:6f:72:25:69:3d:3b:71:0f:c5:6c:a2:e5:4b:28:5a:
         cb:66:dc:bc:95:67:50:cc:6b:49:fe:0a:35:fb:fa:37:2b:5e:
         05:f9:c8:44:f1:3e:c8:11:9d:0a:58:79:01:84:9f:47:8f:22:
         a7:83:5b:76:db:11:d4:5f:c1:e7:4c:c8:89:d6:1a:78:f9:a7:
         ec:2e:39:4f:0f:74:75:a4:0a:54:15:b7:99:48:32:d2:9f:81:
         20:a2:5c:b5:1b:e3:47:1e:55:38:51:2b:9f:73:e0:23:f1:4b:
         e5:af:5d:59:02:df:87:0e:6b:70:29:a6:99:f4:cd:2b:a5:95:
         e0:79:28:9b:9d:69:fd:78:0b:a7:85:8a:b5:37:9f:90:40:5c:
         9e:31:6a:c1:08:0a:cf:53:aa:ca:ff:a7:c2:ef:91:06:ed:eb:
         4f:fa:b7:6b:f6:85:77:0f:a9:6a:99:50:e8:c1:6a:db:f7:82:
         29:0d:87:44:65:73:d6:9c:15:e8:67:10:f9:3f:89:ba:fb:88:
         dc:06:18:bc:b1:84:f2:7e:73:5e:8d:e8:78:8b:80:fd:ab:78:
         eb:b8:f0:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 18 21:18:50 2026 by rpki-client