Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/326131333a633863343a663939303a3a2f34382d313238203d3e20323138393931.roa
File:                     326131333a633863343a663939303a3a2f34382d313238203d3e20323138393931.roa (raw, json)
Hash identifier:          k853DvbN3iiS1Slm5LVndazbumM9csvV2y0CQquqjmY=
Subject key identifier:   E6:93:19:A0:D9:CF:35:34:D3:02:07:E0:3F:7E:AF:A4:F8:89:DD:D9
Certificate issuer:       /CN=1E74494683D8D2A4E029AAD4573928D2A55FA411
Certificate serial:       7979DA84C9A16147EB429CBF6DCC3BE65DBCD79F
Authority key identifier: 1E:74:49:46:83:D8:D2:A4:E0:29:AA:D4:57:39:28:D2:A5:5F:A4:11
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/326131333a633863343a663939303a3a2f34382d313238203d3e20323138393931.roa
Signing time:             Thu 13 Aug 2026 10:22:14 +0000
ROA not before:           Thu 13 Aug 2026 10:17:14 +0000
ROA not after:            Thu 12 Aug 2027 10:22:14 +0000
asID:                     218991
IP address blocks:        2a13:c8c4:f990::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 18 Aug 2026 07:33:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:79:da:84:c9:a1:61:47:eb:42:9c:bf:6d:cc:3b:e6:5d:bc:d7:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E74494683D8D2A4E029AAD4573928D2A55FA411
        Validity
            Not Before: Aug 13 10:17:14 2026 GMT
            Not After : Aug 12 10:22:14 2027 GMT
        Subject: CN=E69319A0D9CF3534D30207E03F7EAFA4F889DDD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:29:ef:62:95:19:ba:b1:32:c8:08:7d:bf:2e:
                    d5:eb:e4:fa:c1:90:6f:b3:5a:66:a3:31:a0:e4:4e:
                    f8:b1:07:6f:36:30:17:b7:7c:fb:a7:48:23:6d:b5:
                    4d:55:e5:f5:83:09:e8:b5:51:9e:50:9e:e8:0e:00:
                    78:2e:17:4e:ad:17:e1:7c:39:93:30:82:2f:5f:fc:
                    90:f1:e8:71:69:2b:ac:f4:ca:5c:21:6b:6a:ea:5d:
                    34:89:be:67:b8:e6:56:c9:69:e6:ea:9b:cb:50:60:
                    64:cb:27:f2:6d:4c:72:e5:a7:4c:39:2f:eb:4c:4d:
                    b3:36:70:48:11:f0:b2:0b:10:73:a1:85:90:32:57:
                    c1:03:36:41:6f:52:56:80:51:08:66:4d:07:c1:6a:
                    97:8d:f4:d6:dc:26:56:3d:e0:c6:58:0c:5b:f8:6d:
                    1f:9b:72:6a:53:c9:dd:96:a1:7a:9f:1d:86:13:d9:
                    1b:97:eb:83:27:aa:fc:5f:6a:91:47:25:e6:a9:14:
                    16:3c:cd:c8:19:c6:db:48:d8:bc:98:67:c8:89:79:
                    32:a5:23:9a:05:17:a5:10:b7:9e:cd:68:ce:a3:99:
                    3a:d7:19:46:b7:d9:2c:af:63:2b:0d:c0:4f:73:6c:
                    04:9f:fd:71:76:ca:f2:f7:cd:a2:62:3c:7c:c4:67:
                    31:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:93:19:A0:D9:CF:35:34:D3:02:07:E0:3F:7E:AF:A4:F8:89:DD:D9
            X509v3 Authority Key Identifier:
                keyid:1E:74:49:46:83:D8:D2:A4:E0:29:AA:D4:57:39:28:D2:A5:5F:A4:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/326131333a633863343a663939303a3a2f34382d313238203d3e20323138393931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:c8c4:f990::/48

    Signature Algorithm: sha256WithRSAEncryption
         40:73:c3:37:43:dc:65:b0:88:10:c0:50:f1:36:ed:11:1a:80:
         fc:6d:7a:99:0e:4c:48:9b:58:02:0d:49:67:90:be:cc:c1:3d:
         f3:38:1f:36:9d:39:d9:71:17:51:1a:51:58:b7:42:a4:92:01:
         c2:4b:92:55:04:b7:4b:d1:c4:df:44:86:bf:70:90:0f:76:3c:
         57:20:1e:a6:95:e1:ac:13:be:fa:30:aa:1b:20:bb:5e:e0:5b:
         d8:c3:04:3c:95:a6:d8:e9:aa:af:89:1f:93:70:03:8f:47:a0:
         ba:bc:32:8a:79:31:12:95:4c:88:7d:9f:be:a4:88:40:3e:07:
         78:77:40:e6:38:6f:00:4e:7d:a3:d4:be:ab:24:9f:1f:ed:c8:
         38:f9:3e:c5:e8:6b:10:80:8f:88:fe:87:e7:f5:ac:78:6b:e6:
         bf:a8:0d:6d:02:5c:00:de:3d:a7:99:56:7f:ce:54:19:14:fc:
         76:a5:8f:52:47:76:8d:5f:9e:f1:a6:3c:99:8a:22:b6:9c:53:
         85:b0:cd:86:62:2f:83:50:42:08:c0:35:3f:f4:6d:74:20:18:
         24:f2:70:0e:c9:42:4d:8d:65:ec:4d:20:b6:dd:40:42:e3:f7:
         b1:aa:f8:28:a5:02:71:fe:42:60:8c:c9:8a:d8:37:e7:ff:44:
         d8:54:db:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 18 00:08:23 2026 by rpki-client