Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373030303a3a2f33372d3337203d3e20323030373439.roa
File:                     326131343a373538313a373030303a3a2f33372d3337203d3e20323030373439.roa (raw, json)
Hash identifier:          OdQQpQLspZ8Dem9TDyp8fVPanstBa06y4PHBD35Eaz8=
Subject key identifier:   91:71:06:27:FD:C7:FB:7D:07:57:F4:7A:79:EF:ED:26:5F:AD:4D:ED
Certificate issuer:       /CN=F78178425D897035E1D77343191BF013B39B03A5
Certificate serial:       EADA630C027A11F8FA5CA67752DAB82A6490B0
Authority key identifier: F7:81:78:42:5D:89:70:35:E1:D7:73:43:19:1B:F0:13:B3:9B:03:A5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373030303a3a2f33372d3337203d3e20323030373439.roa
Signing time:             Sun 04 Oct 2026 11:52:35 +0000
ROA not before:           Sun 04 Oct 2026 11:47:35 +0000
ROA not after:            Sun 03 Oct 2027 11:52:35 +0000
asID:                     200749
IP address blocks:        2a14:7581:7000::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/F78178425D897035E1D77343191BF013B39B03A5.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/F78178425D897035E1D77343191BF013B39B03A5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Oct 2026 20:34:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            ea:da:63:0c:02:7a:11:f8:fa:5c:a6:77:52:da:b8:2a:64:90:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F78178425D897035E1D77343191BF013B39B03A5
        Validity
            Not Before: Oct  4 11:47:35 2026 GMT
            Not After : Oct  3 11:52:35 2027 GMT
        Subject: CN=91710627FDC7FB7D0757F47A79EFED265FAD4DED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:4f:53:77:4a:40:25:d5:5a:fb:85:c4:c2:26:
                    6b:ca:2c:3f:59:d5:7c:1f:40:d1:d2:00:19:32:9f:
                    3e:62:f0:9a:0e:c3:84:e5:e8:cc:25:9a:58:b7:af:
                    ad:c1:9b:5f:21:d7:00:11:7c:98:18:e8:4a:b1:39:
                    45:23:b8:9f:84:e1:b8:5c:b6:dd:a6:d3:e6:7c:47:
                    e8:16:2a:24:bb:3d:2e:3d:9a:cd:78:c3:e6:67:e1:
                    ea:6f:dc:87:0d:d4:a5:27:b5:8c:31:e8:65:35:05:
                    8b:cb:84:0a:61:50:57:d6:41:b4:f3:9b:3c:c4:f0:
                    29:ee:09:e8:87:a7:90:c0:41:58:8f:38:ab:ab:b7:
                    c4:46:ad:18:3e:c0:8c:2b:ae:2b:5b:21:37:72:63:
                    c7:a0:53:69:6a:13:a9:71:bf:af:c3:43:ff:17:be:
                    50:56:2c:96:a2:cc:bf:21:cb:6f:1c:32:9a:77:35:
                    90:18:da:64:ae:13:f3:7d:f4:d0:74:0b:91:f2:1a:
                    88:20:ce:e4:e6:ed:a1:35:7a:9c:fb:fa:4a:63:55:
                    53:11:41:f7:80:3c:ed:cb:cc:5f:17:43:fd:35:5b:
                    a9:b0:6f:4d:e5:b2:de:78:b4:28:d1:e6:f0:ad:96:
                    68:11:22:b3:05:18:8e:a5:cb:fe:ce:34:ab:77:be:
                    24:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:71:06:27:FD:C7:FB:7D:07:57:F4:7A:79:EF:ED:26:5F:AD:4D:ED
            X509v3 Authority Key Identifier:
                keyid:F7:81:78:42:5D:89:70:35:E1:D7:73:43:19:1B:F0:13:B3:9B:03:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/F78178425D897035E1D77343191BF013B39B03A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373030303a3a2f33372d3337203d3e20323030373439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:7000::/37

    Signature Algorithm: sha256WithRSAEncryption
         9d:86:30:c7:9c:64:1f:97:42:6b:77:a7:00:3b:72:93:ca:81:
         8a:3c:1e:5b:7c:94:33:f3:30:0d:1e:62:0d:d0:e0:93:52:84:
         94:f2:2f:5b:92:ea:cc:be:4b:a1:a3:e5:6e:60:dc:2e:77:1a:
         9c:07:52:24:f9:e7:78:8d:c6:00:6f:e5:7a:6f:f8:43:60:84:
         3f:55:bf:2d:9a:69:53:74:a5:82:f7:40:3d:26:d9:1c:49:9b:
         4a:f9:c3:fd:27:ad:8f:26:81:73:84:c5:a1:18:96:07:63:b7:
         78:1b:a3:e1:e8:c5:95:f5:f6:63:13:03:7c:ae:73:16:0c:40:
         8d:cc:7f:11:53:5b:cf:a1:f6:78:95:7e:43:a6:b6:69:8a:28:
         d7:68:17:19:f1:62:0a:06:cd:47:a7:bf:ca:6a:ec:fe:a3:4f:
         0c:5d:24:7d:e0:37:25:b5:13:1c:c2:5a:d4:dc:8c:ab:fe:5e:
         b3:33:b9:d3:77:5c:70:9a:e3:23:09:bb:99:79:84:bc:6c:f7:
         f6:e5:5c:04:34:e5:af:3a:1f:70:47:85:51:f6:61:62:b3:5f:
         e4:c1:12:72:55:76:07:f1:85:8c:0e:b9:13:16:24:c0:d2:c3:
         4c:bd:ab:a8:47:03:f2:ea:76:ac:2d:0d:a9:3d:08:88:51:b4:
         d9:5c:16:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 09:13:12 2026 by rpki-client