Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373030313a3a2f34382d3438203d3e20323030373439.roa
File:                     326131343a373538313a373030313a3a2f34382d3438203d3e20323030373439.roa (raw, json)
Hash identifier:          SUR3c/gwnDnnRnb+xY4lK7aaOY/G5sF4MaITx3Nzr30=
Subject key identifier:   C2:06:17:95:AD:41:61:AD:C7:63:1A:0E:C0:00:F9:62:12:7E:E8:15
Certificate issuer:       /CN=F78178425D897035E1D77343191BF013B39B03A5
Certificate serial:       2788B5C6478FD6730652A57BFDC25A3FFAEB671E
Authority key identifier: F7:81:78:42:5D:89:70:35:E1:D7:73:43:19:1B:F0:13:B3:9B:03:A5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373030313a3a2f34382d3438203d3e20323030373439.roa
Signing time:             Sun 04 Oct 2026 11:52:34 +0000
ROA not before:           Sun 04 Oct 2026 11:47:34 +0000
ROA not after:            Sun 03 Oct 2027 11:52:34 +0000
asID:                     200749
IP address blocks:        2a14:7581:7001::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/F78178425D897035E1D77343191BF013B39B03A5.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/F78178425D897035E1D77343191BF013B39B03A5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Oct 2026 23:31:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:88:b5:c6:47:8f:d6:73:06:52:a5:7b:fd:c2:5a:3f:fa:eb:67:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F78178425D897035E1D77343191BF013B39B03A5
        Validity
            Not Before: Oct  4 11:47:34 2026 GMT
            Not After : Oct  3 11:52:34 2027 GMT
        Subject: CN=C2061795AD4161ADC7631A0EC000F962127EE815
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:42:ba:d1:6b:38:50:27:8a:51:06:64:63:08:
                    8b:cc:47:41:79:6e:17:01:69:30:81:aa:89:00:65:
                    fb:76:77:8b:d3:d8:43:2d:f8:37:ca:4b:05:42:bb:
                    61:d4:ab:40:9b:a1:37:bf:5f:52:6e:ff:3b:b0:ad:
                    30:0a:09:11:cd:21:02:73:b0:63:9f:43:a5:70:e5:
                    1a:9c:3a:05:bc:48:55:47:94:59:81:c8:20:6e:f2:
                    43:79:57:62:65:92:db:7b:c1:87:39:ba:63:64:66:
                    eb:e5:82:2d:48:41:80:30:e2:85:69:c2:aa:86:bf:
                    fb:8c:bb:91:b6:54:e7:41:35:48:b4:39:17:a0:3d:
                    d2:64:23:ad:4b:70:9b:bd:8b:7e:e4:60:7c:b4:7b:
                    0d:8c:b4:f5:b9:dc:ba:e4:e5:62:40:22:aa:71:77:
                    9d:7e:b8:1c:45:3c:07:e1:cf:15:39:72:ef:e2:19:
                    75:13:d3:11:ed:eb:cb:30:d8:c7:ea:30:8b:bb:aa:
                    08:52:fb:d0:ba:91:b9:ff:b8:28:de:ca:e8:91:05:
                    a8:af:ce:5d:98:cf:1c:8a:f4:96:fc:e0:ae:9e:20:
                    69:a2:6f:d6:53:64:e0:13:74:ea:0d:92:40:5d:e5:
                    fe:e2:fa:bc:eb:59:84:ed:c8:d6:7d:8d:63:0e:d9:
                    46:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:06:17:95:AD:41:61:AD:C7:63:1A:0E:C0:00:F9:62:12:7E:E8:15
            X509v3 Authority Key Identifier:
                keyid:F7:81:78:42:5D:89:70:35:E1:D7:73:43:19:1B:F0:13:B3:9B:03:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/F78178425D897035E1D77343191BF013B39B03A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373030313a3a2f34382d3438203d3e20323030373439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:7001::/48

    Signature Algorithm: sha256WithRSAEncryption
         82:e9:f6:2a:66:7b:5f:ad:dc:13:10:15:35:c0:eb:15:ce:ad:
         67:7e:d0:90:93:74:05:98:19:db:4a:4e:68:98:95:f1:36:2d:
         f5:aa:dd:a3:fa:e8:b3:21:4e:1e:70:8f:56:df:81:bc:e2:7f:
         3e:14:f6:77:ce:30:5c:16:bf:fc:f5:ae:bc:95:fb:90:4c:3d:
         77:27:fa:30:43:2d:d0:b7:48:7a:88:66:d6:48:49:a6:ca:0d:
         2f:b9:50:5c:67:7f:7a:93:14:5d:cf:fe:fa:a1:35:a3:30:a2:
         8e:e9:d5:b4:be:01:8f:c0:41:bc:ee:d8:65:88:c1:f8:4b:5b:
         05:24:a4:ea:a4:4f:d3:16:1a:2e:aa:51:ba:50:18:27:e5:5a:
         72:20:e1:cb:94:36:e6:eb:c1:a3:fd:ac:b6:58:c3:d8:60:29:
         d2:42:24:21:fd:55:76:d3:75:9f:1b:f9:28:f1:d8:60:9b:89:
         e3:9c:1e:a5:e4:b9:53:e6:10:3c:64:69:51:45:dd:54:15:66:
         a0:7e:50:7e:84:1e:b7:a2:52:8b:21:96:63:78:d1:7e:75:40:
         28:f1:1a:46:29:19:70:34:61:13:a9:25:5c:64:eb:ff:ad:f9:
         76:01:35:5b:e8:77:bc:4e:9a:d2:13:50:2e:ef:c0:bf:36:f2:
         36:2f:15:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 06:23:37 2026 by rpki-client