Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373230303a3a2f34382d3438203d3e20323030373439.roa
File:                     326131343a373538313a373230303a3a2f34382d3438203d3e20323030373439.roa (raw, json)
Hash identifier:          GCNVRy0TkOAIfbsSYcfMSI/pHV6QTJRFFxvErVfcyE4=
Subject key identifier:   E0:1B:40:A7:9F:55:5E:CF:AC:2C:AB:D0:64:97:F7:84:25:3D:3B:F2
Certificate issuer:       /CN=F78178425D897035E1D77343191BF013B39B03A5
Certificate serial:       481BE58A13612E68CAADCDE358FF5AE05509FB6B
Authority key identifier: F7:81:78:42:5D:89:70:35:E1:D7:73:43:19:1B:F0:13:B3:9B:03:A5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373230303a3a2f34382d3438203d3e20323030373439.roa
Signing time:             Sun 04 Oct 2026 11:52:36 +0000
ROA not before:           Sun 04 Oct 2026 11:47:36 +0000
ROA not after:            Sun 03 Oct 2027 11:52:36 +0000
asID:                     200749
IP address blocks:        2a14:7581:7200::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/F78178425D897035E1D77343191BF013B39B03A5.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/F78178425D897035E1D77343191BF013B39B03A5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Oct 2026 20:34:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:1b:e5:8a:13:61:2e:68:ca:ad:cd:e3:58:ff:5a:e0:55:09:fb:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F78178425D897035E1D77343191BF013B39B03A5
        Validity
            Not Before: Oct  4 11:47:36 2026 GMT
            Not After : Oct  3 11:52:36 2027 GMT
        Subject: CN=E01B40A79F555ECFAC2CABD06497F784253D3BF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:2f:5c:00:1a:9e:33:f7:e8:1b:82:63:22:71:
                    13:7c:79:3c:b9:1e:46:03:4d:39:a8:38:e9:0c:8b:
                    c8:2c:a3:e6:bd:f3:a6:e2:99:44:a9:ae:17:13:b8:
                    a6:9e:e1:e8:56:8c:b7:96:ef:65:47:bc:d7:ac:86:
                    ef:f5:79:df:15:ba:b9:79:f2:cc:8a:92:fe:b5:2d:
                    8d:96:0e:7d:e6:d0:8b:c3:ad:06:5b:fa:0b:82:60:
                    a7:54:f5:f1:dd:e6:47:60:98:23:f6:78:14:92:74:
                    17:8b:7e:34:b2:d0:c7:03:bc:55:c5:ce:af:c4:84:
                    5b:93:d8:8b:d7:30:20:af:1a:5a:8c:e1:1f:c7:05:
                    3d:bd:69:70:40:f8:fc:40:7b:31:98:b4:64:47:89:
                    ab:85:34:ff:e2:2c:1b:9f:33:94:e3:09:4a:41:6b:
                    2a:6a:35:1f:99:1a:8d:bb:8b:ea:b4:cb:07:e5:50:
                    1c:46:a7:25:7c:8f:68:89:dc:a6:fb:cf:53:c4:9c:
                    38:6b:ef:b3:b1:dc:8d:61:ba:c6:0a:64:7d:d4:c1:
                    c0:87:d7:3a:71:68:6c:e7:e4:b7:f4:a4:5c:02:1b:
                    fb:3e:e3:60:8e:0b:be:c9:85:8e:87:92:0f:1e:09:
                    bf:e6:62:53:5b:5b:5d:5b:ae:e9:ec:0d:83:25:a9:
                    a9:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:1B:40:A7:9F:55:5E:CF:AC:2C:AB:D0:64:97:F7:84:25:3D:3B:F2
            X509v3 Authority Key Identifier:
                keyid:F7:81:78:42:5D:89:70:35:E1:D7:73:43:19:1B:F0:13:B3:9B:03:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/F78178425D897035E1D77343191BF013B39B03A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373230303a3a2f34382d3438203d3e20323030373439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:7200::/48

    Signature Algorithm: sha256WithRSAEncryption
         50:0c:4b:47:b9:06:9e:28:b3:ed:14:32:73:7e:ac:73:b6:30:
         b6:3a:12:04:b9:ee:38:fd:2a:91:a2:11:cb:ff:e6:c6:f6:1a:
         61:e8:e9:ea:4c:6a:a4:48:6d:3b:a7:a2:fd:d2:c4:76:53:6d:
         4d:12:fe:c5:d9:ec:2e:73:c3:96:a7:02:09:7b:b8:7e:a9:9d:
         8d:56:1e:51:7a:07:68:c8:e8:7a:e8:5a:3e:62:e9:a5:be:3b:
         b6:b8:64:34:85:99:09:4f:2b:6b:1a:24:96:e0:76:88:43:46:
         d0:1f:c1:d5:23:81:bd:bb:f1:e7:a2:7b:c8:22:2c:7d:9b:b0:
         6f:e5:dc:66:80:d6:25:a3:29:80:76:4a:a1:44:56:ef:94:41:
         ac:a0:a8:ac:45:db:8f:82:4a:81:8d:bf:96:3c:0d:9d:f4:4e:
         a2:f4:86:24:f9:f2:b6:52:2c:05:9a:44:22:69:ad:f8:b1:62:
         39:7e:7b:b6:37:f7:6a:3b:28:4a:a2:ba:84:2d:7e:29:79:7f:
         a2:74:bf:ca:09:b6:e4:6b:6e:25:cd:be:36:3e:28:d9:38:98:
         ce:20:37:09:fe:53:4e:3c:33:e0:86:ce:d6:08:fd:b3:da:94:
         79:28:2e:3a:c3:1c:0e:d4:04:6f:4f:24:17:b8:cd:7d:3b:cc:
         cc:6e:ca:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:21:08 2026 by rpki-client