Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373230343a3a2f34382d3438203d3e20323030373439.roa
File:                     326131343a373538313a373230343a3a2f34382d3438203d3e20323030373439.roa (raw, json)
Hash identifier:          XMze1BFtJGed9oC5ngReUq5x9Svto5NS2DmjXLdRxw0=
Subject key identifier:   93:90:25:90:31:9B:71:B2:89:7C:A8:17:BB:CF:A9:46:22:73:5A:B5
Certificate issuer:       /CN=F78178425D897035E1D77343191BF013B39B03A5
Certificate serial:       2708FD5D40BB2B7657F4967FA027A20CFA37A8B5
Authority key identifier: F7:81:78:42:5D:89:70:35:E1:D7:73:43:19:1B:F0:13:B3:9B:03:A5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373230343a3a2f34382d3438203d3e20323030373439.roa
Signing time:             Sun 04 Oct 2026 11:52:34 +0000
ROA not before:           Sun 04 Oct 2026 11:47:34 +0000
ROA not after:            Sun 03 Oct 2027 11:52:34 +0000
asID:                     200749
IP address blocks:        2a14:7581:7204::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/F78178425D897035E1D77343191BF013B39B03A5.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/F78178425D897035E1D77343191BF013B39B03A5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Oct 2026 14:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:08:fd:5d:40:bb:2b:76:57:f4:96:7f:a0:27:a2:0c:fa:37:a8:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F78178425D897035E1D77343191BF013B39B03A5
        Validity
            Not Before: Oct  4 11:47:34 2026 GMT
            Not After : Oct  3 11:52:34 2027 GMT
        Subject: CN=93902590319B71B2897CA817BBCFA94622735AB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:cf:6a:fd:6d:49:98:9a:22:80:c9:d2:44:74:
                    07:e6:9d:e4:aa:68:f7:63:12:67:6a:4f:5a:68:58:
                    ee:a1:47:cd:1b:d1:01:cf:a4:ea:d1:22:b0:b4:7c:
                    fb:66:1e:6e:54:a7:fd:b0:65:16:e0:d3:30:5a:bd:
                    eb:18:f2:3c:75:43:b4:bf:f6:23:f5:6a:f2:a2:13:
                    1d:41:ad:e8:df:00:51:8b:91:2d:42:80:d3:bc:8b:
                    74:ab:bc:ef:f1:f0:ff:85:9b:d1:95:59:1e:5e:4c:
                    58:96:ff:82:42:28:46:de:11:b0:43:3e:c6:94:1d:
                    51:04:98:18:89:3c:53:48:c5:b3:ff:31:03:a7:a3:
                    fc:b6:29:01:fc:3d:25:c2:23:09:1a:3b:9b:c1:87:
                    08:68:d5:81:c1:7f:da:10:94:a0:c0:38:14:29:8d:
                    80:0a:fd:d2:79:4e:82:8f:34:fb:35:c2:cc:7e:cf:
                    58:7a:a1:90:60:56:c2:9d:3b:a5:ad:a9:e8:a9:c7:
                    7d:28:50:72:68:d1:d3:f1:c4:34:44:1d:eb:a2:50:
                    1d:c3:83:d3:ec:d3:0c:66:e4:2d:e1:06:3c:cb:0e:
                    2d:36:24:77:4c:d6:a8:6a:1c:85:37:87:5b:82:38:
                    15:80:a9:50:8a:e4:5a:78:a7:d2:de:7c:bb:a3:78:
                    03:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:90:25:90:31:9B:71:B2:89:7C:A8:17:BB:CF:A9:46:22:73:5A:B5
            X509v3 Authority Key Identifier:
                keyid:F7:81:78:42:5D:89:70:35:E1:D7:73:43:19:1B:F0:13:B3:9B:03:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/F78178425D897035E1D77343191BF013B39B03A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373230343a3a2f34382d3438203d3e20323030373439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:7204::/48

    Signature Algorithm: sha256WithRSAEncryption
         76:45:6c:db:9a:0a:4b:5e:e5:b4:11:7a:2b:91:21:88:09:bb:
         af:86:08:34:0b:36:f1:ec:d5:dd:70:b6:79:2c:c8:46:c2:a8:
         59:ec:3b:18:06:64:3b:f4:84:72:ba:38:b7:2f:a2:03:99:86:
         7c:61:de:4d:24:94:2d:57:46:12:82:da:74:f6:81:ba:37:7e:
         e6:c8:ff:77:4b:be:8e:71:22:98:16:d2:ef:b6:02:93:58:f0:
         9c:fc:b7:94:a0:32:e5:54:22:94:0b:04:e2:f3:fd:3d:99:0a:
         91:a7:b7:16:90:01:f8:b5:db:84:e5:4f:2d:fd:85:ba:9c:eb:
         7c:b1:49:53:05:30:da:f8:84:c6:4d:2a:63:96:78:db:d3:b8:
         fc:c2:91:97:6a:38:e7:56:f6:4c:3f:17:ad:77:a8:e0:e4:f0:
         30:de:0d:42:4e:0c:c5:12:67:49:9d:70:88:f9:f1:05:4f:c8:
         1e:cb:9d:c6:8e:c7:18:26:83:24:79:29:36:16:98:fe:8a:ba:
         87:69:c7:d9:6c:e7:69:07:cf:17:fd:78:f2:6f:b7:66:33:36:
         29:09:f2:e0:fa:8a:01:a6:90:79:39:e3:63:21:54:a5:1a:11:
         dd:dc:43:02:15:97:b1:2c:94:ac:2d:93:4e:0b:00:4c:67:28:
         e5:4d:24:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 18:51:59 2026 by rpki-client