Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/1/326131343a373538333a656635313a3a2f34382d3438203d3e20323135333735.roa
File:                     326131343a373538333a656635313a3a2f34382d3438203d3e20323135333735.roa (raw, json)
Hash identifier:          FZxMvnN2JvS0E7GRVuAh2S+maz7EiQ9+xRJngz4LUC0=
Subject key identifier:   BA:57:51:61:26:B3:B8:DE:84:18:2A:EC:F4:AE:93:4C:E0:26:5C:ED
Certificate issuer:       /CN=B75F3781BC9C2E7301754988659F92686704E570
Certificate serial:       7532CDC4D7266D71707BF20159A98F4941208776
Authority key identifier: B7:5F:37:81:BC:9C:2E:73:01:75:49:88:65:9F:92:68:67:04:E5:70
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B75F3781BC9C2E7301754988659F92686704E570.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/1/326131343a373538333a656635313a3a2f34382d3438203d3e20323135333735.roa
Signing time:             Tue 02 Jun 2026 07:09:58 +0000
ROA not before:           Tue 02 Jun 2026 07:04:58 +0000
ROA not after:            Tue 01 Jun 2027 07:09:58 +0000
asID:                     215375
IP address blocks:        2a14:7583:ef51::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/1/B75F3781BC9C2E7301754988659F92686704E570.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/1/B75F3781BC9C2E7301754988659F92686704E570.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B75F3781BC9C2E7301754988659F92686704E570.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:32:cd:c4:d7:26:6d:71:70:7b:f2:01:59:a9:8f:49:41:20:87:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B75F3781BC9C2E7301754988659F92686704E570
        Validity
            Not Before: Jun  2 07:04:58 2026 GMT
            Not After : Jun  1 07:09:58 2027 GMT
        Subject: CN=BA57516126B3B8DE84182AECF4AE934CE0265CED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a3:05:ba:cf:4b:8e:da:a2:a6:4f:6a:e0:c8:
                    59:2c:af:35:7c:ef:bc:02:56:1e:80:42:de:b1:d5:
                    71:fd:03:8b:f7:78:54:01:4a:77:fd:74:c7:52:80:
                    21:af:30:cb:20:c3:ae:66:45:c0:30:bc:b8:91:e8:
                    29:0d:2d:06:a3:e8:33:9d:dd:da:0a:bd:12:b4:6f:
                    1b:54:f0:c0:bf:01:58:f3:6b:dd:8b:ba:b7:66:68:
                    43:1e:9f:ed:b8:8e:e1:e9:44:dc:9d:b5:03:36:d9:
                    42:25:73:bb:54:85:d1:f1:57:59:bc:ec:ae:f3:db:
                    f1:33:a8:78:52:98:aa:d4:38:3b:18:0c:3b:18:7b:
                    ff:e6:ad:9a:03:a4:fc:10:bf:c3:a2:5f:7a:d8:b3:
                    86:ae:a6:e4:fc:8c:0c:41:fd:fb:0a:94:e9:49:e2:
                    4b:19:b3:b3:c4:b8:98:cf:0d:8b:4d:7f:62:01:d5:
                    f5:2b:1c:ca:72:0b:2d:14:9b:34:36:23:43:3b:bd:
                    f4:c4:f3:c1:75:ac:0e:0b:85:f4:9f:7a:54:e1:34:
                    30:29:43:8b:89:f9:07:2f:0a:bb:3c:54:f3:fb:2c:
                    df:50:71:40:6f:44:c1:48:67:31:6f:47:5c:4f:a7:
                    6a:81:d7:6e:05:34:f5:aa:8a:4c:60:97:92:2c:cd:
                    33:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:57:51:61:26:B3:B8:DE:84:18:2A:EC:F4:AE:93:4C:E0:26:5C:ED
            X509v3 Authority Key Identifier:
                keyid:B7:5F:37:81:BC:9C:2E:73:01:75:49:88:65:9F:92:68:67:04:E5:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/1/B75F3781BC9C2E7301754988659F92686704E570.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B75F3781BC9C2E7301754988659F92686704E570.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/1/326131343a373538333a656635313a3a2f34382d3438203d3e20323135333735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7583:ef51::/48

    Signature Algorithm: sha256WithRSAEncryption
         7c:13:c9:ec:91:4e:6d:c9:ab:0b:ff:3d:67:2e:58:ea:a5:bf:
         b8:18:3e:90:38:39:e6:07:3d:10:52:cd:70:fc:ea:c5:4d:1a:
         6d:23:f3:87:c8:66:82:48:f8:b2:82:db:1b:39:02:a0:68:33:
         29:62:e8:32:52:f6:00:d6:17:a1:71:5e:fb:c0:fd:19:2f:43:
         c8:d7:71:67:b8:37:0a:19:6c:c7:3d:4c:80:34:38:ac:bb:0f:
         30:fd:ea:b5:44:d2:50:59:a7:d0:8b:e5:cf:33:10:74:e0:09:
         33:3d:d2:bb:48:27:9d:05:83:fb:82:38:eb:45:62:85:da:ff:
         58:7b:b4:6e:7a:6d:01:89:26:3c:7e:96:32:95:65:f3:b2:4c:
         93:d2:b5:7c:20:a7:72:49:62:34:8f:7d:74:54:c9:2e:89:35:
         66:55:c1:5c:5c:c2:8e:30:05:67:67:93:df:9a:6a:bc:79:a1:
         9d:60:af:82:9f:49:33:fa:23:de:ea:b6:42:b6:dd:72:e3:1a:
         8a:81:8a:b0:57:b9:5a:bd:63:85:5a:47:e4:5a:cb:e4:54:66:
         db:9c:03:58:f0:76:ad:8e:64:d9:66:b4:bb:77:b1:4b:bb:ea:
         9c:bc:ba:d4:c8:44:96:e5:3a:43:0e:80:34:d5:b2:77:48:d6:
         d5:95:39:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:37:57 2026 by rpki-client