Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/2/326130613a363034343a376432323a3a2f34382d3438203d3e20323134353130.roa
File:                     326130613a363034343a376432323a3a2f34382d3438203d3e20323134353130.roa (raw, json)
Hash identifier:          2VvQmqh0rgVlWv8W6Pzf59GFxuPhxLO/UhXjGSwmG7I=
Subject key identifier:   F9:81:11:3F:B6:D2:A3:65:DF:A5:10:EC:E6:99:CD:17:FA:C0:F0:67
Certificate issuer:       /CN=627B387604DE44D6006F0E7567E2D07EE82CF6BD
Certificate serial:       7F0E4E4D202D3C790695F6AF6852D50D3055C48A
Authority key identifier: 62:7B:38:76:04:DE:44:D6:00:6F:0E:75:67:E2:D0:7E:E8:2C:F6:BD
Authority info access:    rsync://krill.47272.net/repo/HYEHOST/5/627B387604DE44D6006F0E7567E2D07EE82CF6BD.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/2/326130613a363034343a376432323a3a2f34382d3438203d3e20323134353130.roa
Signing time:             Wed 11 Feb 2026 15:37:28 +0000
ROA not before:           Wed 11 Feb 2026 15:32:28 +0000
ROA not after:            Wed 10 Feb 2027 15:37:28 +0000
asID:                     214510
IP address blocks:        2a0a:6044:7d22::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/2/627B387604DE44D6006F0E7567E2D07EE82CF6BD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/2/627B387604DE44D6006F0E7567E2D07EE82CF6BD.mft
                          rsync://krill.47272.net/repo/HYEHOST/5/627B387604DE44D6006F0E7567E2D07EE82CF6BD.cer
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 23 Feb 2026 19:39:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:0e:4e:4d:20:2d:3c:79:06:95:f6:af:68:52:d5:0d:30:55:c4:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=627B387604DE44D6006F0E7567E2D07EE82CF6BD
        Validity
            Not Before: Feb 11 15:32:28 2026 GMT
            Not After : Feb 10 15:37:28 2027 GMT
        Subject: CN=F981113FB6D2A365DFA510ECE699CD17FAC0F067
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:df:06:38:5b:4c:1f:39:2c:f2:b2:00:8c:d8:
                    4f:85:59:f2:fe:40:aa:af:b6:04:96:1a:84:4c:ac:
                    55:75:8d:ad:08:d8:c1:64:b8:60:da:ef:63:ed:d2:
                    7c:82:5b:70:5b:09:42:4c:6e:6a:b9:43:81:df:c6:
                    6c:1f:3e:c4:9b:7b:9a:ef:09:e7:bb:3a:b9:d6:3c:
                    b4:ae:8e:d6:98:a6:15:d6:60:d6:1f:e1:0b:40:d7:
                    c5:7c:b5:04:57:1e:a3:30:cf:bb:71:18:15:85:66:
                    d2:ba:b3:93:1f:cf:33:b1:a0:54:6c:aa:10:56:3c:
                    61:ee:f8:7a:75:b2:60:64:a7:9d:76:10:ad:7f:be:
                    a6:d3:17:08:0a:8a:0f:00:d0:ab:ec:77:85:76:f1:
                    12:80:a9:d7:7b:f5:22:f2:f4:74:78:c3:d4:e4:68:
                    b8:56:02:fe:16:58:31:55:b6:5d:e4:e9:e4:9e:5a:
                    1b:a5:cc:b3:b3:4d:4b:52:90:a2:e5:45:a0:73:bd:
                    4f:49:d3:48:d2:e3:ee:97:6e:b5:65:e1:f0:54:48:
                    8c:b9:2e:e9:ac:d5:60:57:33:43:e0:2a:0f:fb:83:
                    d1:41:b5:e5:9b:58:63:f5:81:b5:f1:3a:c3:14:01:
                    43:fb:c1:b6:8d:76:2f:1c:b0:c2:3d:08:48:46:9f:
                    00:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:81:11:3F:B6:D2:A3:65:DF:A5:10:EC:E6:99:CD:17:FA:C0:F0:67
            X509v3 Authority Key Identifier:
                keyid:62:7B:38:76:04:DE:44:D6:00:6F:0E:75:67:E2:D0:7E:E8:2C:F6:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/2/627B387604DE44D6006F0E7567E2D07EE82CF6BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/627B387604DE44D6006F0E7567E2D07EE82CF6BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/2/326130613a363034343a376432323a3a2f34382d3438203d3e20323134353130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:7d22::/48

    Signature Algorithm: sha256WithRSAEncryption
         88:57:9e:50:91:f8:d7:16:3d:10:d9:41:9c:dd:f6:1a:60:9d:
         74:45:77:16:52:6f:86:91:f6:35:e1:cb:b5:c2:b9:24:4e:cf:
         84:f7:44:12:0d:3d:7f:a5:1f:a5:e0:62:5e:58:25:40:3a:55:
         64:dd:7d:17:bf:c7:d4:15:d8:85:c9:c9:50:04:c7:9b:b0:de:
         bc:5a:55:7e:22:e4:2e:8d:d2:d2:4a:31:a9:30:39:d1:da:54:
         49:13:6c:96:d6:6b:9d:5c:46:d4:64:22:b8:f7:ec:ed:45:51:
         75:ca:e5:b7:a9:9a:fc:40:b2:3f:11:30:a6:a0:c1:78:e2:04:
         aa:1c:8e:eb:cb:20:24:49:3e:31:7a:7a:cc:8e:08:5c:ef:22:
         cd:f2:2b:4f:d4:33:9c:d9:eb:27:60:85:4b:95:51:84:87:43:
         6b:73:82:26:75:28:1b:33:f9:34:e4:8a:d4:96:89:6a:f9:7d:
         bf:26:21:d0:23:40:b8:bc:06:40:9f:5a:95:d3:ab:f1:5d:fb:
         f9:40:b7:29:d7:64:e2:85:64:16:ed:7b:62:fb:50:1f:33:14:
         be:09:d6:ea:7a:38:5a:a1:a6:51:94:3d:5d:04:71:af:80:ae:
         8e:df:16:f6:ad:1d:54:32:b6:34:b5:52:96:e8:3d:ce:05:3f:
         8a:f4:49:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 08:48:49 2026 by rpki-client