Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/2/326130613a363034343a376436303a3a2f34342d3434203d3e20323134353130.roa
File:                     326130613a363034343a376436303a3a2f34342d3434203d3e20323134353130.roa (raw, json)
Hash identifier:          y/xuVv7X6zYCJrPA+bDxsoe/LQIZz7CWdfVo8c7UFKw=
Subject key identifier:   E2:6E:2E:D8:30:FF:7F:1A:1E:B5:E3:3E:0F:D6:A6:8E:09:06:30:59
Certificate issuer:       /CN=627B387604DE44D6006F0E7567E2D07EE82CF6BD
Certificate serial:       2551CF45EB9F1E46C79AE458750449B8B607006B
Authority key identifier: 62:7B:38:76:04:DE:44:D6:00:6F:0E:75:67:E2:D0:7E:E8:2C:F6:BD
Authority info access:    rsync://krill.47272.net/repo/HYEHOST/5/627B387604DE44D6006F0E7567E2D07EE82CF6BD.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/2/326130613a363034343a376436303a3a2f34342d3434203d3e20323134353130.roa
Signing time:             Wed 11 Feb 2026 15:37:29 +0000
ROA not before:           Wed 11 Feb 2026 15:32:29 +0000
ROA not after:            Wed 10 Feb 2027 15:37:29 +0000
asID:                     214510
IP address blocks:        2a0a:6044:7d60::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/2/627B387604DE44D6006F0E7567E2D07EE82CF6BD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/2/627B387604DE44D6006F0E7567E2D07EE82CF6BD.mft
                          rsync://krill.47272.net/repo/HYEHOST/5/627B387604DE44D6006F0E7567E2D07EE82CF6BD.cer
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 23 Feb 2026 19:39:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:51:cf:45:eb:9f:1e:46:c7:9a:e4:58:75:04:49:b8:b6:07:00:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=627B387604DE44D6006F0E7567E2D07EE82CF6BD
        Validity
            Not Before: Feb 11 15:32:29 2026 GMT
            Not After : Feb 10 15:37:29 2027 GMT
        Subject: CN=E26E2ED830FF7F1A1EB5E33E0FD6A68E09063059
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:dc:8c:89:34:bd:e4:14:98:ec:44:44:55:f2:
                    4e:19:36:2f:8b:7e:16:7a:27:0e:6c:07:5c:bd:d9:
                    ef:87:9c:1d:3b:17:a1:5f:c0:fd:9c:01:f8:dc:ba:
                    2c:1a:cc:a5:55:70:76:26:fc:10:ca:16:37:7d:ad:
                    7e:84:4a:57:1f:e1:49:4c:3d:af:9b:18:6e:dd:db:
                    6c:69:79:9f:18:42:62:ea:3a:c0:b8:97:85:88:6f:
                    33:66:d4:5b:98:0d:64:41:80:58:17:06:28:78:d5:
                    1b:43:3d:ff:2a:2f:98:ff:2f:a2:60:2d:94:5c:4d:
                    23:10:9e:56:22:ac:b7:dd:74:4e:25:63:e8:7b:d6:
                    f8:4b:4b:d7:72:67:02:46:7d:02:29:13:b9:09:ed:
                    00:86:a7:25:a5:1e:60:4e:fb:a7:ad:4f:03:b8:f2:
                    7f:9e:75:c1:c6:eb:25:b7:24:45:72:02:aa:4c:a7:
                    18:4c:7f:23:9e:3b:58:d8:98:14:59:79:4a:69:63:
                    53:0e:41:31:6d:5c:a1:e7:fb:6d:02:2d:b9:36:b9:
                    d9:7c:1f:76:53:0a:68:5a:e7:4c:0b:5b:bb:f9:52:
                    01:a7:d3:9b:7f:ba:97:a4:83:42:c9:53:d4:b0:23:
                    81:97:bd:ff:bd:0a:76:0e:39:81:3a:dd:80:3a:af:
                    9a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:6E:2E:D8:30:FF:7F:1A:1E:B5:E3:3E:0F:D6:A6:8E:09:06:30:59
            X509v3 Authority Key Identifier:
                keyid:62:7B:38:76:04:DE:44:D6:00:6F:0E:75:67:E2:D0:7E:E8:2C:F6:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/2/627B387604DE44D6006F0E7567E2D07EE82CF6BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/627B387604DE44D6006F0E7567E2D07EE82CF6BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4bfa7a9f-28d3-45b0-a839-a57519ecaeae/2/326130613a363034343a376436303a3a2f34342d3434203d3e20323134353130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:7d60::/44

    Signature Algorithm: sha256WithRSAEncryption
         4f:e8:3b:93:1c:09:a1:9a:85:f2:7a:a8:04:9a:75:af:cb:3d:
         e9:f5:4e:09:79:1a:25:f7:ea:7e:c2:fc:6f:6a:0f:9e:5f:91:
         00:a4:6d:08:a6:e4:a9:26:4f:5f:e8:f9:ae:9a:5b:55:20:fb:
         86:1c:33:f2:4f:7c:01:00:ae:8e:9e:90:21:d3:cb:46:14:e5:
         70:4b:62:01:9d:94:0f:f3:ee:77:35:cf:dd:2d:72:b2:df:7d:
         e2:b3:b9:4a:12:b1:27:e8:de:d6:75:30:f0:47:74:c0:1b:cd:
         18:10:3a:bb:1f:e6:57:95:3f:1d:b1:de:8f:bd:e3:5a:87:87:
         67:52:e4:1a:ce:f5:49:ee:2a:f3:39:ff:7e:d3:5d:f3:44:ea:
         86:89:a2:44:04:bb:7c:69:2d:27:6e:e3:d7:66:f4:3c:b5:b0:
         b3:73:ef:40:1c:bb:dc:b0:c4:f9:e9:76:0f:65:2f:92:59:1c:
         25:36:4a:7a:d4:37:ff:f5:0c:37:d5:5b:ae:2d:3a:70:9a:02:
         58:62:2c:f1:23:5c:bd:a2:e2:1b:28:1c:b6:a5:52:a6:d2:f2:
         44:8f:37:eb:0c:cd:6d:5d:0c:79:c4:b5:65:c7:65:f0:91:15:
         a2:23:b5:15:be:e8:56:de:c2:6e:b4:c9:9b:ea:fe:10:3c:22:
         5d:03:94:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 08:48:42 2026 by rpki-client