Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/326130353a646663313a383230303a3a2f34302d3438203d3e20323136343532.roa
File:                     326130353a646663313a383230303a3a2f34302d3438203d3e20323136343532.roa (raw, json)
Hash identifier:          YjEWO425Fp9BmEsaR7rNNKxgXNYuMwOnITmnIsrwlT4=
Subject key identifier:   99:1A:7D:A0:FB:B1:9D:8C:AC:8B:D5:1F:38:2E:B2:0C:96:BC:05:18
Certificate issuer:       /CN=B729F0C7BF295C6844FD328B324A1ED8598032F9
Certificate serial:       01BFC10B41C595E22E8862D1AF252F3AB60542BE
Authority key identifier: B7:29:F0:C7:BF:29:5C:68:44:FD:32:8B:32:4A:1E:D8:59:80:32:F9
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B729F0C7BF295C6844FD328B324A1ED8598032F9.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/326130353a646663313a383230303a3a2f34302d3438203d3e20323136343532.roa
Signing time:             Fri 05 Jun 2026 19:42:17 +0000
ROA not before:           Fri 05 Jun 2026 19:37:17 +0000
ROA not after:            Fri 04 Jun 2027 19:42:17 +0000
asID:                     216452
IP address blocks:        2a05:dfc1:8200::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B729F0C7BF295C6844FD328B324A1ED8598032F9.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Jun 2026 22:39:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:bf:c1:0b:41:c5:95:e2:2e:88:62:d1:af:25:2f:3a:b6:05:42:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B729F0C7BF295C6844FD328B324A1ED8598032F9
        Validity
            Not Before: Jun  5 19:37:17 2026 GMT
            Not After : Jun  4 19:42:17 2027 GMT
        Subject: CN=991A7DA0FBB19D8CAC8BD51F382EB20C96BC0518
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e3:61:df:6d:93:8a:dd:6e:7e:13:c9:d9:2c:
                    3e:71:bf:24:8b:5c:1b:5d:2d:38:f4:ca:34:88:af:
                    55:42:06:74:43:ec:31:02:ab:23:e1:cd:72:cd:ba:
                    a3:bd:21:97:3d:98:74:5e:68:fc:71:e4:8c:ef:a2:
                    28:a8:92:ed:00:4d:8c:f5:8b:47:3f:18:b6:b9:09:
                    99:18:2a:19:91:0d:d1:9d:02:13:13:b3:4a:fd:80:
                    77:42:f6:8f:a1:92:51:4f:2c:13:96:24:4a:f4:44:
                    25:69:fe:c3:1d:eb:35:7f:82:0d:07:4d:a7:fc:4e:
                    7c:6a:d4:e0:8b:23:78:ca:4c:ac:e8:1d:6f:ec:51:
                    f7:47:1f:7d:52:f6:e0:22:bd:8d:e3:e5:4a:cc:0f:
                    7e:f4:9f:1f:fb:ca:92:0c:fb:94:bc:71:58:04:b4:
                    4c:d4:d4:3c:b6:fc:17:1e:6d:17:d1:45:ef:a0:e8:
                    d4:04:11:ec:66:2a:a0:1d:a9:45:7e:cb:43:6c:68:
                    2b:0f:54:e9:51:80:57:79:95:de:1f:7c:57:75:10:
                    dc:37:82:2f:2c:40:55:86:c0:f6:82:fd:54:dc:4a:
                    12:86:df:1e:ed:f8:02:76:78:a8:d0:3d:ce:63:17:
                    56:3c:08:39:58:c5:87:cd:fc:ad:72:ff:96:65:4e:
                    8f:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:1A:7D:A0:FB:B1:9D:8C:AC:8B:D5:1F:38:2E:B2:0C:96:BC:05:18
            X509v3 Authority Key Identifier:
                keyid:B7:29:F0:C7:BF:29:5C:68:44:FD:32:8B:32:4A:1E:D8:59:80:32:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B729F0C7BF295C6844FD328B324A1ED8598032F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/326130353a646663313a383230303a3a2f34302d3438203d3e20323136343532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:8200::/40

    Signature Algorithm: sha256WithRSAEncryption
         76:b0:6c:ca:62:f4:9b:59:ba:ef:4b:0b:8c:8d:65:f8:08:91:
         80:1a:c1:86:9e:ac:ae:4a:41:00:15:9d:07:7a:4b:44:22:49:
         c7:0f:f4:ff:c2:63:54:cf:1c:82:e8:c2:f9:a5:4a:63:23:50:
         ea:03:3d:94:45:ba:52:d7:d5:84:b1:52:fe:f9:b5:4c:c9:50:
         33:1d:b6:a8:7a:c3:78:d7:7f:84:51:d3:58:db:8a:2f:a9:56:
         44:3f:14:c8:61:8f:7a:07:87:78:c9:be:4a:ff:30:18:ce:51:
         3f:ff:70:12:e6:6d:f9:93:26:79:f0:d4:cc:ec:4f:01:79:bd:
         d9:10:73:34:95:05:30:9e:d4:74:70:77:59:0b:c7:25:16:c4:
         bd:e5:3e:6e:8a:5d:79:78:22:f2:0f:4a:c3:be:99:b1:f5:36:
         ba:00:44:d3:21:c3:c9:db:27:42:d2:33:e9:25:cc:11:ce:e4:
         5e:82:f2:4b:1d:9f:97:7d:f6:d5:dc:c4:48:82:45:bd:8a:17:
         1c:b7:9a:67:57:48:7a:b4:b9:2e:72:43:7d:b7:bb:32:88:fd:
         37:f6:bf:75:7a:82:30:ff:d3:d1:77:34:ca:cd:3b:da:9c:8a:
         20:1e:67:b5:00:17:9e:46:ea:29:1a:35:9c:99:a5:9f:20:6a:
         8a:07:8b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:32:48 2026 by rpki-client