Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/326130353a646663313a383236303a3a2f34342d3438203d3e203331383938.roa
File:                     326130353a646663313a383236303a3a2f34342d3438203d3e203331383938.roa (raw, json)
Hash identifier:          0vTIJjguwD6ZK/UD8aNqhNS77f9gmxngYOuYo0s0sec=
Subject key identifier:   06:8F:CD:93:01:17:57:16:EE:BD:E0:7D:86:AF:98:38:9B:72:6B:BA
Certificate issuer:       /CN=B729F0C7BF295C6844FD328B324A1ED8598032F9
Certificate serial:       0C6D6128084186987EEDD627DA4FC0EB3F7EFD74
Authority key identifier: B7:29:F0:C7:BF:29:5C:68:44:FD:32:8B:32:4A:1E:D8:59:80:32:F9
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B729F0C7BF295C6844FD328B324A1ED8598032F9.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/326130353a646663313a383236303a3a2f34342d3438203d3e203331383938.roa
Signing time:             Fri 05 Jun 2026 19:42:17 +0000
ROA not before:           Fri 05 Jun 2026 19:37:17 +0000
ROA not after:            Fri 04 Jun 2027 19:42:17 +0000
asID:                     31898
IP address blocks:        2a05:dfc1:8260::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B729F0C7BF295C6844FD328B324A1ED8598032F9.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Jun 2026 22:39:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:6d:61:28:08:41:86:98:7e:ed:d6:27:da:4f:c0:eb:3f:7e:fd:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B729F0C7BF295C6844FD328B324A1ED8598032F9
        Validity
            Not Before: Jun  5 19:37:17 2026 GMT
            Not After : Jun  4 19:42:17 2027 GMT
        Subject: CN=068FCD9301175716EEBDE07D86AF98389B726BBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b9:24:d2:81:92:d4:34:5c:7b:d0:af:0c:7a:
                    b3:a7:25:fc:f9:b6:87:f5:ea:12:aa:0c:63:06:79:
                    6d:39:09:68:c8:8d:cd:27:e4:bf:4a:34:e3:e9:8a:
                    37:85:f4:e9:ef:6f:c9:d0:ea:df:44:ca:1e:ec:62:
                    8e:d3:7d:7e:93:06:c2:25:22:a3:a8:3c:70:49:7d:
                    f0:93:af:71:15:ab:a2:1b:5c:9e:72:44:e4:b1:d1:
                    a8:1b:9b:d3:40:68:7f:ea:06:77:54:09:45:49:b6:
                    85:ec:b2:1c:ec:68:a7:63:1f:ac:97:4e:e2:ab:03:
                    1e:42:7a:15:f1:d3:be:2f:85:ef:f2:68:0a:f8:6c:
                    dd:49:f0:4a:e5:f3:24:06:97:9b:01:ef:21:1c:5c:
                    55:bc:db:b4:c2:9a:3b:97:2e:51:a2:7f:2e:42:ca:
                    79:58:9f:d8:04:1c:a4:ff:ba:53:48:29:7b:4b:f1:
                    42:f2:38:b4:d8:3f:1b:71:60:be:46:51:45:f8:ac:
                    09:2b:d5:7e:cd:6f:34:04:2a:d8:15:c4:92:39:19:
                    de:5f:94:e6:7a:64:0f:2d:6e:93:a5:07:27:8a:9d:
                    74:04:71:43:97:6e:7c:a0:a8:9e:64:6e:82:ed:f6:
                    d1:9b:11:8c:87:8d:50:27:20:c5:29:5e:ba:a1:f9:
                    08:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:8F:CD:93:01:17:57:16:EE:BD:E0:7D:86:AF:98:38:9B:72:6B:BA
            X509v3 Authority Key Identifier:
                keyid:B7:29:F0:C7:BF:29:5C:68:44:FD:32:8B:32:4A:1E:D8:59:80:32:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/B729F0C7BF295C6844FD328B324A1ED8598032F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B729F0C7BF295C6844FD328B324A1ED8598032F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/3/326130353a646663313a383236303a3a2f34342d3438203d3e203331383938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:8260::/44

    Signature Algorithm: sha256WithRSAEncryption
         d0:6b:60:3a:ae:2c:67:44:3e:89:86:00:ef:9f:dc:b3:c3:cb:
         22:27:c4:d0:f7:98:1f:eb:58:e1:cb:fb:9e:11:f2:65:dd:4d:
         e9:04:44:45:6a:06:48:33:25:e7:d8:d0:f9:53:38:09:4b:cf:
         02:5e:3c:5a:30:a5:50:1c:c8:b8:1c:dd:52:55:24:42:af:8a:
         c6:a6:d3:51:33:d3:52:2a:fe:49:a0:44:d4:ec:d4:d8:e9:e1:
         6c:f6:ab:02:60:12:99:98:19:20:57:8f:59:17:74:08:18:9e:
         4c:09:20:ac:21:68:7a:f3:65:f4:f0:d3:69:c4:a3:83:93:cc:
         b8:8e:0f:4e:e5:c5:16:6a:2b:ee:11:f9:37:82:30:e4:00:89:
         cc:53:ca:a9:d0:e1:0c:90:73:a1:04:d3:af:22:27:01:d7:35:
         dd:9e:f9:30:30:1e:c4:dc:74:7a:3d:cf:fd:1f:c4:48:51:be:
         72:fa:aa:9c:bc:6e:77:6c:2f:d7:7d:bc:62:1a:0f:11:bf:6c:
         b8:c1:2e:47:ee:d4:1a:df:46:20:73:d0:82:28:ff:e9:65:7d:
         de:d0:a6:86:dc:de:f3:d5:ed:61:4d:4f:98:8c:6f:b6:41:21:
         ba:33:30:9c:6f:1a:a6:f4:b5:cf:fe:8e:b4:a9:14:b7:8e:ba:
         ee:5c:cf:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 11:15:58 2026 by rpki-client