Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/2/326130363a313238333a386237303a3a2f34342d313238203d3e20323030393132.roa
File:                     326130363a313238333a386237303a3a2f34342d313238203d3e20323030393132.roa (raw, json)
Hash identifier:          FUAjLoCoZ/b0He3NOr9THfgMiGHoPb8/GRsuJAJIdoc=
Subject key identifier:   8D:C0:66:B3:FC:1A:8D:4E:83:11:09:B8:6D:98:96:67:D1:B8:F3:AC
Certificate issuer:       /CN=B113B31E9F01A2F41870E8C77492B18EBA830E07
Certificate serial:       4F6E349610EF111960868A6A7F28F15AED9B57F4
Authority key identifier: B1:13:B3:1E:9F:01:A2:F4:18:70:E8:C7:74:92:B1:8E:BA:83:0E:07
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/B113B31E9F01A2F41870E8C77492B18EBA830E07.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/2/326130363a313238333a386237303a3a2f34342d313238203d3e20323030393132.roa
Signing time:             Wed 18 Feb 2026 19:52:27 +0000
ROA not before:           Wed 18 Feb 2026 19:47:27 +0000
ROA not after:            Wed 17 Feb 2027 19:52:27 +0000
asID:                     200912
IP address blocks:        2a06:1283:8b70::/44 maxlen: 128
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/2/B113B31E9F01A2F41870E8C77492B18EBA830E07.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/2/B113B31E9F01A2F41870E8C77492B18EBA830E07.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/B113B31E9F01A2F41870E8C77492B18EBA830E07.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 24 Feb 2026 05:49:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:6e:34:96:10:ef:11:19:60:86:8a:6a:7f:28:f1:5a:ed:9b:57:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B113B31E9F01A2F41870E8C77492B18EBA830E07
        Validity
            Not Before: Feb 18 19:47:27 2026 GMT
            Not After : Feb 17 19:52:27 2027 GMT
        Subject: CN=8DC066B3FC1A8D4E831109B86D989667D1B8F3AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:50:6e:7b:29:5e:f6:4f:da:2c:76:00:d9:90:
                    57:bb:04:de:1a:d7:a9:b9:a1:b2:d3:35:64:85:19:
                    26:3c:ae:41:52:88:47:c3:59:e2:a4:fd:5a:b4:67:
                    93:e6:c4:f0:00:72:3f:d5:2e:a5:81:8b:8f:b3:33:
                    60:fe:7d:9f:4f:60:9b:18:2d:45:6a:39:8c:9e:00:
                    39:34:25:68:b2:a6:ed:8b:e9:ac:57:47:91:f2:2d:
                    79:2c:af:f3:d9:d3:63:ac:19:51:b3:77:23:7c:17:
                    63:35:85:a4:d6:81:47:67:ff:78:fc:bd:ec:db:9d:
                    fe:bf:88:22:09:4e:2b:8d:09:8e:46:49:ce:fa:74:
                    ef:86:2b:2d:97:1e:5b:67:8a:a6:3f:31:b6:de:aa:
                    dd:0a:91:77:0d:00:69:6f:12:66:d6:71:6e:c2:b7:
                    3a:0f:cb:b3:5a:cc:ba:07:49:95:42:e8:d1:57:04:
                    b9:e6:36:ee:de:68:c4:ed:06:45:a9:e6:7f:65:e8:
                    c3:ff:6b:fc:69:00:68:1b:1b:2d:73:38:97:44:aa:
                    60:23:e1:23:0a:f9:c0:27:ac:59:b8:ca:e3:53:dc:
                    cf:d3:3d:ea:d7:9d:5f:77:a4:32:b2:f9:46:9b:25:
                    9b:e1:d3:84:87:be:bc:d6:22:9b:32:b6:a5:d0:22:
                    e1:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:C0:66:B3:FC:1A:8D:4E:83:11:09:B8:6D:98:96:67:D1:B8:F3:AC
            X509v3 Authority Key Identifier:
                keyid:B1:13:B3:1E:9F:01:A2:F4:18:70:E8:C7:74:92:B1:8E:BA:83:0E:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/2/B113B31E9F01A2F41870E8C77492B18EBA830E07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/B113B31E9F01A2F41870E8C77492B18EBA830E07.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/2/326130363a313238333a386237303a3a2f34342d313238203d3e20323030393132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1283:8b70::/44

    Signature Algorithm: sha256WithRSAEncryption
         34:e2:7f:0b:23:69:39:39:48:fa:bc:d7:1f:80:65:38:5d:13:
         b9:3a:f5:ca:0c:b6:58:7a:04:ab:c9:0b:e7:41:84:88:c0:12:
         9a:6a:ac:52:bb:95:79:ae:0c:5e:90:ef:22:70:ba:b4:00:e3:
         42:0a:2e:1c:9f:87:5e:c4:a8:aa:87:dc:84:f3:de:9c:38:cf:
         ef:df:a2:e4:c4:3a:01:ae:07:74:da:7f:c0:9e:a4:9a:5c:ba:
         42:65:a5:32:0b:94:27:ca:2f:b2:a4:04:8f:b8:5e:f1:90:90:
         0c:b3:bb:cc:b7:74:28:50:7d:3f:4c:bf:5a:f3:76:f5:e6:01:
         3f:ad:0f:53:ec:01:6a:0e:65:a5:71:af:14:36:a9:b2:88:0f:
         d7:0e:0e:7e:40:b6:34:06:1d:18:ae:e8:cf:2a:b1:c7:43:a9:
         37:a2:b5:1c:73:7b:fc:05:7c:3f:3b:d3:04:d7:bc:18:5a:9e:
         39:00:47:fc:12:45:6e:bc:f3:5f:64:72:5b:9a:90:c9:16:22:
         46:e1:af:14:d4:81:be:24:80:2b:c5:a4:fa:10:08:7d:fa:2f:
         68:6c:71:05:f2:65:d5:b2:47:e1:60:89:5e:07:6e:5e:03:e4:
         5a:53:58:f4:e6:f0:38:6b:21:ca:f0:07:49:c6:37:ae:c2:7b:
         70:b9:c5:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 14:35:41 2026 by rpki-client