Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/2/326130363a313238333a386238303a3a2f34342d313238203d3e20323030393132.roa
File:                     326130363a313238333a386238303a3a2f34342d313238203d3e20323030393132.roa (raw, json)
Hash identifier:          3Vi/YfcX+imvnb5iXoo93d98O+CbsYM4R18AXb1mGYo=
Subject key identifier:   52:D4:99:05:BD:0F:75:78:F1:1A:21:AB:72:5B:D0:59:0E:0F:84:B1
Certificate issuer:       /CN=B113B31E9F01A2F41870E8C77492B18EBA830E07
Certificate serial:       566E2F3FE24C1D4EC0514ADF8528F853F9924A38
Authority key identifier: B1:13:B3:1E:9F:01:A2:F4:18:70:E8:C7:74:92:B1:8E:BA:83:0E:07
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/B113B31E9F01A2F41870E8C77492B18EBA830E07.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/2/326130363a313238333a386238303a3a2f34342d313238203d3e20323030393132.roa
Signing time:             Wed 18 Feb 2026 19:52:37 +0000
ROA not before:           Wed 18 Feb 2026 19:47:37 +0000
ROA not after:            Wed 17 Feb 2027 19:52:37 +0000
asID:                     200912
IP address blocks:        2a06:1283:8b80::/44 maxlen: 128
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/2/B113B31E9F01A2F41870E8C77492B18EBA830E07.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/2/B113B31E9F01A2F41870E8C77492B18EBA830E07.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/B113B31E9F01A2F41870E8C77492B18EBA830E07.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 24 Feb 2026 05:49:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:6e:2f:3f:e2:4c:1d:4e:c0:51:4a:df:85:28:f8:53:f9:92:4a:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B113B31E9F01A2F41870E8C77492B18EBA830E07
        Validity
            Not Before: Feb 18 19:47:37 2026 GMT
            Not After : Feb 17 19:52:37 2027 GMT
        Subject: CN=52D49905BD0F7578F11A21AB725BD0590E0F84B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:58:c4:2f:d8:b1:c5:62:2a:11:3a:dc:e6:37:
                    4a:e1:06:61:2d:4e:91:75:f5:10:68:c0:da:1e:a7:
                    82:8a:77:2e:2e:ee:c0:91:ea:e8:f3:11:e8:d5:70:
                    c5:e1:63:17:11:4c:69:1d:6c:7c:fe:12:a3:2e:67:
                    c2:2f:c6:60:2f:2f:cd:53:5c:7f:05:ad:aa:c1:e8:
                    3e:e1:5a:67:c1:9c:29:bb:fc:a3:ae:5d:26:42:90:
                    79:9a:a2:fa:7b:c6:44:05:35:14:27:8b:17:93:10:
                    5c:05:3a:3f:1e:17:e0:e9:14:56:50:35:46:74:1e:
                    d5:7c:fb:7f:f3:82:52:a1:6b:c1:06:b0:c3:a1:ff:
                    03:29:ee:43:a3:51:08:d1:6b:52:63:39:33:93:b9:
                    5d:d8:5f:7f:5d:5b:4f:80:86:13:13:8c:4c:58:02:
                    ef:11:61:c7:af:46:2c:02:8b:d6:fc:59:a9:83:97:
                    dd:b8:77:71:38:e2:57:38:f9:ea:72:1f:9f:41:ce:
                    d6:9c:f4:00:59:0d:8e:bb:fb:9d:ef:70:2c:17:8d:
                    bd:df:2a:eb:ff:43:be:c8:62:a7:62:53:f1:46:fd:
                    92:d0:42:c7:aa:1c:cb:24:8e:9e:f1:ad:78:15:bc:
                    91:f4:45:5c:af:c5:0a:56:a0:72:1b:71:8b:b8:3a:
                    93:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:D4:99:05:BD:0F:75:78:F1:1A:21:AB:72:5B:D0:59:0E:0F:84:B1
            X509v3 Authority Key Identifier:
                keyid:B1:13:B3:1E:9F:01:A2:F4:18:70:E8:C7:74:92:B1:8E:BA:83:0E:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/2/B113B31E9F01A2F41870E8C77492B18EBA830E07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/B113B31E9F01A2F41870E8C77492B18EBA830E07.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/2/326130363a313238333a386238303a3a2f34342d313238203d3e20323030393132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1283:8b80::/44

    Signature Algorithm: sha256WithRSAEncryption
         06:78:21:a6:71:da:4e:cb:49:4f:ba:c8:a2:53:46:10:f6:73:
         ad:51:e9:18:e0:e8:36:78:73:88:ff:d1:b1:fd:63:f9:36:ab:
         a5:e5:40:a6:3e:14:35:5b:b2:8a:b6:12:12:62:b2:0b:4f:d4:
         64:b7:5e:f0:51:85:76:db:80:89:08:ce:c4:b3:8e:fa:66:fb:
         fa:6f:0f:f6:65:4c:42:be:5d:02:57:81:cc:23:2c:71:e7:b3:
         a2:cb:2a:89:70:cf:e1:5b:da:d7:59:f2:80:a6:4b:3b:b8:cd:
         b4:33:18:5b:96:d6:20:fc:07:4d:07:05:8b:11:a7:bd:e7:60:
         26:13:2d:2d:2a:08:3f:37:d6:71:2c:e5:1b:dc:5d:04:1c:bb:
         99:0c:31:bf:b1:ad:76:72:95:f7:d6:19:26:4e:0f:15:32:71:
         6a:f8:fb:a3:b9:fb:5e:cc:71:fb:2c:93:d0:50:46:c2:42:a7:
         11:35:02:86:73:7d:50:e1:3a:8b:17:8c:2c:0e:40:38:c5:1a:
         8c:38:bd:e1:e9:7d:08:3a:6f:00:1a:fb:6b:71:d4:d1:35:26:
         dc:fa:cc:0e:f0:6c:1e:74:68:bb:3a:48:be:ea:de:6e:03:31:
         47:7c:f4:61:29:6c:ad:e4:2b:05:50:e3:e7:1f:1b:7d:29:7a:
         dc:09:e9:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 14:35:40 2026 by rpki-client