Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/2/326130363a313238333a386239303a3a2f34342d313238203d3e20323030393132.roa
File:                     326130363a313238333a386239303a3a2f34342d313238203d3e20323030393132.roa (raw, json)
Hash identifier:          S4KhVhEIes5A4Ij98yCbHXEBwuhcaITKYjb0LtqaV+0=
Subject key identifier:   81:5C:1F:34:0F:5A:77:E8:15:B9:38:04:DF:B6:39:49:CF:00:C4:DE
Certificate issuer:       /CN=B113B31E9F01A2F41870E8C77492B18EBA830E07
Certificate serial:       0182BDF9F4679A1308010BBABFAF4108EB432F47
Authority key identifier: B1:13:B3:1E:9F:01:A2:F4:18:70:E8:C7:74:92:B1:8E:BA:83:0E:07
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/B113B31E9F01A2F41870E8C77492B18EBA830E07.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/2/326130363a313238333a386239303a3a2f34342d313238203d3e20323030393132.roa
Signing time:             Wed 18 Feb 2026 19:52:54 +0000
ROA not before:           Wed 18 Feb 2026 19:47:54 +0000
ROA not after:            Wed 17 Feb 2027 19:52:54 +0000
asID:                     200912
IP address blocks:        2a06:1283:8b90::/44 maxlen: 128
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/2/B113B31E9F01A2F41870E8C77492B18EBA830E07.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/2/B113B31E9F01A2F41870E8C77492B18EBA830E07.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/B113B31E9F01A2F41870E8C77492B18EBA830E07.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 24 Feb 2026 05:49:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:bd:f9:f4:67:9a:13:08:01:0b:ba:bf:af:41:08:eb:43:2f:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B113B31E9F01A2F41870E8C77492B18EBA830E07
        Validity
            Not Before: Feb 18 19:47:54 2026 GMT
            Not After : Feb 17 19:52:54 2027 GMT
        Subject: CN=815C1F340F5A77E815B93804DFB63949CF00C4DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:70:c0:87:49:7f:1b:a6:a8:cf:53:85:29:ab:
                    c4:fd:66:4c:9b:63:e0:a8:54:52:93:c5:a1:6d:5a:
                    4d:3c:a2:d6:a7:96:9d:02:1b:c0:3a:ca:3a:99:31:
                    a2:6d:2d:ef:c7:69:25:9a:fd:5b:8b:4a:f0:f7:45:
                    6c:4e:f4:d4:c6:e8:0e:03:94:f9:a8:52:37:20:a0:
                    aa:93:84:89:3c:02:49:33:5d:3e:4a:c3:54:95:95:
                    7a:77:1c:77:92:81:60:20:36:39:17:df:4a:7d:bc:
                    6d:d7:5c:18:70:fd:03:9f:f9:80:7a:9d:17:60:ca:
                    e3:17:9a:ff:38:bd:cf:31:c7:68:6e:a8:8a:ef:d3:
                    78:2d:e3:96:29:d1:a4:49:95:d7:da:00:53:f1:2f:
                    b4:5e:9d:ad:f4:1b:af:05:47:e8:b9:ac:fc:66:cc:
                    9e:3d:74:b8:c1:16:dd:4e:81:3f:2e:0c:58:a1:19:
                    48:f6:55:9c:9a:d1:a6:6b:8d:0d:a9:63:49:b7:b7:
                    ea:d9:ba:f0:3e:13:e1:6d:03:c5:6a:bd:1a:b7:d5:
                    a8:5a:16:40:3a:af:1a:82:09:6e:7e:a3:5c:7e:d3:
                    3b:0e:47:30:22:cc:9e:b0:99:5e:15:53:b3:ea:0b:
                    54:db:71:0b:14:43:06:6a:cc:f7:5f:47:1e:8b:ad:
                    f7:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:5C:1F:34:0F:5A:77:E8:15:B9:38:04:DF:B6:39:49:CF:00:C4:DE
            X509v3 Authority Key Identifier:
                keyid:B1:13:B3:1E:9F:01:A2:F4:18:70:E8:C7:74:92:B1:8E:BA:83:0E:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/2/B113B31E9F01A2F41870E8C77492B18EBA830E07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/B113B31E9F01A2F41870E8C77492B18EBA830E07.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/2/326130363a313238333a386239303a3a2f34342d313238203d3e20323030393132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1283:8b90::/44

    Signature Algorithm: sha256WithRSAEncryption
         11:ac:18:0b:ba:f9:b9:89:2b:a2:19:cb:19:48:c5:48:70:d5:
         e8:b5:a1:71:5f:72:9b:bb:d0:bf:db:80:12:ec:13:fd:e8:6b:
         d1:bf:5a:55:68:e7:f1:1b:b3:a2:1f:8c:18:d8:b0:9b:7f:1f:
         fb:7d:eb:5c:22:50:3b:21:c7:39:a5:f9:c0:0d:bc:e5:e9:61:
         24:ea:41:ad:2f:f7:a1:ca:0b:7f:12:af:24:21:1f:7b:dc:01:
         ec:8a:0c:6f:4a:a6:8d:76:19:29:61:2f:ad:3a:c7:6c:94:27:
         f1:02:a4:fc:28:8f:13:9c:0f:f3:d5:cb:47:28:87:36:39:14:
         0d:08:ba:33:52:1a:cc:d2:4f:16:6d:a9:de:d9:0b:dc:17:ce:
         9f:1d:d8:d4:af:3f:1a:c1:8a:3d:76:3d:b7:9b:dc:39:66:d3:
         56:7c:72:98:09:60:79:5e:df:ed:54:95:b1:c8:79:bc:af:55:
         46:35:21:58:31:4f:79:a2:9f:a0:0d:f4:6d:08:2a:6a:a0:0f:
         d2:e2:bf:df:f7:c3:2e:d3:ef:01:57:be:2f:14:ac:e3:2f:f5:
         95:73:c6:72:c4:4a:49:f5:2d:c0:64:44:cd:3d:b1:5c:65:72:
         f5:d8:c6:43:a2:67:75:af:40:40:72:3c:de:35:cd:8c:4d:26:
         e2:79:25:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 14:35:40 2026 by rpki-client