Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/326131343a373538303a3538303a3a2f34322d313238203d3e20323031313539.roa
File:                     326131343a373538303a3538303a3a2f34322d313238203d3e20323031313539.roa (raw, json)
Hash identifier:          grtkVLSeBmK4RqaDolkiQDYEwz7NMtPUQB+CaYiZS8U=
Subject key identifier:   CF:E0:47:DA:C8:E4:D1:25:69:34:FA:36:8B:79:4A:FD:C4:72:A1:2B
Certificate issuer:       /CN=51917E722DB03952D9056BED2F6BD4BF98B78976
Certificate serial:       69186FD1A3DB2FEA97CD5676EE483F3CF168A986
Authority key identifier: 51:91:7E:72:2D:B0:39:52:D9:05:6B:ED:2F:6B:D4:BF:98:B7:89:76
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/326131343a373538303a3538303a3a2f34322d313238203d3e20323031313539.roa
Signing time:             Mon 16 Feb 2026 12:50:30 +0000
ROA not before:           Mon 16 Feb 2026 12:45:30 +0000
ROA not after:            Mon 15 Feb 2027 12:50:30 +0000
asID:                     201159
IP address blocks:        2a14:7580:580::/42 maxlen: 128
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Feb 2026 20:53:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:18:6f:d1:a3:db:2f:ea:97:cd:56:76:ee:48:3f:3c:f1:68:a9:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51917E722DB03952D9056BED2F6BD4BF98B78976
        Validity
            Not Before: Feb 16 12:45:30 2026 GMT
            Not After : Feb 15 12:50:30 2027 GMT
        Subject: CN=CFE047DAC8E4D1256934FA368B794AFDC472A12B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9f:73:84:65:b0:c8:92:8e:07:6a:20:32:d1:
                    82:e3:67:f8:e4:e8:af:65:3e:26:3d:cd:77:0e:2b:
                    44:88:e6:c0:28:b5:49:3e:4b:46:8b:4f:16:74:e6:
                    ae:db:78:b9:d6:8b:13:97:40:8f:ff:af:e1:73:6f:
                    cb:a2:1c:0a:a5:11:c9:30:8c:42:9d:4f:45:5b:51:
                    b8:72:02:25:b6:f7:da:6f:52:83:9b:16:22:65:94:
                    82:c0:a4:9e:38:49:2b:d3:43:5a:46:97:d4:64:21:
                    d1:e8:64:c8:a8:2d:52:39:17:18:40:d2:6a:5f:95:
                    05:d4:d7:da:6c:10:3b:a8:3e:84:9c:2b:6e:7d:e4:
                    a9:88:76:62:44:f9:80:08:a6:cb:76:51:db:03:53:
                    75:a6:e3:d9:74:26:97:15:2b:d3:cc:19:b3:d1:a8:
                    47:0e:ed:ce:ca:68:8c:ce:ef:2a:c1:35:b7:10:ca:
                    73:8e:41:00:78:09:fe:15:44:f6:53:9a:d8:c3:d6:
                    f3:2f:90:47:b8:ab:ff:e5:9b:af:4a:46:f3:32:0b:
                    5b:c0:f2:59:1d:88:11:77:46:f6:79:12:8d:bf:78:
                    de:ee:c2:72:28:9d:4b:02:80:33:f2:2c:28:9c:d7:
                    7c:a6:cb:14:d2:73:e4:65:90:9d:db:41:e5:ac:cd:
                    51:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:E0:47:DA:C8:E4:D1:25:69:34:FA:36:8B:79:4A:FD:C4:72:A1:2B
            X509v3 Authority Key Identifier:
                keyid:51:91:7E:72:2D:B0:39:52:D9:05:6B:ED:2F:6B:D4:BF:98:B7:89:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/326131343a373538303a3538303a3a2f34322d313238203d3e20323031313539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7580:580::/42

    Signature Algorithm: sha256WithRSAEncryption
         7c:2f:81:0c:b1:bd:88:40:d3:c4:2b:81:58:50:1a:b4:b7:60:
         6e:3e:11:ef:ab:d7:81:1c:74:eb:d7:48:6d:d8:7a:a4:c9:b3:
         6f:a2:0b:14:7e:e4:4b:f3:fa:48:fa:fd:83:0a:2a:e0:c3:58:
         39:03:d3:95:44:66:a1:7d:09:9e:7e:c7:6d:6a:f1:3d:7a:72:
         34:85:f4:84:a8:5f:fc:ff:04:11:59:93:16:26:3c:52:52:da:
         6d:4f:41:28:9b:05:9d:94:45:8a:2a:3b:bf:57:79:ac:a0:c4:
         b1:81:f2:6b:3f:92:6c:49:fb:22:fb:5b:b5:13:28:a5:05:c3:
         4c:0e:fb:4b:3c:c2:64:a8:38:a2:6c:ef:3d:3b:ba:98:c7:22:
         52:b7:b7:e6:15:48:bb:b1:15:c9:a7:e6:ba:70:9e:b3:5b:40:
         a8:22:f6:06:ee:c4:59:dc:84:e7:1c:f6:28:67:47:0f:ff:ea:
         2a:0f:3f:42:43:ae:cb:d0:ae:86:fe:9f:20:d7:7e:58:e9:f2:
         38:d3:94:2b:cd:48:7c:fd:8e:6d:1f:38:9d:b5:2a:0d:c8:29:
         61:18:37:05:ea:31:71:fb:03:8d:03:bc:37:1b:43:ea:87:81:
         24:01:b4:a0:b0:0d:4a:3c:77:d3:71:32:ac:eb:b8:ef:33:31:
         ad:22:e5:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 06:28:31 2026 by rpki-client