Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/326131343a373538303a666635333a313a3a312f3132382d313238203d3e20323039373130.roa
File:                     326131343a373538303a666635333a313a3a312f3132382d313238203d3e20323039373130.roa (raw, json)
Hash identifier:          M7rZCqmSRhQoNy6yATbGh4kFes8iBdv2nAkz7V8AE98=
Subject key identifier:   3B:6C:78:81:2C:00:A9:81:BA:2D:67:86:8B:08:5A:32:D2:A9:6C:DF
Certificate issuer:       /CN=51917E722DB03952D9056BED2F6BD4BF98B78976
Certificate serial:       01DF5B3AACB6C72239BE0E3824235B394CCAB91A
Authority key identifier: 51:91:7E:72:2D:B0:39:52:D9:05:6B:ED:2F:6B:D4:BF:98:B7:89:76
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/326131343a373538303a666635333a313a3a312f3132382d313238203d3e20323039373130.roa
Signing time:             Fri 20 Feb 2026 01:15:57 +0000
ROA not before:           Fri 20 Feb 2026 01:10:57 +0000
ROA not after:            Fri 19 Feb 2027 01:15:57 +0000
asID:                     209710
IP address blocks:        2a14:7580:ff53:1::1/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Feb 2026 20:53:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:df:5b:3a:ac:b6:c7:22:39:be:0e:38:24:23:5b:39:4c:ca:b9:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51917E722DB03952D9056BED2F6BD4BF98B78976
        Validity
            Not Before: Feb 20 01:10:57 2026 GMT
            Not After : Feb 19 01:15:57 2027 GMT
        Subject: CN=3B6C78812C00A981BA2D67868B085A32D2A96CDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:34:13:a7:b2:8f:c9:94:25:68:e8:63:46:39:
                    63:40:6c:ab:a1:40:fc:28:d6:ed:54:27:0e:1a:68:
                    60:32:82:7f:1d:70:20:7e:32:d4:23:d5:e3:30:7f:
                    09:fa:a6:d6:f0:7b:70:b6:95:b9:ec:39:a2:18:68:
                    e1:42:00:7c:06:32:ed:92:7f:ca:b1:ec:ad:96:37:
                    06:df:2a:7f:12:c9:ad:f5:8f:db:07:3f:fa:ef:fe:
                    7f:08:2c:19:13:48:ba:d7:b7:a7:7a:6c:e2:f9:7f:
                    49:c2:ed:d1:ea:4a:b0:88:c8:ee:58:f7:ff:35:86:
                    b0:59:59:5a:e0:43:b1:25:48:e8:3f:9f:9b:2c:cf:
                    b6:5a:41:84:d6:b0:fd:53:73:2f:2d:ff:65:0a:42:
                    f6:aa:da:58:48:76:d8:49:8e:2d:ff:e0:69:5c:c7:
                    21:02:7c:f5:7c:c5:38:c6:c5:3f:f0:db:56:91:40:
                    5b:06:d0:1b:3d:34:52:27:3c:20:1e:9b:6d:45:fb:
                    7c:09:7e:78:e4:34:6d:a7:96:a6:48:8a:d3:2b:af:
                    ee:23:b7:eb:c5:91:5b:41:09:28:69:e7:6d:c1:cd:
                    dd:b6:7b:a8:89:a0:96:c1:aa:33:29:4b:e3:27:76:
                    99:4f:2d:ea:a5:d5:f0:4a:d6:0b:35:dd:1a:15:3d:
                    87:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:6C:78:81:2C:00:A9:81:BA:2D:67:86:8B:08:5A:32:D2:A9:6C:DF
            X509v3 Authority Key Identifier:
                keyid:51:91:7E:72:2D:B0:39:52:D9:05:6B:ED:2F:6B:D4:BF:98:B7:89:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/326131343a373538303a666635333a313a3a312f3132382d313238203d3e20323039373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7580:ff53:1:0:0:0:1/128

    Signature Algorithm: sha256WithRSAEncryption
         46:0e:be:9e:76:ec:e0:a5:41:35:95:bc:18:31:15:07:15:4b:
         10:8f:f3:c3:55:a3:81:51:52:b8:20:b4:d0:42:63:02:f0:d2:
         18:bf:80:01:5e:1a:35:5f:d8:72:f8:18:71:fb:de:ea:f0:d3:
         a1:0d:29:75:e9:36:8d:58:5d:c5:3f:aa:21:8c:10:42:f2:83:
         a2:20:4b:97:ad:c8:1a:33:54:57:d0:80:fc:54:1c:79:0d:a4:
         76:28:da:1b:08:f8:ca:31:3c:66:64:ca:9d:ee:aa:98:4c:fa:
         d2:4f:f9:e1:9c:f4:0e:08:3e:8c:18:ca:a0:b7:8f:c7:c6:3e:
         0c:8e:2d:1c:a4:0d:af:0c:bd:fc:30:a3:3d:88:68:ba:99:f4:
         77:ee:38:df:c4:7c:66:d4:3d:ea:73:21:f1:c5:98:e8:de:a9:
         88:19:02:f7:11:c1:f2:49:90:18:6e:4a:c8:d2:cd:21:e2:c1:
         7d:6a:11:30:62:f1:39:d9:01:f2:eb:31:60:be:af:89:ba:65:
         1b:0b:94:90:c1:a0:11:8e:90:25:08:d3:41:b8:b5:7a:db:f1:
         37:10:3f:8a:21:df:9e:37:ec:14:08:60:e7:28:4d:3b:ac:41:
         83:c4:00:10:bf:b7:3e:19:7b:82:fe:d5:02:53:c4:50:41:e1:
         07:f1:c5:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 06:28:25 2026 by rpki-client