Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/326131343a373538303a666635333a333a3a312f3132382d313238203d3e20323039373130.roa
File:                     326131343a373538303a666635333a333a3a312f3132382d313238203d3e20323039373130.roa (raw, json)
Hash identifier:          lVl4V8g0eU04ZLG6RBUxW633/p+gWVgNOosxIdRqV6Q=
Subject key identifier:   A7:6A:A2:50:D9:F2:DD:93:EC:42:7E:74:A8:65:8A:99:B8:97:17:53
Certificate issuer:       /CN=51917E722DB03952D9056BED2F6BD4BF98B78976
Certificate serial:       415C915F2E0EC9B647C8381BC88149CABAC6B401
Authority key identifier: 51:91:7E:72:2D:B0:39:52:D9:05:6B:ED:2F:6B:D4:BF:98:B7:89:76
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/326131343a373538303a666635333a333a3a312f3132382d313238203d3e20323039373130.roa
Signing time:             Fri 20 Feb 2026 01:16:39 +0000
ROA not before:           Fri 20 Feb 2026 01:11:39 +0000
ROA not after:            Fri 19 Feb 2027 01:16:39 +0000
asID:                     209710
IP address blocks:        2a14:7580:ff53:3::1/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Feb 2026 20:53:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:5c:91:5f:2e:0e:c9:b6:47:c8:38:1b:c8:81:49:ca:ba:c6:b4:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51917E722DB03952D9056BED2F6BD4BF98B78976
        Validity
            Not Before: Feb 20 01:11:39 2026 GMT
            Not After : Feb 19 01:16:39 2027 GMT
        Subject: CN=A76AA250D9F2DD93EC427E74A8658A99B8971753
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:c1:2b:8b:7f:f8:8e:6a:a2:c6:64:ff:3e:5d:
                    b1:ee:dd:9d:28:3c:1e:0c:73:e7:3b:7f:c0:04:79:
                    b7:0d:d8:73:3e:6e:45:61:5e:80:72:a1:dd:ad:16:
                    0f:cf:cf:02:26:b0:33:c6:b3:36:8b:0c:11:d7:76:
                    49:6d:31:1e:83:f3:66:fd:d8:77:57:a4:40:9a:2f:
                    71:58:e0:5b:ba:e2:25:e3:43:44:13:d3:25:ca:85:
                    eb:b9:65:03:3f:cb:a9:23:73:1a:7a:b9:47:6d:e4:
                    20:c9:4c:cd:f8:88:8a:55:24:a6:26:76:ce:8b:7f:
                    1b:26:fc:df:ab:6d:7d:f8:3d:63:37:53:68:16:0d:
                    fe:1f:df:45:4b:9b:ed:ee:52:71:a4:61:4a:1c:bd:
                    76:c8:02:2f:6d:a8:f0:66:12:bb:01:5d:ea:50:00:
                    b3:91:c3:84:49:79:ed:a6:62:d0:0f:8e:39:ff:74:
                    0f:f2:01:fb:5e:93:fb:e7:5b:98:49:a4:c9:62:59:
                    92:4e:08:47:91:c6:01:80:3f:13:ee:ba:fd:a6:84:
                    53:95:df:31:c0:77:70:de:dc:90:f2:cd:4d:cf:70:
                    81:b5:57:54:db:67:9f:35:73:60:27:77:24:16:d2:
                    a0:73:1e:bf:e4:3a:f4:33:15:0e:fa:fa:a0:b1:dc:
                    c6:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:6A:A2:50:D9:F2:DD:93:EC:42:7E:74:A8:65:8A:99:B8:97:17:53
            X509v3 Authority Key Identifier:
                keyid:51:91:7E:72:2D:B0:39:52:D9:05:6B:ED:2F:6B:D4:BF:98:B7:89:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/326131343a373538303a666635333a333a3a312f3132382d313238203d3e20323039373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7580:ff53:3:0:0:0:1/128

    Signature Algorithm: sha256WithRSAEncryption
         8d:d5:d4:a8:ed:1f:1a:7f:07:0b:d8:e6:74:54:56:10:fe:a5:
         4d:89:2b:17:b8:0c:54:a3:bd:97:fd:4e:9b:8e:66:f7:54:17:
         08:e6:2f:11:ff:b1:a4:3a:59:f8:e4:b6:5e:66:24:5b:ed:3b:
         e6:66:49:25:e6:fa:42:52:cb:73:5e:2e:f4:6d:28:0d:22:78:
         39:b7:65:98:84:16:18:4e:5f:af:0e:ed:1a:3e:34:c4:85:25:
         1e:d4:22:ce:2a:29:13:5e:d5:39:d9:f9:42:97:7d:99:9a:34:
         c9:8e:9a:87:75:53:ee:85:8a:dc:08:19:64:b1:68:ba:fd:ff:
         14:4e:7b:46:9f:99:b0:92:e2:bc:91:05:89:11:d2:ee:ae:59:
         1f:87:ce:79:0c:6e:1b:fb:4d:f8:2b:b3:73:9b:1b:a8:0a:34:
         10:83:91:e8:01:b3:fb:83:73:bd:49:ee:e0:df:ba:e6:1a:c4:
         b7:b1:13:ff:0a:32:44:0b:c5:45:e1:58:88:13:de:ef:c6:f5:
         8b:d6:d1:61:ea:47:35:39:c4:bd:c1:26:d7:14:86:66:73:a7:
         fe:9e:19:51:d1:c2:0b:9d:09:9b:2d:2e:4c:c8:8f:ea:02:9f:
         bb:71:43:6b:b4:09:f4:75:e2:16:ea:8f:9c:09:e6:0d:72:f7:
         88:8b:61:e9
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgIUQVyRXy4OybZHyDgbyIFJyrrGtAEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTE5MTdFNzIyREIwMzk1MkQ5MDU2QkVEMkY2QkQ0QkY5
OEI3ODk3NjAeFw0yNjAyMjAwMTExMzlaFw0yNzAyMTkwMTE2MzlaMDMxMTAvBgNV
BAMTKEE3NkFBMjUwRDlGMkREOTNFQzQyN0U3NEE4NjU4QTk5Qjg5NzE3NTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOwSuLf/iOaqLGZP8+XbHu3Z0o
PB4Mc+c7f8AEebcN2HM+bkVhXoByod2tFg/PzwImsDPGszaLDBHXdkltMR6D82b9
2HdXpECaL3FY4Fu64iXjQ0QT0yXKheu5ZQM/y6kjcxp6uUdt5CDJTM34iIpVJKYm
ds6Lfxsm/N+rbX34PWM3U2gWDf4f30VLm+3uUnGkYUocvXbIAi9tqPBmErsBXepQ
ALORw4RJee2mYtAPjjn/dA/yAftek/vnW5hJpMliWZJOCEeRxgGAPxPuuv2mhFOV
3zHAd3De3JDyzU3PcIG1V1TbZ581c2AndyQW0qBzHr/kOvQzFQ76+qCx3MapAgMB
AAGjggKZMIIClTAdBgNVHQ4EFgQUp2qiUNny3ZPsQn50qGWKmbiXF1MwHwYDVR0j
BBgwFoAUUZF+ci2wOVLZBWvtL2vUv5i3iXYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOWVjYWM0MTMtNGNkMi00NzJjLWIwMWUtNzQ0NThjZWEz
ODZjLzAvNTE5MTdFNzIyREIwMzk1MkQ5MDU2QkVEMkY2QkQ0QkY5OEI3ODk3Ni5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC81MTkxN0U3MjJEQjAzOTUyRDkwNTZCRUQy
RjZCRDRCRjk4Qjc4OTc2LmNlcjCBwQYIKwYBBQUHAQsEgbQwgbEwga4GCCsGAQUF
BzALhoGhcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS85ZWNhYzQxMy00Y2QyLTQ3MmMtYjAxZS03NDQ1OGNlYTM4NmMvMC8zMjYxMzEz
NDNhMzczNTM4MzAzYTY2NjYzNTMzM2EzMzNhM2EzMTJmMzEzMjM4MmQzMTMyMzgy
MDNkM2UyMDMyMzAzOTM3MzEzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAsBggrBgEFBQcBBwEB/wQdMBswGQQCAAIwEwMRACoUdYD/UwADAAAAAAAAAAEw
DQYJKoZIhvcNAQELBQADggEBAI3V1KjtHxp/BwvY5nRUVhD+pU2JKxe4DFSjvZf9
TpuOZvdUFwjmLxH/saQ6Wfjktl5mJFvtO+ZmSSXm+kJSy3NeLvRtKA0ieDm3ZZiE
FhhOX68O7Ro+NMSFJR7UIs4qKRNe1TnZ+UKXfZmaNMmOmod1U+6FitwIGWSxaLr9
/xROe0afmbCS4ryRBYkR0u6uWR+HznkMbhv7Tfgrs3ObG6gKNBCDkegBs/uDc71J
7uDfuuYaxLexE/8KMkQLxUXhWIgT3u/G9YvW0WHqRzU5xL3BJtcUhmZzp/6eGVHR
wgudCZstLkzIj+oCn7txQ2u0CfR14hbqj5wJ5g1y94iLYek=
-----END CERTIFICATE-----
Generated at Thu Feb 26 06:28:22 2026 by rpki-client