Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/326131343a373538303a666635333a353a3a312f3132382d313238203d3e20323039373130.roa
File:                     326131343a373538303a666635333a353a3a312f3132382d313238203d3e20323039373130.roa (raw, json)
Hash identifier:          ON013/fE9tgpmNU7oL/ZD9oeej40pENQ8hfazYTfPKU=
Subject key identifier:   ED:06:44:08:B5:23:2C:12:86:3F:8C:BE:25:A9:31:08:29:A2:32:37
Certificate issuer:       /CN=51917E722DB03952D9056BED2F6BD4BF98B78976
Certificate serial:       1F3F45F77180CE0F37F42A3212243652A83680A6
Authority key identifier: 51:91:7E:72:2D:B0:39:52:D9:05:6B:ED:2F:6B:D4:BF:98:B7:89:76
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/326131343a373538303a666635333a353a3a312f3132382d313238203d3e20323039373130.roa
Signing time:             Fri 20 Feb 2026 01:16:39 +0000
ROA not before:           Fri 20 Feb 2026 01:11:39 +0000
ROA not after:            Fri 19 Feb 2027 01:16:39 +0000
asID:                     209710
IP address blocks:        2a14:7580:ff53:5::1/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Feb 2026 20:53:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:3f:45:f7:71:80:ce:0f:37:f4:2a:32:12:24:36:52:a8:36:80:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51917E722DB03952D9056BED2F6BD4BF98B78976
        Validity
            Not Before: Feb 20 01:11:39 2026 GMT
            Not After : Feb 19 01:16:39 2027 GMT
        Subject: CN=ED064408B5232C12863F8CBE25A9310829A23237
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c1:eb:3f:14:96:4f:78:e9:e3:2b:6b:6d:22:
                    47:8a:cd:7e:df:9b:14:d2:f5:b1:f1:90:87:be:39:
                    96:45:07:78:c4:ad:26:52:f4:45:3b:6a:bf:a9:e2:
                    c5:15:c1:e4:77:5f:23:e6:39:6d:08:03:a9:3a:5c:
                    d7:b5:4f:3d:0d:8e:a7:15:65:fe:a5:8c:04:22:51:
                    b1:d0:b2:70:05:e3:d1:db:04:64:e2:5e:03:1f:75:
                    aa:12:a3:69:96:a0:ff:2a:a6:5b:67:b1:8d:37:ea:
                    1b:03:0c:57:16:25:7d:77:54:fe:2f:49:cf:20:99:
                    52:1a:09:65:3f:fd:52:47:e3:d0:00:cc:57:10:f6:
                    7f:32:47:d6:17:1a:60:c8:f6:53:aa:ba:b5:92:83:
                    5b:52:2e:0c:8e:f0:04:86:36:77:e9:8d:53:eb:4e:
                    18:71:70:d3:33:e4:44:06:24:2d:0c:05:80:05:73:
                    18:9b:66:29:ab:b9:bd:0b:a2:53:7a:fa:b2:83:54:
                    ee:7a:e3:15:75:d4:dc:1d:a8:e7:25:87:c7:24:f4:
                    1c:2c:a6:26:e6:23:7e:3b:3b:fd:10:c6:4f:fb:aa:
                    1b:b0:69:81:3b:97:f7:78:70:e2:8d:b6:fe:a1:ef:
                    1a:ef:2d:6a:45:05:fb:eb:03:9d:59:22:c4:93:f4:
                    f2:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:06:44:08:B5:23:2C:12:86:3F:8C:BE:25:A9:31:08:29:A2:32:37
            X509v3 Authority Key Identifier:
                keyid:51:91:7E:72:2D:B0:39:52:D9:05:6B:ED:2F:6B:D4:BF:98:B7:89:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/326131343a373538303a666635333a353a3a312f3132382d313238203d3e20323039373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7580:ff53:5:0:0:0:1/128

    Signature Algorithm: sha256WithRSAEncryption
         13:9b:39:f1:bf:8d:93:9a:c6:64:63:da:89:c7:fb:57:d3:e2:
         0d:d2:3b:a9:67:bb:75:ad:c1:7e:37:17:87:e3:f4:0b:4c:3b:
         6f:a5:11:c2:c6:7f:00:41:8d:02:ce:08:d3:bd:7c:ee:2f:1b:
         bc:f2:92:41:7c:0e:04:04:ef:be:64:e7:cd:70:88:57:dd:5b:
         18:4e:0b:a9:26:70:75:23:3d:98:79:ff:89:5e:b0:79:c4:45:
         2e:69:1d:22:bc:1d:67:cc:5e:d1:f9:ac:85:24:d7:a7:45:05:
         9b:d8:79:0b:59:17:9a:c4:a2:a7:51:cb:cb:c7:e4:d2:76:17:
         4d:91:8b:be:bd:4b:f0:bb:f3:c4:ee:3e:5a:5e:6c:53:cb:2e:
         e3:74:06:73:f1:f5:dd:ed:d2:4e:17:d3:0b:ee:98:11:1c:29:
         ed:20:82:d5:c9:2b:1e:fd:f1:0d:7a:d5:42:b7:2f:b7:25:12:
         80:28:77:a0:e7:1f:a7:7d:14:80:76:b1:1e:46:a6:b2:85:0c:
         2e:e6:0a:d7:7f:3a:74:f9:dd:0f:d5:04:0d:7a:42:aa:ae:27:
         9b:52:c6:da:82:a3:0f:2d:26:eb:f7:f1:64:38:96:8d:0b:89:
         e3:45:85:05:e1:04:c2:0b:92:e4:ad:b8:6c:27:b4:50:6f:16:
         e4:d9:16:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 06:28:23 2026 by rpki-client