Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/326131343a373538303a666635333a363a3a312f3132382d313238203d3e20323039373130.roa
File:                     326131343a373538303a666635333a363a3a312f3132382d313238203d3e20323039373130.roa (raw, json)
Hash identifier:          zwje0di7asKeNatkyUL1WpCCx1sQ8AOWCA6nbIi4iDY=
Subject key identifier:   26:C7:2A:01:DF:61:3F:B0:C8:03:F3:BA:E7:21:E8:22:C4:A5:3D:70
Certificate issuer:       /CN=51917E722DB03952D9056BED2F6BD4BF98B78976
Certificate serial:       5CB4F1E655CF9C8CFE68C630E76CAB543F0A2FEA
Authority key identifier: 51:91:7E:72:2D:B0:39:52:D9:05:6B:ED:2F:6B:D4:BF:98:B7:89:76
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/326131343a373538303a666635333a363a3a312f3132382d313238203d3e20323039373130.roa
Signing time:             Fri 20 Feb 2026 01:16:38 +0000
ROA not before:           Fri 20 Feb 2026 01:11:38 +0000
ROA not after:            Fri 19 Feb 2027 01:16:38 +0000
asID:                     209710
IP address blocks:        2a14:7580:ff53:6::1/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Feb 2026 20:53:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:b4:f1:e6:55:cf:9c:8c:fe:68:c6:30:e7:6c:ab:54:3f:0a:2f:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51917E722DB03952D9056BED2F6BD4BF98B78976
        Validity
            Not Before: Feb 20 01:11:38 2026 GMT
            Not After : Feb 19 01:16:38 2027 GMT
        Subject: CN=26C72A01DF613FB0C803F3BAE721E822C4A53D70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:4b:97:c1:4e:b3:0d:cf:0e:00:5a:43:60:bf:
                    10:6e:bf:6c:05:a7:1d:ce:90:e9:2b:31:ec:5b:f5:
                    bd:6c:00:b7:e6:2b:0b:c9:30:d3:d1:3c:e7:9c:0f:
                    41:ab:57:b6:b3:01:ac:8d:98:02:26:24:5a:50:18:
                    79:ae:ae:ef:3f:b7:19:0c:85:fc:32:ca:01:81:1c:
                    fb:83:b3:c5:09:2d:c0:8d:d0:95:1b:c8:47:07:4d:
                    b6:c0:67:9d:77:a6:78:a4:69:47:02:99:bb:6a:aa:
                    c8:bf:ec:e0:7f:7d:e3:b4:a2:39:d9:9a:b9:9e:85:
                    91:53:68:6e:a1:d0:5a:14:67:b1:0d:5a:80:1a:4d:
                    b1:e9:e7:3b:d9:63:a9:3c:c9:ad:58:fb:18:f4:b3:
                    3c:8b:7f:96:d8:b1:64:b1:34:43:1d:9d:42:bd:e7:
                    52:93:52:f7:16:20:bc:64:73:0e:14:a9:34:5c:3f:
                    0a:82:a1:07:41:27:ca:d5:6b:cb:b7:57:d4:35:cc:
                    f1:fd:e6:36:df:cf:29:3d:55:97:1f:e4:a6:e6:18:
                    a2:58:f6:33:37:e8:90:87:ab:6e:fe:d4:dc:f2:d8:
                    07:9d:b4:74:24:83:55:46:21:0e:5f:42:4a:6e:ae:
                    76:f7:0d:42:c1:be:06:ab:16:ab:e0:67:d5:67:bf:
                    b4:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:C7:2A:01:DF:61:3F:B0:C8:03:F3:BA:E7:21:E8:22:C4:A5:3D:70
            X509v3 Authority Key Identifier:
                keyid:51:91:7E:72:2D:B0:39:52:D9:05:6B:ED:2F:6B:D4:BF:98:B7:89:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/326131343a373538303a666635333a363a3a312f3132382d313238203d3e20323039373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7580:ff53:6:0:0:0:1/128

    Signature Algorithm: sha256WithRSAEncryption
         94:96:db:a2:84:41:d9:45:76:e1:9c:fc:9b:f5:da:ac:7a:08:
         f2:2f:d2:6b:ff:77:cc:19:2a:f7:df:ce:1d:47:b2:f2:d5:60:
         b9:15:58:69:df:23:f9:ab:03:e8:5c:86:ae:6d:61:02:3e:80:
         75:f6:81:12:6a:fa:ef:3d:3c:96:55:9b:c7:65:6d:78:ac:7d:
         db:09:8b:ea:3c:d1:db:ab:87:67:5d:99:61:78:54:00:99:b5:
         f5:fa:7c:83:b1:83:d5:4d:6f:97:96:d6:d4:02:91:c7:b1:eb:
         dc:c8:b9:52:8d:4a:e6:68:80:5c:c2:ac:fa:2f:f6:4b:5c:2e:
         5f:5a:59:62:c2:41:c8:9d:eb:fb:c0:49:56:e1:18:37:1b:49:
         3e:31:91:5e:7e:bc:25:b7:89:79:dd:1e:ae:98:29:e7:aa:de:
         6f:bd:f2:58:f5:ca:e3:be:7f:65:ce:3e:10:0d:c6:1f:bc:df:
         e4:a5:9a:a0:62:e3:ef:5b:db:f9:a5:51:17:5f:2f:24:b6:73:
         43:e2:bc:4a:a5:44:68:0d:44:f8:5b:fb:5d:ba:ad:4d:93:38:
         41:61:ed:32:27:50:3d:96:a2:3c:c5:ac:99:63:e2:87:bc:f2:
         0d:bd:55:da:d9:cf:8e:e0:3c:6b:c2:ee:16:40:9e:9a:7d:9d:
         2b:91:71:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 06:28:29 2026 by rpki-client