Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/326131343a373538303a666635663a3a2f34382d3438203d3e20323039373130.roa
File:                     326131343a373538303a666635663a3a2f34382d3438203d3e20323039373130.roa (raw, json)
Hash identifier:          bVu9jG4ygbQ2M9hg7Q2hYueCn9dZ67U+HzZp2NSwh9Q=
Subject key identifier:   D2:B3:D1:44:F0:70:26:75:89:81:3A:AE:45:AB:6C:9E:9A:B2:FB:FC
Certificate issuer:       /CN=51917E722DB03952D9056BED2F6BD4BF98B78976
Certificate serial:       6580A0EE1A336763EB78BB380D6FFF4411031A9A
Authority key identifier: 51:91:7E:72:2D:B0:39:52:D9:05:6B:ED:2F:6B:D4:BF:98:B7:89:76
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/326131343a373538303a666635663a3a2f34382d3438203d3e20323039373130.roa
Signing time:             Fri 20 Feb 2026 01:15:51 +0000
ROA not before:           Fri 20 Feb 2026 01:10:51 +0000
ROA not after:            Fri 19 Feb 2027 01:15:51 +0000
asID:                     209710
IP address blocks:        2a14:7580:ff5f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Feb 2026 20:53:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:80:a0:ee:1a:33:67:63:eb:78:bb:38:0d:6f:ff:44:11:03:1a:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51917E722DB03952D9056BED2F6BD4BF98B78976
        Validity
            Not Before: Feb 20 01:10:51 2026 GMT
            Not After : Feb 19 01:15:51 2027 GMT
        Subject: CN=D2B3D144F070267589813AAE45AB6C9E9AB2FBFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:9e:47:b7:46:6e:77:94:24:1e:cb:2f:1e:14:
                    b9:7a:48:ef:d8:e9:5d:9c:c2:03:97:90:f8:20:58:
                    0d:73:1d:7e:98:e6:18:58:65:40:65:fb:79:e9:a0:
                    2b:01:ac:54:e9:c0:9a:d8:39:85:a6:7e:32:fc:bc:
                    76:4e:77:07:3b:46:bc:2c:3c:0f:fe:4c:48:46:83:
                    6d:04:f8:5f:c6:d5:ac:b3:1e:7f:3e:fa:a0:66:4a:
                    89:e8:08:b9:a5:ee:51:ff:9c:df:2a:99:6e:54:b2:
                    2c:ea:c7:8e:19:52:70:88:a8:64:01:75:b1:c7:41:
                    56:ad:e7:56:9b:ee:ba:27:cc:80:72:ca:c7:6a:9f:
                    57:7a:f8:3b:be:71:d8:83:cd:81:14:ba:9e:ce:ed:
                    b8:cc:8e:8b:0d:16:f9:29:4b:b9:03:3f:16:33:86:
                    86:9f:e3:a6:91:cf:88:da:ad:cc:60:bd:3a:aa:82:
                    1d:be:b0:ab:90:6c:22:07:02:93:2a:69:77:99:a9:
                    5f:b1:73:d8:36:68:d0:21:2f:d4:df:30:b5:d5:de:
                    f8:a1:43:85:14:ab:6a:f1:87:98:b2:cf:65:53:4a:
                    9b:fb:57:5f:8e:aa:e1:17:ed:de:50:78:91:9a:37:
                    c2:44:b8:a2:3f:ec:0e:ec:a3:57:c5:12:1a:8b:b3:
                    19:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:B3:D1:44:F0:70:26:75:89:81:3A:AE:45:AB:6C:9E:9A:B2:FB:FC
            X509v3 Authority Key Identifier:
                keyid:51:91:7E:72:2D:B0:39:52:D9:05:6B:ED:2F:6B:D4:BF:98:B7:89:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/326131343a373538303a666635663a3a2f34382d3438203d3e20323039373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7580:ff5f::/48

    Signature Algorithm: sha256WithRSAEncryption
         4f:f4:7c:7d:23:81:a4:67:dd:86:81:8b:af:82:a2:68:cc:d9:
         f7:df:14:42:98:a7:37:03:b8:b5:bf:41:af:42:a0:a4:96:30:
         f0:99:d2:bb:93:b3:82:61:0a:dc:4d:16:06:b3:63:f1:f3:6d:
         97:f7:7a:56:e4:09:b4:8e:1b:09:75:30:6e:5f:85:de:26:fa:
         fe:eb:7c:44:ff:68:55:81:19:a7:19:67:12:92:00:83:f8:8f:
         16:fc:0c:9e:ff:52:bd:f0:77:01:55:83:b6:fa:1d:25:b3:5f:
         b5:e3:d3:bd:8a:a3:c6:50:b2:fe:fc:d5:6f:73:97:2c:c7:9c:
         34:5a:e8:28:f7:da:4c:9a:7d:59:2f:b8:1e:cd:9b:79:d0:71:
         eb:79:ca:f2:3c:83:e5:be:10:c7:4b:2f:3d:cb:d3:d9:a3:3e:
         b1:10:fb:64:96:40:ae:24:0a:4c:66:c3:bc:c6:4f:13:12:60:
         fc:98:b2:07:a8:aa:33:72:b1:1c:7b:0b:61:fb:2e:f6:cf:16:
         c4:d9:2b:b0:d3:9e:2e:67:91:a9:b6:b1:45:ff:f2:ab:37:a8:
         eb:17:4b:bb:05:b9:2a:90:b0:5f:dc:5a:53:83:67:eb:46:9d:
         3f:c5:40:a7:38:07:52:ea:2f:72:2c:4a:7c:11:ec:94:14:99:
         68:f6:66:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 06:28:34 2026 by rpki-client