Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a356637303a3a2f34382d3438203d3e203538333339.roa
File:                     326130353a646663313a356637303a3a2f34382d3438203d3e203538333339.roa (raw, json)
Hash identifier:          ETHQ24Pl9zbr+ZARpbWDKZgvox1CXF7rpNNxUD0KHK4=
Subject key identifier:   B0:15:9F:04:A2:35:16:9F:B5:7C:E4:92:49:9D:0C:D8:73:C4:3A:A1
Certificate issuer:       /CN=BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3
Certificate serial:       400AC77D6CDFF05545423558FC185EBDBFE5616A
Authority key identifier: BE:3D:C6:61:4E:0A:2F:3B:3D:6F:08:DC:04:A1:BC:34:C8:FB:C9:C3
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a356637303a3a2f34382d3438203d3e203538333339.roa
Signing time:             Fri 05 Jun 2026 19:58:11 +0000
ROA not before:           Fri 05 Jun 2026 19:53:11 +0000
ROA not after:            Fri 04 Jun 2027 19:58:11 +0000
asID:                     58339
IP address blocks:        2a05:dfc1:5f70::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 07:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:0a:c7:7d:6c:df:f0:55:45:42:35:58:fc:18:5e:bd:bf:e5:61:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3
        Validity
            Not Before: Jun  5 19:53:11 2026 GMT
            Not After : Jun  4 19:58:11 2027 GMT
        Subject: CN=B0159F04A235169FB57CE492499D0CD873C43AA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b7:99:16:1d:18:f8:fb:2a:17:ae:6b:c3:63:
                    f0:cb:00:8e:cc:9a:b3:c0:ce:92:49:ca:d4:7a:d6:
                    3c:d4:9a:92:aa:0c:e6:c0:cf:d2:88:b2:a5:47:aa:
                    3e:71:64:ac:be:54:42:6d:fc:42:8f:cd:2c:10:2f:
                    1b:f3:f8:f4:aa:38:ed:e5:86:c2:08:3a:b8:b0:ee:
                    51:ef:20:ed:9c:41:83:1b:11:07:fe:3c:b5:00:13:
                    8c:9f:e5:3a:39:8a:01:45:8e:cb:78:c0:f4:49:c0:
                    0e:9d:67:73:ac:a2:db:37:a6:76:1e:c8:57:a2:0a:
                    e4:6e:95:b7:1f:32:49:71:0f:5c:d8:e8:e3:79:25:
                    88:09:3f:24:5a:dd:6a:9a:c3:a8:77:37:cb:77:57:
                    31:3b:40:2f:d0:5c:38:d1:3e:2d:a6:b5:5c:d5:78:
                    7c:29:b5:96:10:a7:fd:14:43:c1:eb:31:6c:8d:84:
                    70:ec:d8:7d:79:c9:59:e0:8f:87:ed:5c:df:7b:39:
                    66:5c:08:28:92:79:23:2d:71:45:8e:5e:02:52:85:
                    28:ab:19:09:f5:b8:6d:76:3a:71:76:fc:7a:19:d6:
                    5b:62:25:d3:d2:ee:71:d4:08:38:8b:22:a3:0e:4d:
                    74:17:74:87:ea:2b:05:72:c9:bd:4e:87:38:13:49:
                    3f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:15:9F:04:A2:35:16:9F:B5:7C:E4:92:49:9D:0C:D8:73:C4:3A:A1
            X509v3 Authority Key Identifier:
                keyid:BE:3D:C6:61:4E:0A:2F:3B:3D:6F:08:DC:04:A1:BC:34:C8:FB:C9:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a356637303a3a2f34382d3438203d3e203538333339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:5f70::/48

    Signature Algorithm: sha256WithRSAEncryption
         09:3f:a7:ae:61:b9:d8:c5:68:c3:0d:79:b6:33:14:59:9a:70:
         54:91:e3:f4:e9:73:b1:a7:21:56:95:2e:fa:ca:a5:89:fc:78:
         88:57:c5:eb:15:42:18:73:b2:11:b9:6e:d5:21:21:ff:9b:05:
         09:48:ab:e9:4a:66:96:26:7d:cb:c7:e7:84:d6:f6:b9:e1:27:
         3c:37:b8:93:14:cc:0d:b1:18:a2:6d:e3:ff:5c:92:4f:db:48:
         20:11:31:ba:48:d5:81:7e:22:4d:12:3a:d6:c9:16:c7:45:eb:
         7f:b6:99:42:28:4c:77:11:49:54:94:bf:0e:2c:e0:91:e0:9c:
         55:23:e5:1b:2a:96:46:87:e5:3f:e6:ad:c1:94:30:e3:1f:12:
         3c:04:08:a7:f9:f6:38:83:01:19:d1:cd:45:b2:4c:b1:55:e8:
         3c:78:16:a7:9d:9e:ae:9e:e5:2b:2d:99:a0:f3:e0:f3:bc:1c:
         37:16:f0:35:3b:6e:cc:6b:93:a7:76:a2:b6:fd:7b:de:15:4b:
         8e:24:23:18:9b:7d:93:92:ad:a9:64:ed:32:3d:13:69:45:b4:
         4a:9c:3c:20:a1:46:60:4a:f6:e1:49:5a:12:e3:8f:ca:17:8d:
         c0:56:b3:87:ac:92:d1:f4:bb:3e:06:d9:5f:1b:10:ab:87:05:
         42:1d:6c:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:10:41 2026 by rpki-client