Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a386565303a3a2f34342d3434203d3e203538333339.roa
File:                     326130353a646663313a386565303a3a2f34342d3434203d3e203538333339.roa (raw, json)
Hash identifier:          3zcLOq83RWOcc1XUV6XlEafqYD/qNk2p40hm0gbuYr4=
Subject key identifier:   D1:FA:69:3E:CC:83:4D:56:F1:76:BF:5F:AD:E3:87:23:38:07:57:DD
Certificate issuer:       /CN=BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3
Certificate serial:       348218473B89C760B81561BDE58635000223D7B9
Authority key identifier: BE:3D:C6:61:4E:0A:2F:3B:3D:6F:08:DC:04:A1:BC:34:C8:FB:C9:C3
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a386565303a3a2f34342d3434203d3e203538333339.roa
Signing time:             Fri 05 Jun 2026 19:58:11 +0000
ROA not before:           Fri 05 Jun 2026 19:53:11 +0000
ROA not after:            Fri 04 Jun 2027 19:58:11 +0000
asID:                     58339
IP address blocks:        2a05:dfc1:8ee0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 07:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:82:18:47:3b:89:c7:60:b8:15:61:bd:e5:86:35:00:02:23:d7:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3
        Validity
            Not Before: Jun  5 19:53:11 2026 GMT
            Not After : Jun  4 19:58:11 2027 GMT
        Subject: CN=D1FA693ECC834D56F176BF5FADE38723380757DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:97:ed:a9:c6:42:0b:18:fa:71:e4:94:4e:1c:
                    4a:02:57:8e:f4:2c:88:17:e0:5c:5f:32:f3:ba:78:
                    a3:b6:4e:80:30:99:9c:72:f1:6f:ca:96:5f:ce:5b:
                    3c:7b:e5:e8:1f:b7:79:83:d0:dc:5e:73:35:d7:2f:
                    48:02:7c:0d:73:fc:78:7c:c0:64:ef:a5:61:f6:07:
                    63:4c:9e:0b:88:a9:6e:bc:b8:1a:fd:46:e6:21:9d:
                    6f:43:90:52:1f:be:1a:57:51:85:4a:57:8f:12:3f:
                    af:73:1b:24:a8:b1:6c:63:98:c8:49:6d:7c:78:47:
                    2d:86:7c:f8:f7:f7:85:7d:9e:78:4f:76:03:72:da:
                    8c:4a:f2:31:ec:c2:23:e9:ae:f8:2c:73:02:ef:90:
                    02:da:18:85:c8:ec:c0:7d:77:83:ef:bb:51:db:88:
                    a3:23:50:3a:f6:af:fb:16:10:d9:b7:b9:0f:9e:1e:
                    b5:c3:a9:15:69:32:a6:80:db:b1:67:8d:03:86:26:
                    98:c0:9f:ae:5c:d4:f2:bd:57:20:c5:81:17:d3:f7:
                    08:15:b6:77:e5:62:0f:7e:44:2f:e0:43:94:1e:a5:
                    a6:58:04:bb:17:a6:22:f6:cb:e1:96:76:25:01:c7:
                    ec:6e:7b:b3:e7:11:57:86:fb:61:25:ae:72:1d:d8:
                    3d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:FA:69:3E:CC:83:4D:56:F1:76:BF:5F:AD:E3:87:23:38:07:57:DD
            X509v3 Authority Key Identifier:
                keyid:BE:3D:C6:61:4E:0A:2F:3B:3D:6F:08:DC:04:A1:BC:34:C8:FB:C9:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BE3DC6614E0A2F3B3D6F08DC04A1BC34C8FBC9C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/3/326130353a646663313a386565303a3a2f34342d3434203d3e203538333339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:8ee0::/44

    Signature Algorithm: sha256WithRSAEncryption
         73:08:63:91:ae:17:f6:a0:c5:f1:88:08:23:73:12:8a:5f:0f:
         69:d5:64:8f:bc:c1:30:d7:ed:52:60:f3:5c:af:a0:c5:c8:e7:
         29:32:c6:5f:5e:e2:79:75:bd:02:7a:84:ef:e4:6b:f3:38:5e:
         33:1e:69:88:35:69:06:d3:6d:e8:d8:ef:19:38:35:3b:b6:25:
         0c:57:90:de:c1:29:62:a1:9b:b5:43:b6:42:54:ed:b3:58:f3:
         f0:d0:39:33:87:7a:5f:c3:82:09:ae:d5:37:e5:e1:20:7e:be:
         24:0e:2b:fd:e6:b2:d7:27:34:25:71:c1:c3:d7:7b:2c:a6:f9:
         eb:59:0b:fb:b4:ac:2a:d0:23:01:ab:1b:38:af:b6:db:fe:a5:
         c5:78:0d:15:fc:bc:c7:73:b9:98:be:21:56:f2:9f:3e:02:0a:
         2e:a1:21:d5:61:7d:02:1e:92:23:b5:fa:7b:f3:63:cf:8a:ca:
         00:32:39:60:ea:75:ee:11:20:ce:83:c6:20:00:e0:3c:43:8e:
         8a:22:90:88:49:73:04:dc:74:51:98:ad:f3:25:93:89:2a:d4:
         98:71:28:a7:c5:cb:ad:53:c4:a6:d3:bc:40:d2:ba:6e:0a:c5:
         8e:23:50:95:18:6c:23:1e:04:a5:f1:0d:82:c2:cd:e9:96:d5:
         91:ab:bd:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:10:50 2026 by rpki-client