Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/b07c06ac-19db-4c40-8b8d-95d4f2f53524/1/326131343a366634343a376666663a3a2f34382d3438203d3e20323139303135.roa
File:                     326131343a366634343a376666663a3a2f34382d3438203d3e20323139303135.roa (raw, json)
Hash identifier:          FbM1x/znrbbVqbkVjBIenv9gkcVG9Fj3FzDmNjj2eeE=
Subject key identifier:   B4:A2:5E:6C:09:EF:6D:9F:0D:41:3C:B9:B0:25:61:B4:A6:D3:96:CF
Certificate issuer:       /CN=27EB75FA7E95272BBCF1FA431B7706B00D02D1BA
Certificate serial:       5B5D535BBC4F8457801317AE47380CBA4F04313E
Authority key identifier: 27:EB:75:FA:7E:95:27:2B:BC:F1:FA:43:1B:77:06:B0:0D:02:D1:BA
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/27EB75FA7E95272BBCF1FA431B7706B00D02D1BA.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/b07c06ac-19db-4c40-8b8d-95d4f2f53524/1/326131343a366634343a376666663a3a2f34382d3438203d3e20323139303135.roa
Signing time:             Sun 16 Aug 2026 17:21:07 +0000
ROA not before:           Sun 16 Aug 2026 17:16:07 +0000
ROA not after:            Sun 15 Aug 2027 17:21:07 +0000
asID:                     219015
IP address blocks:        2a14:6f44:7fff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/b07c06ac-19db-4c40-8b8d-95d4f2f53524/1/27EB75FA7E95272BBCF1FA431B7706B00D02D1BA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/b07c06ac-19db-4c40-8b8d-95d4f2f53524/1/27EB75FA7E95272BBCF1FA431B7706B00D02D1BA.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/27EB75FA7E95272BBCF1FA431B7706B00D02D1BA.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 Oct 2026 10:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:5d:53:5b:bc:4f:84:57:80:13:17:ae:47:38:0c:ba:4f:04:31:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27EB75FA7E95272BBCF1FA431B7706B00D02D1BA
        Validity
            Not Before: Aug 16 17:16:07 2026 GMT
            Not After : Aug 15 17:21:07 2027 GMT
        Subject: CN=B4A25E6C09EF6D9F0D413CB9B02561B4A6D396CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:5f:df:96:0e:86:87:4c:3a:d2:a0:5b:aa:08:
                    06:94:54:67:42:68:c7:75:6f:0e:4f:29:33:4e:e6:
                    61:e1:d0:a9:e8:78:2a:eb:73:f0:3e:67:90:dc:7d:
                    f6:cf:b7:3f:11:75:27:78:f8:8c:28:a2:8b:9a:c5:
                    97:af:73:da:3f:83:a0:d6:71:01:08:64:89:83:b9:
                    09:e2:14:52:48:38:8d:d8:e5:95:8d:17:fb:ef:47:
                    91:47:8a:c6:8f:38:4a:04:91:3d:c3:48:26:0e:9d:
                    e4:2b:1a:e9:68:e1:2b:c8:e4:e2:f0:b8:6a:f3:3c:
                    28:9e:6d:ad:1b:51:01:16:17:9e:09:6e:68:de:6d:
                    86:6b:06:d1:28:cf:bb:b8:34:c7:cf:aa:49:23:62:
                    0b:39:4a:1a:dd:e8:7f:d9:04:ba:68:ca:56:fe:8b:
                    73:06:91:d5:25:a1:38:47:f0:8a:a0:f8:06:47:ad:
                    a8:ac:38:72:6f:9e:41:0b:19:82:45:22:f7:16:df:
                    d5:f7:9e:31:ef:c9:c4:74:31:d7:60:ba:20:e0:51:
                    30:2c:19:31:bd:77:66:5d:ab:07:85:06:2f:32:c2:
                    78:d0:3b:c5:bb:78:5a:af:8c:99:17:98:4a:b3:f3:
                    1a:fe:54:ce:5f:f7:e6:e4:be:64:2a:71:de:f2:18:
                    f1:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:A2:5E:6C:09:EF:6D:9F:0D:41:3C:B9:B0:25:61:B4:A6:D3:96:CF
            X509v3 Authority Key Identifier:
                keyid:27:EB:75:FA:7E:95:27:2B:BC:F1:FA:43:1B:77:06:B0:0D:02:D1:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/b07c06ac-19db-4c40-8b8d-95d4f2f53524/1/27EB75FA7E95272BBCF1FA431B7706B00D02D1BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/27EB75FA7E95272BBCF1FA431B7706B00D02D1BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b07c06ac-19db-4c40-8b8d-95d4f2f53524/1/326131343a366634343a376666663a3a2f34382d3438203d3e20323139303135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:6f44:7fff::/48

    Signature Algorithm: sha256WithRSAEncryption
         72:1b:a0:74:ae:a5:b7:b1:4d:d5:12:f7:d0:ec:85:e6:1d:ac:
         0b:27:6d:1e:f6:ec:15:9f:f0:8e:86:ea:b7:e7:73:da:3f:56:
         97:50:46:98:48:02:b0:71:71:da:76:fa:d8:c1:e7:63:96:47:
         6c:be:ae:11:cc:f8:ff:e3:5e:e5:b9:2c:01:23:b8:79:a0:93:
         5b:c5:5e:c3:51:f1:a0:ab:c8:38:ae:d2:69:8e:bb:d9:17:ea:
         1b:30:61:df:59:c4:dd:84:7d:88:12:de:60:8e:09:42:7a:90:
         5b:8c:38:8f:85:71:b0:ea:7d:a7:a4:47:0c:d6:3b:64:36:9b:
         6e:90:25:f6:7a:f0:d6:82:e4:43:ce:9f:3a:af:88:ab:3e:9b:
         01:9e:ac:80:46:49:ac:71:72:58:85:88:40:0c:8c:7b:31:aa:
         a1:2e:a2:6d:94:48:98:98:96:7a:1c:63:70:a2:58:ef:70:72:
         c0:fb:06:4a:39:42:7b:37:a7:c5:88:c7:32:fa:c9:77:72:a8:
         12:06:7b:5a:46:28:a0:cd:1b:c1:da:cb:82:31:c7:8e:4a:26:
         a4:76:ce:93:3d:2b:e9:4c:5b:d5:f9:73:3e:c4:9b:cd:e6:4d:
         25:ed:0f:f0:3b:55:5a:4d:c0:c8:a4:6c:80:ec:70:b2:56:7a:
         d0:22:41:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 00:36:17 2026 by rpki-client