Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/326130613a363034303a626131663a3a2f34382d3438203d3e20313939353138.roa
File:                     326130613a363034303a626131663a3a2f34382d3438203d3e20313939353138.roa (raw, json)
Hash identifier:          Feh9A7zCxrF9j/b0J1MTRKBYxHGnp8hbJGoyURbl/8E=
Subject key identifier:   F2:95:2D:B6:D9:7C:45:2C:39:0C:71:5C:E4:3D:74:9C:8F:FC:70:DE
Certificate issuer:       /CN=0F728B914670434DCF5633E81E2B8721DF75CEB8
Certificate serial:       07BA652FB4A909F295F273BA8162A354B234A1DC
Authority key identifier: 0F:72:8B:91:46:70:43:4D:CF:56:33:E8:1E:2B:87:21:DF:75:CE:B8
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0F728B914670434DCF5633E81E2B8721DF75CEB8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/326130613a363034303a626131663a3a2f34382d3438203d3e20313939353138.roa
Signing time:             Thu 03 Sep 2026 20:15:42 +0000
ROA not before:           Thu 03 Sep 2026 20:10:42 +0000
ROA not after:            Thu 02 Sep 2027 20:15:42 +0000
asID:                     199518
IP address blocks:        2a0a:6040:ba1f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/0F728B914670434DCF5633E81E2B8721DF75CEB8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/0F728B914670434DCF5633E81E2B8721DF75CEB8.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0F728B914670434DCF5633E81E2B8721DF75CEB8.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 15:23:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:ba:65:2f:b4:a9:09:f2:95:f2:73:ba:81:62:a3:54:b2:34:a1:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F728B914670434DCF5633E81E2B8721DF75CEB8
        Validity
            Not Before: Sep  3 20:10:42 2026 GMT
            Not After : Sep  2 20:15:42 2027 GMT
        Subject: CN=F2952DB6D97C452C390C715CE43D749C8FFC70DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d9:51:df:23:65:90:c2:34:a7:f3:b8:a6:7a:
                    26:08:54:28:89:f3:a2:5e:ac:26:f2:fa:ec:c1:51:
                    3c:f3:13:75:f3:97:64:71:9c:8f:43:e3:8a:59:10:
                    ef:b5:53:b4:42:ac:46:ca:83:66:26:65:a6:6f:50:
                    a1:24:d7:b5:ec:d9:71:fd:15:ff:9b:93:9a:01:6e:
                    a9:73:c2:cf:e3:a4:83:a4:ac:42:f4:4c:a4:c0:49:
                    30:68:e0:d5:a9:6f:10:3a:60:75:94:b0:22:a6:c2:
                    33:91:82:a0:26:0c:eb:1a:06:1d:1e:11:ad:4d:4d:
                    47:98:cd:c0:b6:95:2c:84:99:f5:c0:26:5d:7b:3f:
                    85:38:a3:96:54:df:77:d3:c7:30:bf:ef:ec:87:62:
                    5a:87:75:4c:65:5e:be:be:7a:ca:56:d9:1f:ef:bf:
                    83:b4:8b:60:34:88:8d:71:24:c3:ab:f9:39:6f:d3:
                    f1:7d:b6:a1:9f:db:68:c3:2e:21:e0:df:ce:e7:ef:
                    ed:5a:3d:8a:00:4a:2c:49:bf:5f:eb:91:65:d6:8d:
                    0c:85:ef:c1:b8:32:90:9e:ea:cc:c1:56:50:2f:61:
                    9b:5c:7e:9e:c6:f2:03:e7:ed:b8:3f:51:5b:ff:8c:
                    5e:d3:9d:45:7c:0e:76:7e:31:6d:f8:4f:fd:8d:9f:
                    79:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:95:2D:B6:D9:7C:45:2C:39:0C:71:5C:E4:3D:74:9C:8F:FC:70:DE
            X509v3 Authority Key Identifier:
                keyid:0F:72:8B:91:46:70:43:4D:CF:56:33:E8:1E:2B:87:21:DF:75:CE:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/0F728B914670434DCF5633E81E2B8721DF75CEB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0F728B914670434DCF5633E81E2B8721DF75CEB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/326130613a363034303a626131663a3a2f34382d3438203d3e20313939353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:ba1f::/48

    Signature Algorithm: sha256WithRSAEncryption
         b1:57:70:61:04:f8:eb:1c:8d:41:84:e6:3e:22:d7:80:f5:f8:
         a2:07:f4:07:94:0e:52:0f:1c:9d:ec:af:fc:a1:84:04:58:80:
         9b:16:86:d5:66:84:9a:46:7c:69:9c:e5:b5:1e:6c:e1:04:35:
         9d:d4:d1:ef:c5:e5:9b:49:f3:b2:57:74:16:27:65:16:19:20:
         27:ec:35:ff:44:12:a6:58:13:8e:de:ab:ae:34:0a:23:19:a4:
         3c:80:f8:85:9c:4b:2d:9d:db:9b:fa:f8:b6:11:a5:75:65:5b:
         64:ac:1d:37:fb:68:54:26:e3:ae:a6:db:4b:8d:76:be:a3:8e:
         23:06:6e:9b:dd:fc:4a:32:1a:f1:44:12:ea:b5:52:6e:33:2c:
         79:29:94:b6:8d:6c:8a:70:02:ec:09:72:d0:d3:46:4b:7c:bb:
         26:5c:91:2a:10:45:c8:6c:26:76:ad:a5:b6:ef:54:30:74:bf:
         cf:37:f1:6b:ab:37:16:73:22:e1:93:1f:81:3e:ea:31:35:dc:
         ef:3c:cb:69:0b:03:65:ed:84:53:52:f4:a1:28:a4:41:51:64:
         51:7b:87:f3:19:97:89:ea:11:61:90:c9:d6:bd:2b:b7:19:26:
         d8:64:d4:90:c4:cd:db:23:bf:ad:91:46:a1:1d:29:2c:bb:48:
         2e:58:6d:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:40:40 2026 by rpki-client