Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/326130613a363034303a626132653a3a2f34382d3438203d3e20313939353138.roa
File:                     326130613a363034303a626132653a3a2f34382d3438203d3e20313939353138.roa (raw, json)
Hash identifier:          xMUoMnTEJdvYmUMo6/uB1JexVBN/6waGI9s1j3uSiJg=
Subject key identifier:   6D:43:E6:60:C9:A3:42:12:A8:39:F4:72:91:96:05:4D:24:2F:47:18
Certificate issuer:       /CN=0F728B914670434DCF5633E81E2B8721DF75CEB8
Certificate serial:       7E96AD33C176775F0D898FD62F09C2EAEFD1F6CD
Authority key identifier: 0F:72:8B:91:46:70:43:4D:CF:56:33:E8:1E:2B:87:21:DF:75:CE:B8
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0F728B914670434DCF5633E81E2B8721DF75CEB8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/326130613a363034303a626132653a3a2f34382d3438203d3e20313939353138.roa
Signing time:             Mon 13 Jul 2026 20:40:00 +0000
ROA not before:           Mon 13 Jul 2026 20:35:00 +0000
ROA not after:            Mon 12 Jul 2027 20:40:00 +0000
asID:                     199518
IP address blocks:        2a0a:6040:ba2e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/0F728B914670434DCF5633E81E2B8721DF75CEB8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/0F728B914670434DCF5633E81E2B8721DF75CEB8.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0F728B914670434DCF5633E81E2B8721DF75CEB8.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:96:ad:33:c1:76:77:5f:0d:89:8f:d6:2f:09:c2:ea:ef:d1:f6:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F728B914670434DCF5633E81E2B8721DF75CEB8
        Validity
            Not Before: Jul 13 20:35:00 2026 GMT
            Not After : Jul 12 20:40:00 2027 GMT
        Subject: CN=6D43E660C9A34212A839F4729196054D242F4718
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:bb:f5:57:e5:a2:9f:fe:45:3f:63:8a:18:65:
                    df:62:e9:7e:55:5c:e6:3a:b3:99:9a:f0:10:26:89:
                    ee:84:6c:01:43:ca:53:b0:29:25:bb:ae:5c:cf:52:
                    3f:9d:50:f0:bc:31:ba:04:28:b0:57:56:5d:d6:a0:
                    bd:1c:5b:cc:7e:fd:e3:98:42:30:a4:30:de:0a:2e:
                    27:0d:d3:40:bd:d4:e1:3d:e8:bc:52:8e:05:af:98:
                    30:09:ab:d1:8d:88:c2:e8:f6:e6:b2:ab:9c:7b:26:
                    a1:36:f1:d6:d3:20:fd:a6:0d:7c:16:00:10:4e:1b:
                    48:e3:85:1d:09:ac:72:22:40:ed:9f:fd:3d:94:fb:
                    9b:b1:5e:9c:21:61:7c:2b:99:33:ef:22:cc:49:e1:
                    72:8a:cf:68:5c:dc:5c:c6:55:83:bf:d2:f4:d2:11:
                    06:56:e6:79:f6:24:72:f3:99:39:bd:33:25:c6:ff:
                    41:c8:a4:22:9d:13:82:d8:19:0f:22:af:f1:fc:05:
                    a3:05:9a:0d:8c:d6:9a:1c:09:ac:ec:85:d6:c4:88:
                    91:47:88:dd:eb:30:1a:92:53:78:2f:5b:e9:d0:f2:
                    fe:2c:e8:ad:28:6a:31:29:71:68:63:17:d1:56:05:
                    16:51:7e:95:43:1e:de:cb:23:58:58:04:43:1a:be:
                    01:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:43:E6:60:C9:A3:42:12:A8:39:F4:72:91:96:05:4D:24:2F:47:18
            X509v3 Authority Key Identifier:
                keyid:0F:72:8B:91:46:70:43:4D:CF:56:33:E8:1E:2B:87:21:DF:75:CE:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/0F728B914670434DCF5633E81E2B8721DF75CEB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0F728B914670434DCF5633E81E2B8721DF75CEB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/326130613a363034303a626132653a3a2f34382d3438203d3e20313939353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:ba2e::/48

    Signature Algorithm: sha256WithRSAEncryption
         a8:24:37:6d:b3:31:00:8b:72:14:fb:55:1a:13:cc:64:eb:c8:
         85:c0:c7:2c:86:3d:cd:e1:25:d3:c3:f3:30:96:d4:0a:83:14:
         3c:95:5e:cc:e7:c1:ec:93:51:44:33:a6:75:57:9b:3a:d6:82:
         dc:cc:14:1c:36:a6:c8:f3:39:d5:62:bc:b8:aa:86:82:52:64:
         31:41:d0:ff:a4:7c:ee:63:0b:f8:8a:17:98:2a:37:4d:f7:42:
         b9:ac:77:82:ef:4a:8e:21:ca:71:5f:28:de:11:59:8c:8c:b2:
         9a:75:b4:b5:03:cd:0e:9a:94:31:c7:f1:4b:ea:b7:59:61:37:
         eb:04:97:fb:a9:9f:6b:6d:4d:59:f5:ff:12:7b:6e:4d:b0:83:
         a9:fa:e8:a9:ec:f5:03:2b:06:1f:03:7e:e6:9f:e2:cf:a0:16:
         91:14:69:89:c6:e5:c6:d7:b1:a1:01:35:7e:72:25:15:4e:b2:
         c3:c1:57:00:64:71:34:94:09:b6:bb:b6:93:89:53:6e:ad:95:
         78:8b:d0:8e:9c:f9:96:c1:b7:2c:72:1c:f1:3e:ae:3d:96:a9:
         2e:4f:e5:0d:cf:b7:2f:23:e8:ec:bf:28:dc:ce:1f:d5:34:73:
         96:51:a9:16:27:c8:fc:31:df:8d:58:15:68:84:e4:c3:52:de:
         3b:65:b2:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:58:46 2026 by rpki-client