Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/326130613a363034303a626137323a3a2f34382d3438203d3e20313939353138.roa
File:                     326130613a363034303a626137323a3a2f34382d3438203d3e20313939353138.roa (raw, json)
Hash identifier:          4MuqwBgy9uIQt9P8dSoFPdMQ6huirq2W/eKXtUQNhuw=
Subject key identifier:   3E:6E:79:82:4F:14:E3:41:17:53:ED:A4:01:4C:AC:EB:E6:5E:11:D0
Certificate issuer:       /CN=0F728B914670434DCF5633E81E2B8721DF75CEB8
Certificate serial:       0ADC67AD5EEF9ECFDD5FB6D753AED948F789DFEB
Authority key identifier: 0F:72:8B:91:46:70:43:4D:CF:56:33:E8:1E:2B:87:21:DF:75:CE:B8
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0F728B914670434DCF5633E81E2B8721DF75CEB8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/326130613a363034303a626137323a3a2f34382d3438203d3e20313939353138.roa
Signing time:             Wed 26 Aug 2026 17:54:33 +0000
ROA not before:           Wed 26 Aug 2026 17:49:33 +0000
ROA not after:            Wed 25 Aug 2027 17:54:33 +0000
asID:                     199518
IP address blocks:        2a0a:6040:ba72::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/0F728B914670434DCF5633E81E2B8721DF75CEB8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/0F728B914670434DCF5633E81E2B8721DF75CEB8.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0F728B914670434DCF5633E81E2B8721DF75CEB8.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 19:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:dc:67:ad:5e:ef:9e:cf:dd:5f:b6:d7:53:ae:d9:48:f7:89:df:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F728B914670434DCF5633E81E2B8721DF75CEB8
        Validity
            Not Before: Aug 26 17:49:33 2026 GMT
            Not After : Aug 25 17:54:33 2027 GMT
        Subject: CN=3E6E79824F14E3411753EDA4014CACEBE65E11D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3c:69:fa:c4:89:d1:13:a3:e8:3b:f6:b5:d3:
                    2b:4f:f0:3e:5a:c0:5d:02:06:14:93:d3:29:ec:b2:
                    bc:8f:13:8e:ed:a6:59:3c:17:73:37:70:82:86:9a:
                    68:17:b3:08:7b:1f:f9:60:45:ae:a3:93:6c:12:23:
                    c9:fb:78:91:cf:f3:eb:c3:54:31:31:72:ae:ce:9b:
                    9d:ac:a0:fd:82:a6:c6:90:a7:52:b9:b0:24:2f:6b:
                    61:87:76:72:e9:54:07:3c:8a:99:eb:e4:5f:cc:12:
                    2d:4e:87:eb:27:fe:8c:59:b6:ee:59:8e:83:50:30:
                    12:9e:47:b0:c0:15:2d:12:9f:5a:7c:a7:0a:9d:8f:
                    8b:31:e5:9e:3a:ef:8e:cc:3f:20:69:a0:eb:cd:ae:
                    73:e6:fe:a8:9d:2c:92:ed:5a:83:59:54:02:22:29:
                    58:00:8c:8a:b5:f0:12:8e:b7:1e:6d:9d:ce:5a:4c:
                    4d:bf:14:90:bd:49:44:f9:96:e5:f3:53:56:82:e5:
                    c6:4c:fa:58:5e:e3:3f:4b:6e:99:4c:4b:cb:7d:bb:
                    ec:66:20:81:ef:c9:01:d4:ce:5a:f0:5f:ce:60:57:
                    17:55:03:34:cf:7a:54:95:fb:ff:01:26:62:44:06:
                    ae:23:d3:43:50:d2:fd:cf:18:d1:f4:10:bb:61:c0:
                    3c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:6E:79:82:4F:14:E3:41:17:53:ED:A4:01:4C:AC:EB:E6:5E:11:D0
            X509v3 Authority Key Identifier:
                keyid:0F:72:8B:91:46:70:43:4D:CF:56:33:E8:1E:2B:87:21:DF:75:CE:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/0F728B914670434DCF5633E81E2B8721DF75CEB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0F728B914670434DCF5633E81E2B8721DF75CEB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/326130613a363034303a626137323a3a2f34382d3438203d3e20313939353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:ba72::/48

    Signature Algorithm: sha256WithRSAEncryption
         9c:52:78:54:62:e5:ef:da:6b:a2:13:7e:fd:f3:ff:50:15:6e:
         54:e7:26:fc:7e:f1:9e:0d:93:7e:e7:a7:55:80:92:56:a6:7f:
         7d:f0:85:ec:de:75:0a:a7:93:4d:aa:aa:f2:68:3d:c3:f0:e8:
         c3:9d:a6:c8:f8:83:56:b2:c7:a1:dc:af:2f:d2:6a:1c:36:f4:
         27:da:3c:18:60:98:5d:44:75:ac:99:8b:ef:43:7c:1a:49:19:
         b4:7d:3c:1a:09:aa:3e:0a:b3:c3:f6:e7:12:97:f8:dd:a8:e7:
         bc:1e:23:06:ec:b3:05:55:ed:18:6d:25:af:5c:cc:56:1c:a3:
         46:85:a1:1e:ae:1d:2a:3d:b5:53:d2:9e:af:7b:24:a3:cf:73:
         f1:e8:6d:4a:73:cf:09:2c:55:e7:16:97:3a:6e:54:37:8f:0b:
         46:81:9f:13:03:2d:bb:58:8f:d7:dd:13:8b:5f:4e:ca:17:f3:
         e7:d6:bb:c2:a0:8c:7a:b4:54:11:bd:22:cd:35:a0:1a:5a:99:
         71:fc:3f:d0:28:d6:85:cd:5a:d0:f4:7b:af:c9:df:f9:7e:f1:
         3f:0b:91:d1:8c:00:9b:b7:4c:45:b4:c5:52:9c:5f:f9:26:d1:
         9a:b3:19:6d:fb:64:4d:f8:a2:aa:92:c0:94:81:9a:77:cc:b2:
         c1:cc:d1:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:50:47 2026 by rpki-client