Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/326130613a363034303a626162613a3a2f34382d3438203d3e20313939353138.roa
File:                     326130613a363034303a626162613a3a2f34382d3438203d3e20313939353138.roa (raw, json)
Hash identifier:          ar7Y00UY3ufrm6UZpfgTHbTZkbGAoNVyqXFlniq5sWY=
Subject key identifier:   30:65:C1:17:61:8C:0B:0B:4C:A0:D6:7B:19:56:40:D0:86:62:6A:2B
Certificate issuer:       /CN=0F728B914670434DCF5633E81E2B8721DF75CEB8
Certificate serial:       52259C0199187EA85DE3555759A00DDFC74A5716
Authority key identifier: 0F:72:8B:91:46:70:43:4D:CF:56:33:E8:1E:2B:87:21:DF:75:CE:B8
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0F728B914670434DCF5633E81E2B8721DF75CEB8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/326130613a363034303a626162613a3a2f34382d3438203d3e20313939353138.roa
Signing time:             Thu 05 Feb 2026 02:23:38 +0000
ROA not before:           Thu 05 Feb 2026 02:18:38 +0000
ROA not after:            Thu 04 Feb 2027 02:23:38 +0000
asID:                     199518
IP address blocks:        2a0a:6040:baba::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/0F728B914670434DCF5633E81E2B8721DF75CEB8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/0F728B914670434DCF5633E81E2B8721DF75CEB8.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0F728B914670434DCF5633E81E2B8721DF75CEB8.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 24 Feb 2026 02:48:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:25:9c:01:99:18:7e:a8:5d:e3:55:57:59:a0:0d:df:c7:4a:57:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F728B914670434DCF5633E81E2B8721DF75CEB8
        Validity
            Not Before: Feb  5 02:18:38 2026 GMT
            Not After : Feb  4 02:23:38 2027 GMT
        Subject: CN=3065C117618C0B0B4CA0D67B195640D086626A2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:09:46:e2:7e:31:1a:c1:29:7a:d4:5d:08:65:
                    d2:1b:b0:41:a0:26:33:a4:90:e3:e9:1c:d1:3f:41:
                    6d:ef:58:7a:ad:2d:09:6a:26:c8:00:bf:2f:07:cd:
                    18:9a:07:01:25:35:0b:29:db:00:1e:69:d9:d2:da:
                    a0:38:26:cc:0c:54:83:70:98:57:64:f4:39:37:dc:
                    63:53:ee:af:f8:92:fb:13:f9:0d:fc:f1:bb:26:e2:
                    17:cb:10:bc:c3:58:7b:f2:80:2f:84:14:b1:e8:aa:
                    ee:cc:dc:23:74:6b:62:e8:39:0c:bf:71:d2:a9:aa:
                    a0:2b:a8:e9:83:a1:a7:ab:c5:4c:e1:d6:43:dd:5b:
                    c6:a7:d1:71:2b:00:fe:55:28:c7:d9:4a:d8:6b:89:
                    84:84:39:6d:85:23:03:de:17:42:5b:6b:b8:df:80:
                    e7:3b:24:30:b5:48:48:25:e5:07:2d:1e:f8:df:68:
                    23:69:0b:e8:60:37:76:17:80:d5:1f:db:10:16:ed:
                    cc:06:be:ab:08:09:d3:42:62:c4:db:0f:76:84:81:
                    be:4f:f7:ce:3b:36:20:0e:09:bb:0c:53:df:00:fc:
                    5b:57:9e:29:96:ef:06:b8:49:9f:34:c4:15:3e:18:
                    4a:02:2f:d4:62:cc:1c:62:9f:e3:5f:32:e6:9e:a7:
                    f2:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:65:C1:17:61:8C:0B:0B:4C:A0:D6:7B:19:56:40:D0:86:62:6A:2B
            X509v3 Authority Key Identifier:
                keyid:0F:72:8B:91:46:70:43:4D:CF:56:33:E8:1E:2B:87:21:DF:75:CE:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/0F728B914670434DCF5633E81E2B8721DF75CEB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/0F728B914670434DCF5633E81E2B8721DF75CEB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/11/326130613a363034303a626162613a3a2f34382d3438203d3e20313939353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:baba::/48

    Signature Algorithm: sha256WithRSAEncryption
         04:96:3e:18:1c:ee:34:d1:fb:59:4f:22:56:dc:58:2f:92:b4:
         8d:b6:a8:9c:9a:a4:82:f4:d1:09:2b:c1:d0:fe:a6:64:25:ae:
         cd:6a:07:79:06:82:8b:75:0b:a9:e9:8b:32:28:ea:da:88:25:
         7c:2b:b5:64:40:6a:be:a7:fd:28:01:90:eb:f7:0c:ed:13:45:
         cc:5f:61:a1:30:1f:84:2a:86:cb:d8:5b:f6:76:22:95:86:be:
         ee:00:52:c2:32:ad:f0:82:e2:7d:00:40:dc:19:18:ae:bc:a3:
         60:cf:21:f1:62:f8:ad:33:32:c5:27:4a:e7:9b:b9:d8:a2:6c:
         e9:a0:d4:24:32:f7:d5:0d:56:dc:b1:63:59:3e:2d:e2:ed:ce:
         a3:67:8e:58:da:44:ca:0e:07:31:78:88:41:31:64:7f:0b:90:
         88:52:50:97:fa:6f:d9:73:4e:1e:50:69:30:50:40:6b:85:04:
         fb:0f:cc:a6:89:62:84:e4:03:65:46:12:41:aa:85:17:4a:81:
         4f:0f:a7:65:4f:ab:35:72:ba:45:87:3e:4c:aa:f3:99:c3:f2:
         ac:56:5a:61:93:ab:3e:8e:49:16:57:ae:40:93:33:82:39:ba:
         96:51:99:83:34:19:6e:52:88:9f:97:e8:9b:83:d6:f3:7a:91:
         04:94:6f:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 14:47:54 2026 by rpki-client