Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f22f67a4-f085-4d68-96ee-c1bf49926241/0/326130363a313238353a3a2f33322d3332203d3e20323036393831.roa
File:                     326130363a313238353a3a2f33322d3332203d3e20323036393831.roa (raw, json)
Hash identifier:          egrN8k6Xk0Kwig5ye5zQFDYGrtcNNmET1Xfnp7uE4Hk=
Subject key identifier:   51:E4:49:D2:D1:EB:86:98:55:C9:B4:3A:A9:B5:95:C1:6B:84:1C:AB
Certificate issuer:       /CN=544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8
Certificate serial:       52D86A137513450A0B61545D8AC0BF18A592A90C
Authority key identifier: 54:4B:D5:A1:9A:1C:B1:A9:4E:1A:4B:76:B0:DF:45:55:F1:BB:A1:D8
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f22f67a4-f085-4d68-96ee-c1bf49926241/0/326130363a313238353a3a2f33322d3332203d3e20323036393831.roa
Signing time:             Sun 22 Feb 2026 00:58:07 +0000
ROA not before:           Sun 22 Feb 2026 00:53:07 +0000
ROA not after:            Sun 21 Feb 2027 00:58:07 +0000
asID:                     206981
IP address blocks:        2a06:1285::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/f22f67a4-f085-4d68-96ee-c1bf49926241/0/544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/f22f67a4-f085-4d68-96ee-c1bf49926241/0/544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 23 Feb 2026 18:22:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:d8:6a:13:75:13:45:0a:0b:61:54:5d:8a:c0:bf:18:a5:92:a9:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8
        Validity
            Not Before: Feb 22 00:53:07 2026 GMT
            Not After : Feb 21 00:58:07 2027 GMT
        Subject: CN=51E449D2D1EB869855C9B43AA9B595C16B841CAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f1:58:35:04:d7:39:5d:24:52:a6:31:a8:56:
                    ca:31:51:60:52:56:8a:e1:39:74:ad:48:97:6b:f9:
                    1e:10:76:23:bd:59:ea:86:b4:b9:1e:ab:74:dc:eb:
                    f0:32:ac:c9:c1:c1:6a:34:88:77:3e:a8:60:aa:01:
                    94:0c:5b:86:21:c4:f2:a1:5c:e5:08:62:35:50:0f:
                    f0:eb:5f:bb:f3:9b:1b:c1:ed:0e:49:50:53:cf:f5:
                    c5:55:0b:50:60:20:4b:ad:ff:a3:f0:4b:1a:27:25:
                    74:ca:b5:e4:9e:70:87:5f:79:05:c7:30:e1:e8:47:
                    6e:21:4a:df:8d:a9:5e:a6:11:d2:74:16:4e:c8:b4:
                    6d:7f:8e:67:35:a4:26:2a:2c:97:ee:78:78:ab:72:
                    e4:fb:bd:d4:94:f7:99:70:7c:bf:5d:e3:3b:22:21:
                    23:2b:c9:92:a8:ab:d9:c6:33:4a:79:42:16:de:0a:
                    fc:a6:cb:58:24:42:92:e3:1e:bb:1e:c4:5d:24:b2:
                    4d:7e:36:3b:57:e4:b1:68:9f:80:a8:f3:0f:b4:aa:
                    80:34:c2:1f:2d:ef:ba:95:fe:f8:4c:fc:f1:e0:91:
                    30:6d:89:71:21:f5:cb:e7:b5:dc:f8:59:e4:79:18:
                    a5:ff:76:f1:80:20:d4:a9:a2:84:f3:8a:d7:e0:c9:
                    fa:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:E4:49:D2:D1:EB:86:98:55:C9:B4:3A:A9:B5:95:C1:6B:84:1C:AB
            X509v3 Authority Key Identifier:
                keyid:54:4B:D5:A1:9A:1C:B1:A9:4E:1A:4B:76:B0:DF:45:55:F1:BB:A1:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f22f67a4-f085-4d68-96ee-c1bf49926241/0/544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f22f67a4-f085-4d68-96ee-c1bf49926241/0/326130363a313238353a3a2f33322d3332203d3e20323036393831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1285::/32

    Signature Algorithm: sha256WithRSAEncryption
         6f:fe:a2:8d:de:4f:a6:46:50:76:44:16:ed:3d:f8:76:30:14:
         0b:65:4e:14:9d:23:38:7d:71:7c:fd:ea:ec:44:77:58:b9:5d:
         ba:81:21:78:22:b1:7e:e8:8e:64:85:d9:ca:51:9d:65:15:80:
         3b:08:ac:77:48:fb:a8:fa:78:ec:b1:51:4e:3a:4c:80:ba:c3:
         3a:8a:93:7b:ef:99:da:02:e3:d8:f0:a6:70:36:99:89:76:3c:
         df:b2:12:8a:ba:10:71:86:e9:13:91:ba:82:20:87:c8:11:a8:
         1b:18:93:ae:05:19:17:0d:cf:8b:42:e1:3f:f4:d4:c7:1e:54:
         59:a5:25:9a:be:6d:44:2e:ec:61:40:15:66:58:f9:7e:52:14:
         16:83:53:f5:79:d3:d9:6b:68:46:d6:fd:b2:39:1d:08:4d:78:
         7d:bf:30:56:18:6f:43:69:8f:13:ba:ef:3e:c0:27:ba:2c:28:
         33:f6:dd:09:7e:30:d1:5e:96:51:94:da:69:44:72:be:1a:21:
         8d:42:8b:44:28:96:e5:c8:0b:12:0b:3c:94:e7:9c:c3:07:2f:
         78:28:72:34:10:d2:8b:5c:31:1e:5d:82:3e:ed:62:57:9f:8a:
         66:3c:7e:c3:bd:84:18:15:f9:2d:10:d1:bb:34:31:73:3b:13:
         fc:bd:e1:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 06:40:04 2026 by rpki-client