Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f22f67a4-f085-4d68-96ee-c1bf49926241/0/326130363a313238353a646561643a3a2f34382d3438203d3e20323036393831.roa
File:                     326130363a313238353a646561643a3a2f34382d3438203d3e20323036393831.roa (raw, json)
Hash identifier:          /MFLzAsvOCJeLOEWlbPKnenIdyo3QrpeZg15YJwkcZI=
Subject key identifier:   C5:6A:B2:51:C8:C9:90:F2:C7:1D:92:57:24:C1:00:E9:D9:1A:26:8C
Certificate issuer:       /CN=544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8
Certificate serial:       7425141FD779F8E200750A4392132C12631CEC1B
Authority key identifier: 54:4B:D5:A1:9A:1C:B1:A9:4E:1A:4B:76:B0:DF:45:55:F1:BB:A1:D8
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f22f67a4-f085-4d68-96ee-c1bf49926241/0/326130363a313238353a646561643a3a2f34382d3438203d3e20323036393831.roa
Signing time:             Sun 22 Feb 2026 01:05:24 +0000
ROA not before:           Sun 22 Feb 2026 01:00:24 +0000
ROA not after:            Sun 21 Feb 2027 01:05:24 +0000
asID:                     206981
IP address blocks:        2a06:1285:dead::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/f22f67a4-f085-4d68-96ee-c1bf49926241/0/544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/f22f67a4-f085-4d68-96ee-c1bf49926241/0/544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 23 Feb 2026 18:22:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:25:14:1f:d7:79:f8:e2:00:75:0a:43:92:13:2c:12:63:1c:ec:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8
        Validity
            Not Before: Feb 22 01:00:24 2026 GMT
            Not After : Feb 21 01:05:24 2027 GMT
        Subject: CN=C56AB251C8C990F2C71D925724C100E9D91A268C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:32:c0:36:73:34:4d:61:1b:66:26:30:71:4c:
                    d9:c8:a1:58:ab:ab:9c:ea:89:c1:13:59:df:e0:cb:
                    bc:f4:5c:43:15:23:62:e4:21:77:0d:af:17:5e:c3:
                    52:c1:bd:6f:c9:34:18:9f:d9:26:95:56:d3:41:3e:
                    50:f6:32:5c:63:ca:f0:37:30:4d:e2:5e:fe:ec:3e:
                    3c:c5:39:f8:eb:a0:8a:02:33:13:a6:f3:a5:db:f9:
                    ff:da:19:ee:5a:04:8f:66:ae:b4:ef:3f:e8:e6:ae:
                    13:5a:b4:88:61:10:9c:f5:29:60:de:55:a6:fb:56:
                    53:b1:86:73:74:ea:fa:cb:44:55:56:7d:dd:5c:79:
                    3a:66:a2:24:90:49:3e:b6:9e:08:bf:3c:c7:63:93:
                    6c:3b:50:59:e8:ae:16:a2:4b:1c:db:ac:5e:e9:2f:
                    74:57:a2:bd:4f:43:96:b2:67:3a:64:84:15:51:6f:
                    c2:20:88:a4:4e:7e:5e:57:59:db:ca:c2:93:09:25:
                    b6:cf:d0:d5:7f:02:c8:b0:33:d0:de:78:c7:3a:02:
                    17:c2:34:12:ae:f2:50:36:7b:82:dd:d3:4f:e8:89:
                    8b:d7:ea:42:d8:b0:1a:24:e7:91:64:05:32:c4:04:
                    77:d5:d7:22:3d:28:2b:77:6b:62:9a:a3:19:9f:4f:
                    46:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:6A:B2:51:C8:C9:90:F2:C7:1D:92:57:24:C1:00:E9:D9:1A:26:8C
            X509v3 Authority Key Identifier:
                keyid:54:4B:D5:A1:9A:1C:B1:A9:4E:1A:4B:76:B0:DF:45:55:F1:BB:A1:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f22f67a4-f085-4d68-96ee-c1bf49926241/0/544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/544BD5A19A1CB1A94E1A4B76B0DF4555F1BBA1D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f22f67a4-f085-4d68-96ee-c1bf49926241/0/326130363a313238353a646561643a3a2f34382d3438203d3e20323036393831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1285:dead::/48

    Signature Algorithm: sha256WithRSAEncryption
         5f:b7:9f:14:e9:51:95:70:10:07:61:bd:3e:d6:b5:3f:eb:dc:
         7b:ba:30:f8:23:0d:81:f8:3d:0a:cd:89:eb:6a:52:5a:ef:b2:
         16:31:df:29:d8:63:20:ce:20:24:b1:bc:0e:17:04:9d:e8:d8:
         7e:7e:04:55:ff:8d:d8:a6:d1:66:22:00:fb:7a:79:ee:b3:88:
         c6:c6:30:69:23:bf:81:69:2b:2b:7f:19:04:d5:0b:64:42:e6:
         f2:18:bd:8e:27:70:2a:89:6a:d0:b9:82:20:5b:46:6f:f4:6b:
         51:77:a8:91:d3:ba:d4:9b:d2:1e:1b:f8:2f:96:62:05:61:ad:
         6d:7c:ea:bf:32:43:9b:86:23:be:cf:ae:63:a1:f6:6a:5e:cc:
         22:5e:ac:5d:d1:e9:2d:8c:9a:5b:0b:fe:58:11:54:f2:0c:e9:
         3a:42:77:6d:17:99:a7:cf:83:7f:93:3e:42:cd:d1:80:d8:04:
         52:03:26:0f:9e:0c:8f:bc:7f:a6:86:f9:55:df:d5:b5:ed:83:
         a7:62:e0:ba:c6:92:cd:0f:a7:a2:a8:4b:02:cd:d5:3e:83:a4:
         22:1f:06:db:71:25:21:f1:ae:1b:22:fb:4d:a5:41:19:5b:a9:
         f3:7a:ac:52:b8:39:47:14:d9:3e:5f:f2:32:49:a2:f9:06:87:
         f6:5b:19:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 06:40:03 2026 by rpki-client