Route Origin Authorization

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/326131313a663263303a666663303a3a2f34382d3438203d3e20323035353839.roa
File:                     326131313a663263303a666663303a3a2f34382d3438203d3e20323035353839.roa (raw, json)
Hash identifier:          iB1A9jIxialpDzdT5FG7czmb2AtziEr97OBcvfPBU88=
Subject key identifier:   6E:35:6C:55:AB:92:0C:D1:D0:C5:8C:71:0C:74:A9:80:63:07:11:36
Certificate issuer:       /CN=BBED14E9793905EC1EA5CE10AA03C497D737B115
Certificate serial:       30095E22330E82C664C29EBCE3548A0B64737219
Authority key identifier: BB:ED:14:E9:79:39:05:EC:1E:A5:CE:10:AA:03:C4:97:D7:37:B1:15
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/BBED14E9793905EC1EA5CE10AA03C497D737B115.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/326131313a663263303a666663303a3a2f34382d3438203d3e20323035353839.roa
Signing time:             Sun 10 May 2026 20:14:09 +0000
ROA not before:           Sun 10 May 2026 20:09:09 +0000
ROA not after:            Sun 09 May 2027 20:14:09 +0000
asID:                     205589
IP address blocks:        2a11:f2c0:ffc0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/BBED14E9793905EC1EA5CE10AA03C497D737B115.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/BBED14E9793905EC1EA5CE10AA03C497D737B115.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/BBED14E9793905EC1EA5CE10AA03C497D737B115.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 00:34:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:09:5e:22:33:0e:82:c6:64:c2:9e:bc:e3:54:8a:0b:64:73:72:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBED14E9793905EC1EA5CE10AA03C497D737B115
        Validity
            Not Before: May 10 20:09:09 2026 GMT
            Not After : May  9 20:14:09 2027 GMT
        Subject: CN=6E356C55AB920CD1D0C58C710C74A98063071136
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:79:88:db:f1:bd:b7:00:d1:6c:6c:3b:db:98:
                    40:80:a6:57:f8:27:d6:c6:d7:b6:d7:4b:cb:d5:21:
                    ba:60:4f:f5:91:09:41:fe:e9:15:bd:b4:48:0d:53:
                    9c:96:5a:ac:36:ae:7b:6a:c2:1c:d4:9f:4e:24:38:
                    02:bf:4c:32:c1:34:34:32:f8:80:f4:f3:25:29:e4:
                    ce:c6:70:1e:de:04:42:f6:69:23:fc:5b:c6:d2:e6:
                    9b:02:6c:38:8a:d4:59:0d:47:24:28:6f:b7:89:e3:
                    f1:86:49:79:3b:2f:d4:50:5c:14:1c:17:11:27:94:
                    1d:c2:c7:14:0a:69:3f:2a:6d:92:cb:49:de:38:ac:
                    5c:4d:b0:38:48:b7:e1:c0:48:ba:61:fb:98:73:62:
                    9e:61:6a:80:88:b1:fb:d3:c2:8b:d7:32:68:b7:ce:
                    0c:ff:f4:54:d1:03:b1:c5:66:43:9e:c1:40:b9:8c:
                    fd:66:89:b0:2b:50:ef:99:9a:b9:f9:38:a6:f1:3a:
                    6f:e0:27:62:09:85:6a:b2:0f:03:1c:ae:50:a3:4e:
                    74:6e:14:12:c8:b9:3c:55:d0:c5:ea:33:33:26:e2:
                    51:27:a9:e7:69:70:e3:c9:d1:da:29:fe:05:4e:2d:
                    b1:c4:a7:0c:19:f5:cc:12:21:6d:8c:04:d2:e2:10:
                    e8:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:35:6C:55:AB:92:0C:D1:D0:C5:8C:71:0C:74:A9:80:63:07:11:36
            X509v3 Authority Key Identifier:
                keyid:BB:ED:14:E9:79:39:05:EC:1E:A5:CE:10:AA:03:C4:97:D7:37:B1:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/BBED14E9793905EC1EA5CE10AA03C497D737B115.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/BBED14E9793905EC1EA5CE10AA03C497D737B115.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/326131313a663263303a666663303a3a2f34382d3438203d3e20323035353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:f2c0:ffc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         a8:0f:1e:33:ce:f4:ec:11:08:ac:5e:b6:15:27:1e:14:c9:56:
         74:06:76:68:c8:02:cd:f4:94:01:8e:ec:88:b4:4a:84:5e:d4:
         18:52:a6:33:88:d8:cb:ad:be:ba:1d:70:5c:d5:b6:2c:5f:b9:
         57:65:8b:ec:95:75:97:86:76:3d:20:fc:94:a4:b3:e7:d2:82:
         fa:f9:00:a0:2e:ae:83:35:40:34:81:1f:6e:01:82:6c:98:cb:
         bd:55:84:0c:8f:5d:c2:d1:2c:ae:9b:89:d6:94:22:1d:8b:86:
         84:73:b3:15:f5:a6:ef:09:fd:20:e4:92:9e:3f:90:f5:e3:43:
         a2:6b:b6:05:f6:f6:d5:8b:04:b5:06:47:94:74:31:49:1c:52:
         63:ca:11:24:66:f9:a2:05:11:23:5c:be:07:5f:39:c6:c0:de:
         dd:bf:80:66:01:8d:42:6f:26:c8:1d:5b:d8:f0:93:94:90:31:
         a1:6d:cf:74:c0:2c:f2:35:d4:52:8f:06:8e:50:f1:3b:9e:19:
         d9:ec:75:18:47:94:68:da:9e:07:40:01:3d:b8:db:66:7f:aa:
         98:96:85:f4:cf:59:9a:f5:3f:3a:da:d6:3e:98:b9:fa:3f:01:
         04:c6:32:eb:41:c3:ff:a2:4d:a9:d1:01:88:4f:c1:46:1d:96:
         26:33:e7:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:57:29 2026 by rpki-client