Route Origin Authorization

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_5d8f57cb83a144edac4b55b1a88b34d6/0/326131313a663263303a666666353a3a2f34382d3438203d3e20323037383835.roa
File:                     326131313a663263303a666666353a3a2f34382d3438203d3e20323037383835.roa (raw, json)
Hash identifier:          Tqs/Uven3D9nCKjW+RiYcVI9RGP1R6iRVeRDkHWBtqs=
Subject key identifier:   9A:AF:CE:EA:69:5B:4D:AE:88:71:FB:16:46:50:EC:EA:1B:2B:C8:7D
Certificate issuer:       /CN=B50D92304CA867525C648A07380EA065FD352DEC
Certificate serial:       302DA3D9EA28AA0FC1662F82A769A643725F03B0
Authority key identifier: B5:0D:92:30:4C:A8:67:52:5C:64:8A:07:38:0E:A0:65:FD:35:2D:EC
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B50D92304CA867525C648A07380EA065FD352DEC.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_5d8f57cb83a144edac4b55b1a88b34d6/0/326131313a663263303a666666353a3a2f34382d3438203d3e20323037383835.roa
Signing time:             Sun 10 May 2026 20:13:59 +0000
ROA not before:           Sun 10 May 2026 20:08:59 +0000
ROA not after:            Sun 09 May 2027 20:13:59 +0000
asID:                     207885
IP address blocks:        2a11:f2c0:fff5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_5d8f57cb83a144edac4b55b1a88b34d6/0/B50D92304CA867525C648A07380EA065FD352DEC.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_5d8f57cb83a144edac4b55b1a88b34d6/0/B50D92304CA867525C648A07380EA065FD352DEC.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B50D92304CA867525C648A07380EA065FD352DEC.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 07:29:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:2d:a3:d9:ea:28:aa:0f:c1:66:2f:82:a7:69:a6:43:72:5f:03:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B50D92304CA867525C648A07380EA065FD352DEC
        Validity
            Not Before: May 10 20:08:59 2026 GMT
            Not After : May  9 20:13:59 2027 GMT
        Subject: CN=9AAFCEEA695B4DAE8871FB164650ECEA1B2BC87D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:9d:31:e0:11:e6:79:23:26:1f:80:cf:a0:c8:
                    88:c6:b8:d5:1f:0b:5d:0c:29:f7:43:f6:6e:ff:29:
                    6e:bf:78:94:dd:a6:83:d3:7d:2a:9c:00:c9:3e:b8:
                    16:f8:d1:5d:23:6b:86:b5:68:a6:9c:b3:e5:04:77:
                    02:96:aa:78:86:b9:5d:9d:e5:9e:55:ec:eb:7c:32:
                    0d:b9:fd:bc:53:8c:11:fc:2f:fd:62:41:29:35:b4:
                    8f:2c:60:28:0d:9a:42:18:45:25:42:cf:f1:44:10:
                    f4:22:2d:41:2c:28:24:7c:4a:56:4c:a7:88:68:72:
                    bc:60:da:5e:e1:84:df:f8:b5:19:2d:f8:83:1b:a6:
                    6e:ea:59:2d:3d:4a:0d:f9:49:ed:82:40:f7:1f:07:
                    d1:47:64:1f:a5:6f:d8:c2:52:d9:68:3e:d5:f3:57:
                    aa:8a:be:fe:d9:2f:ea:e7:45:26:4e:df:dc:e5:5c:
                    af:38:4a:b4:11:74:4c:4f:c1:b0:89:31:16:68:27:
                    86:82:ff:7b:78:b3:cd:e2:b4:48:d7:fa:47:6c:15:
                    be:35:33:ad:bb:97:a4:3e:5c:f1:12:9a:e2:dc:a3:
                    86:9d:be:37:63:1e:97:61:99:c5:b4:50:f4:e6:df:
                    27:bf:e0:ea:53:d6:d2:bd:a7:6b:51:c8:50:47:11:
                    c2:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:AF:CE:EA:69:5B:4D:AE:88:71:FB:16:46:50:EC:EA:1B:2B:C8:7D
            X509v3 Authority Key Identifier:
                keyid:B5:0D:92:30:4C:A8:67:52:5C:64:8A:07:38:0E:A0:65:FD:35:2D:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5d8f57cb83a144edac4b55b1a88b34d6/0/B50D92304CA867525C648A07380EA065FD352DEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B50D92304CA867525C648A07380EA065FD352DEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5d8f57cb83a144edac4b55b1a88b34d6/0/326131313a663263303a666666353a3a2f34382d3438203d3e20323037383835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:f2c0:fff5::/48

    Signature Algorithm: sha256WithRSAEncryption
         5e:2e:7d:62:09:de:69:80:0b:28:06:c4:11:2c:4a:98:72:be:
         db:b0:a7:cf:64:07:e3:5d:73:e8:eb:d9:b0:59:a8:0e:c5:3e:
         09:fd:a1:ab:77:57:b8:7d:d3:0a:0f:b1:8e:71:54:77:15:89:
         24:13:9c:29:a7:3d:c5:1c:cd:1f:fa:4e:1b:64:94:c6:30:69:
         83:44:e4:88:71:4a:1f:e3:19:a6:86:28:fd:3e:3d:5f:da:62:
         e0:0f:e1:cd:02:5b:2d:14:ec:67:23:33:23:03:c6:0f:5e:47:
         49:09:34:a5:92:c7:8c:3d:33:ac:c4:36:7c:94:5d:85:8e:08:
         06:c7:3a:c3:d6:51:21:a9:1f:23:37:38:58:3a:56:7a:f7:7a:
         b6:29:66:e2:5b:f8:83:58:60:34:9a:0e:12:c5:62:c2:df:df:
         37:3d:f7:82:52:a5:d0:31:ed:3a:4e:69:a1:ac:8a:91:db:69:
         79:10:7d:10:17:27:5d:1b:4d:a8:66:91:06:a0:5d:a9:15:82:
         cb:6e:ea:e7:0a:0b:0a:5b:42:97:ef:1b:dd:b8:e7:7a:ab:87:
         e6:5a:05:5d:50:88:ad:bd:28:09:cd:51:87:79:b9:cf:dc:c7:
         ee:41:c0:e4:48:e5:28:1a:33:57:f0:0f:a4:72:0f:da:70:c2:
         22:0e:f4:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:14:45 2026 by rpki-client