Route Origin Authorization

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/0/326131313a663263303a666530303a3a2f34302d3430203d3e20323130353631.roa
File:                     326131313a663263303a666530303a3a2f34302d3430203d3e20323130353631.roa (raw, json)
Hash identifier:          Hq5f8G1nXLPJf5XUjwuGiCIZJ1kmb0lyWR7N1FLLYG4=
Subject key identifier:   68:36:29:C9:D2:52:47:76:2D:E5:D9:E7:80:0E:A3:D0:C2:56:8F:C2
Certificate issuer:       /CN=44C4C913D58F5EF847996241E969B60A1E3F1389
Certificate serial:       49EFA43C9F78C273F6DEDE4BFB732064623584C8
Authority key identifier: 44:C4:C9:13:D5:8F:5E:F8:47:99:62:41:E9:69:B6:0A:1E:3F:13:89
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/44C4C913D58F5EF847996241E969B60A1E3F1389.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/0/326131313a663263303a666530303a3a2f34302d3430203d3e20323130353631.roa
Signing time:             Sun 10 May 2026 18:13:55 +0000
ROA not before:           Sun 10 May 2026 18:08:55 +0000
ROA not after:            Sun 09 May 2027 18:13:55 +0000
asID:                     210561
IP address blocks:        2a11:f2c0:fe00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/0/44C4C913D58F5EF847996241E969B60A1E3F1389.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/0/44C4C913D58F5EF847996241E969B60A1E3F1389.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/44C4C913D58F5EF847996241E969B60A1E3F1389.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 06:05:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:ef:a4:3c:9f:78:c2:73:f6:de:de:4b:fb:73:20:64:62:35:84:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44C4C913D58F5EF847996241E969B60A1E3F1389
        Validity
            Not Before: May 10 18:08:55 2026 GMT
            Not After : May  9 18:13:55 2027 GMT
        Subject: CN=683629C9D25247762DE5D9E7800EA3D0C2568FC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d0:c1:aa:dd:b3:cc:f3:cd:73:3b:b0:dc:d7:
                    95:40:ad:9d:e8:16:34:88:d3:9a:aa:d8:d7:5e:4e:
                    e7:3c:5c:90:86:77:09:15:7c:5e:b9:17:6a:ba:1a:
                    80:28:09:9a:04:19:ad:1c:e4:e4:d9:14:87:08:91:
                    ab:37:c0:d9:dd:7e:a5:6d:f6:7f:10:c2:f6:1d:b9:
                    5e:37:95:02:76:6c:d0:5b:1a:22:37:99:0e:fe:49:
                    4f:b3:dd:6c:92:b7:dd:80:56:d4:77:e8:18:cc:2a:
                    18:7c:06:10:7d:ba:9d:f9:f1:ec:80:3d:e3:e3:16:
                    6c:a3:df:e1:8d:de:32:6c:c8:d3:15:cd:4d:04:b8:
                    28:89:1d:bf:51:82:6b:e6:e2:a4:ff:6e:60:f5:5b:
                    95:18:63:82:f1:f8:48:d1:99:39:54:dd:97:c0:a5:
                    5d:8a:04:7d:5d:7f:22:d4:9e:62:5d:77:45:a4:d0:
                    02:f8:f5:a1:57:e8:aa:9a:85:d4:21:12:2e:33:e3:
                    b6:55:76:d6:51:f6:42:b2:ec:cb:9f:e3:92:59:d8:
                    bb:21:54:73:e6:00:5b:ab:11:e3:fd:f0:67:fc:3d:
                    5f:ba:21:4b:0e:15:3b:7d:b9:f7:4b:cf:93:e4:0e:
                    5b:d6:26:30:06:c4:ae:db:d8:c0:8b:ee:ed:eb:c0:
                    b5:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:36:29:C9:D2:52:47:76:2D:E5:D9:E7:80:0E:A3:D0:C2:56:8F:C2
            X509v3 Authority Key Identifier:
                keyid:44:C4:C9:13:D5:8F:5E:F8:47:99:62:41:E9:69:B6:0A:1E:3F:13:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/0/44C4C913D58F5EF847996241E969B60A1E3F1389.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/44C4C913D58F5EF847996241E969B60A1E3F1389.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/0/326131313a663263303a666530303a3a2f34302d3430203d3e20323130353631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:f2c0:fe00::/40

    Signature Algorithm: sha256WithRSAEncryption
         24:c0:2c:c5:4d:fa:27:3c:45:c1:8a:d4:56:1d:6a:1e:0c:a9:
         34:25:ed:9c:1a:79:3b:a3:c6:44:b9:e2:db:2a:1d:65:aa:b7:
         2b:9a:fd:aa:79:e8:33:79:c2:93:d5:e6:88:5e:3b:e1:2c:81:
         29:82:00:47:ea:86:0d:41:dd:db:a1:1c:06:b4:fc:e1:2e:38:
         36:8f:93:6b:e2:0c:77:af:35:68:f8:24:c2:57:7e:58:2d:2a:
         0c:3b:1d:cf:75:cd:5c:e2:34:d9:bc:a0:b3:8c:57:98:39:6a:
         21:55:da:83:f7:d8:33:29:57:dc:ee:bf:aa:9e:69:50:ce:01:
         78:88:10:f7:41:43:47:8d:58:03:60:ad:a7:02:16:06:fd:64:
         90:15:f2:42:de:fb:31:fe:d9:b9:44:b5:8f:73:01:d4:c4:44:
         3e:3c:be:6f:fc:60:50:e8:8c:12:72:6d:c3:cd:2a:92:31:cf:
         60:51:1a:5d:c9:ff:d7:9c:0b:e1:48:bd:85:7e:c9:92:83:85:
         50:ff:11:db:ba:ef:26:05:ba:5d:96:12:a5:c3:28:78:72:cf:
         dc:52:18:05:dd:91:69:11:32:75:0b:d2:0d:43:68:79:c4:49:
         f6:67:2d:3b:13:70:a4:57:5d:f7:61:bb:23:7b:76:f2:d4:55:
         41:26:f6:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:33:15 2026 by rpki-client