Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/326131333a633863343a666630303a3a2f34302d313238203d3e20323134373632.roa
File:                     326131333a633863343a666630303a3a2f34302d313238203d3e20323134373632.roa (raw, json)
Hash identifier:          eFBa4OwWuclMBCgU5m433/KeC4fb2SOvKkGDpf2qYGU=
Subject key identifier:   7A:C3:E2:2B:61:87:BC:56:ED:DB:AB:DE:55:84:FC:16:B1:70:35:A2
Certificate issuer:       /CN=1E74494683D8D2A4E029AAD4573928D2A55FA411
Certificate serial:       7B40BF3B488F75432624DC6E0BD2AC881577CC9F
Authority key identifier: 1E:74:49:46:83:D8:D2:A4:E0:29:AA:D4:57:39:28:D2:A5:5F:A4:11
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/326131333a633863343a666630303a3a2f34302d313238203d3e20323134373632.roa
Signing time:             Sat 18 Jul 2026 08:05:38 +0000
ROA not before:           Sat 18 Jul 2026 08:00:38 +0000
ROA not after:            Sat 17 Jul 2027 08:05:38 +0000
asID:                     214762
IP address blocks:        2a13:c8c4:ff00::/40 maxlen: 128
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:40:bf:3b:48:8f:75:43:26:24:dc:6e:0b:d2:ac:88:15:77:cc:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E74494683D8D2A4E029AAD4573928D2A55FA411
        Validity
            Not Before: Jul 18 08:00:38 2026 GMT
            Not After : Jul 17 08:05:38 2027 GMT
        Subject: CN=7AC3E22B6187BC56EDDBABDE5584FC16B17035A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:74:76:ea:fe:4f:53:24:00:15:cc:f9:21:01:
                    7a:62:db:fd:ef:39:25:51:46:33:5b:5c:16:ac:5a:
                    90:42:05:a6:87:4e:fb:f8:3c:2f:bc:65:9c:9c:bc:
                    09:9a:45:66:5e:bd:8b:0d:59:3d:3b:4e:d5:5e:57:
                    b3:39:e6:c8:b2:93:db:03:ed:c6:90:06:8d:06:cd:
                    d3:d1:77:af:05:86:ce:5f:09:26:3d:50:7c:b7:c7:
                    ac:a4:97:e7:79:55:87:77:dc:78:4a:31:49:1a:3a:
                    f3:7d:95:19:7b:a4:7c:36:00:4f:5d:f3:8c:fa:2a:
                    4a:36:c2:5d:27:48:a5:b5:a0:a4:85:7a:ec:bc:02:
                    6f:47:94:19:a6:d1:c8:c5:65:88:66:df:44:be:70:
                    d1:3d:62:0a:a5:8e:28:cd:c1:7d:63:aa:3e:0e:73:
                    7d:f0:8c:3d:3f:1f:e2:ce:8e:76:ae:08:b2:8e:2a:
                    f7:7c:35:71:b5:13:81:48:3b:1a:23:90:d7:82:f7:
                    51:a6:09:a1:a9:97:64:02:30:6a:be:9d:6d:51:62:
                    61:13:f7:6d:fe:0d:59:d8:60:a4:9f:4e:bd:f9:7f:
                    40:21:ea:d7:37:3c:4d:7b:6e:bd:30:da:b3:05:97:
                    e7:93:ac:16:8d:5a:55:53:f7:a5:67:93:f2:41:b3:
                    d5:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:C3:E2:2B:61:87:BC:56:ED:DB:AB:DE:55:84:FC:16:B1:70:35:A2
            X509v3 Authority Key Identifier:
                keyid:1E:74:49:46:83:D8:D2:A4:E0:29:AA:D4:57:39:28:D2:A5:5F:A4:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/1E74494683D8D2A4E029AAD4573928D2A55FA411.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/1E74494683D8D2A4E029AAD4573928D2A55FA411.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/326131333a633863343a666630303a3a2f34302d313238203d3e20323134373632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:c8c4:ff00::/40

    Signature Algorithm: sha256WithRSAEncryption
         b3:3f:88:76:b2:2c:e1:5f:fe:1b:85:b7:3e:9d:19:b6:07:1a:
         39:b7:80:b9:1e:b4:bf:3f:6e:de:92:59:f9:3d:01:8e:79:1b:
         2d:eb:d5:b6:09:2e:95:98:27:84:6b:24:07:3b:12:63:bd:d4:
         29:52:21:f9:e1:5b:c4:84:33:23:e6:a3:65:df:45:97:e1:c9:
         26:24:36:b4:b1:c1:c1:d8:ef:5b:fc:3c:ee:6a:2c:14:c2:5f:
         47:71:75:c8:33:39:22:f4:fc:ee:3e:7e:35:2c:80:b9:22:b7:
         a8:e4:bc:7d:e9:0e:d9:16:10:7c:d8:5f:82:c6:0f:9b:24:1f:
         a7:9a:93:03:f9:6d:2d:db:38:34:3a:be:86:bd:68:ae:d4:91:
         c7:e1:82:0a:61:9c:4f:d6:24:4d:04:e6:39:d2:4f:5d:43:f2:
         54:19:5a:23:c6:fc:40:8e:79:38:96:3b:4c:f6:08:ab:33:d8:
         27:0e:4f:26:88:b3:31:80:43:44:d5:16:db:2d:b1:8e:e2:b9:
         dd:03:6b:62:bc:94:eb:ec:21:4b:be:a8:86:ab:20:6a:96:f2:
         30:68:da:dd:c7:57:95:e5:39:2e:ad:a3:48:c4:bf:6e:50:22:
         86:11:fa:1a:ee:59:a3:0d:60:f0:39:8d:cd:32:19:74:c7:19:
         84:18:4b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:15:44 2026 by rpki-client