Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/326130353a646663313a393331303a3a2f34342d3434203d3e203133333335.roa
File:                     326130353a646663313a393331303a3a2f34342d3434203d3e203133333335.roa (raw, json)
Hash identifier:          NpaHG147shGFSkZHPzJpCUsRtcuhxcPetmAYoibuKRg=
Subject key identifier:   01:EE:80:B9:C1:62:C6:D5:C6:EC:AF:97:EF:F5:62:08:36:6D:17:6E
Certificate issuer:       /CN=475A3BFA09614E07BE0567B1FB15110F45F894EB
Certificate serial:       418B726CC5F62249D6D343CB14CDBF5E9D2D9CF4
Authority key identifier: 47:5A:3B:FA:09:61:4E:07:BE:05:67:B1:FB:15:11:0F:45:F8:94:EB
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/326130353a646663313a393331303a3a2f34342d3434203d3e203133333335.roa
Signing time:             Sun 26 Apr 2026 14:53:02 +0000
ROA not before:           Sun 26 Apr 2026 14:48:02 +0000
ROA not after:            Sun 25 Apr 2027 14:53:02 +0000
asID:                     13335
IP address blocks:        2a05:dfc1:9310::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 17:59:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:8b:72:6c:c5:f6:22:49:d6:d3:43:cb:14:cd:bf:5e:9d:2d:9c:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=475A3BFA09614E07BE0567B1FB15110F45F894EB
        Validity
            Not Before: Apr 26 14:48:02 2026 GMT
            Not After : Apr 25 14:53:02 2027 GMT
        Subject: CN=01EE80B9C162C6D5C6ECAF97EFF56208366D176E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:a0:1a:e9:ea:9c:94:55:bf:3b:0b:ca:03:c0:
                    a7:cb:3f:81:17:c4:d3:48:20:92:a7:4f:d1:66:d6:
                    34:7b:2b:82:c2:24:da:9f:88:c1:30:77:4b:2f:20:
                    2d:d4:9b:cc:04:7f:5a:4d:90:31:db:fb:09:ba:0b:
                    c5:11:bf:8c:c5:07:2f:3f:5d:86:c8:60:19:4d:d3:
                    6f:19:87:35:7c:9a:9a:59:90:0e:66:88:c8:f6:aa:
                    ac:08:b9:8f:20:dd:a9:2a:ac:74:34:28:5e:34:f6:
                    8b:d2:b8:7e:5c:4c:68:d9:76:d2:b4:7b:d7:03:da:
                    77:9f:3c:10:29:fd:3a:30:de:c5:cd:da:15:b0:2f:
                    6d:6f:b2:93:9a:a6:06:3e:c7:f7:eb:9b:71:c6:1c:
                    35:7d:94:a7:43:b4:92:98:54:2b:a1:5c:89:15:4b:
                    78:8c:1e:32:10:6a:fd:8b:77:22:12:38:f1:c0:e2:
                    3c:d3:43:c8:cc:96:f9:6d:e6:75:84:17:e7:19:09:
                    03:2c:b0:1f:94:97:23:f4:4e:0b:d4:55:b2:35:ba:
                    6f:80:a1:55:de:6b:56:72:2a:a4:69:a1:79:4d:70:
                    39:9b:d8:96:dc:8e:21:a9:ee:36:57:b4:55:94:e8:
                    b3:9f:c2:b5:5a:64:15:45:ea:5e:6b:28:50:cf:21:
                    6c:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:EE:80:B9:C1:62:C6:D5:C6:EC:AF:97:EF:F5:62:08:36:6D:17:6E
            X509v3 Authority Key Identifier:
                keyid:47:5A:3B:FA:09:61:4E:07:BE:05:67:B1:FB:15:11:0F:45:F8:94:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/475A3BFA09614E07BE0567B1FB15110F45F894EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/475A3BFA09614E07BE0567B1FB15110F45F894EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/2/326130353a646663313a393331303a3a2f34342d3434203d3e203133333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:9310::/44

    Signature Algorithm: sha256WithRSAEncryption
         af:31:58:ae:9e:39:b9:0c:11:f6:55:9d:2b:b5:18:b9:e7:c9:
         2f:47:04:f4:01:c8:63:d2:5e:8f:58:9e:d4:77:72:0b:4a:e2:
         17:9b:d4:d7:12:e9:60:89:d3:e0:fd:9e:81:da:73:7d:bc:a6:
         54:f1:83:48:6d:25:91:fd:87:7a:93:6e:7e:4c:81:18:7b:a1:
         5e:4b:71:26:95:51:5e:87:ef:b7:1c:63:a5:46:88:bc:f8:64:
         c1:86:a5:22:78:d3:1e:6b:44:73:d3:a5:81:b9:44:bd:a8:53:
         1b:08:de:eb:bc:ff:0a:d8:37:b1:6a:e9:46:07:f3:bf:3e:a0:
         7a:0a:f6:1d:42:9e:cd:58:d9:49:6c:e6:47:3f:2a:19:f4:09:
         e8:a0:e2:d3:b5:e5:d7:39:01:9f:a1:0b:d4:53:66:7d:21:0c:
         5b:48:ca:00:80:a2:b0:d5:2e:19:4b:76:40:6e:a2:29:01:4a:
         ab:77:f9:1d:26:39:51:e4:85:f9:b5:ae:84:52:a8:43:bc:69:
         c9:ef:43:2d:cb:22:68:1f:2b:91:7f:28:8b:c3:18:ae:53:fd:
         c4:10:d5:28:2a:bd:9d:8a:4e:17:d4:9c:57:7c:b6:d9:ce:11:
         c0:de:65:bb:54:ea:3b:41:a9:7f:de:27:d7:3a:6f:c5:63:84:
         60:79:75:b1
-----BEGIN CERTIFICATE-----
MIIFVDCCBDygAwIBAgIUQYtybMX2IknW00PLFM2/Xp0tnPQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDc1QTNCRkEwOTYxNEUwN0JFMDU2N0IxRkIxNTExMEY0
NUY4OTRFQjAeFw0yNjA0MjYxNDQ4MDJaFw0yNzA0MjUxNDUzMDJaMDMxMTAvBgNV
BAMTKDAxRUU4MEI5QzE2MkM2RDVDNkVDQUY5N0VGRjU2MjA4MzY2RDE3NkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmoBrp6pyUVb87C8oDwKfLP4EX
xNNIIJKnT9Fm1jR7K4LCJNqfiMEwd0svIC3Um8wEf1pNkDHb+wm6C8URv4zFBy8/
XYbIYBlN028ZhzV8mppZkA5miMj2qqwIuY8g3akqrHQ0KF409ovSuH5cTGjZdtK0
e9cD2nefPBAp/Tow3sXN2hWwL21vspOapgY+x/frm3HGHDV9lKdDtJKYVCuhXIkV
S3iMHjIQav2LdyISOPHA4jzTQ8jMlvlt5nWEF+cZCQMssB+UlyP0TgvUVbI1um+A
oVXea1ZyKqRpoXlNcDmb2JbcjiGp7jZXtFWU6LOfwrVaZBVF6l5rKFDPIWyrAgMB
AAGjggJeMIICWjAdBgNVHQ4EFgQUAe6AucFixtXG7K+X7/ViCDZtF24wHwYDVR0j
BBgwFoAUR1o7+glhTge+BWex+xURD0X4lOswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjhjZDYyMjQtYTNiMC00NjhlLWFhMzctODJjYTZhM2U5
MjQzLzIvNDc1QTNCRkEwOTYxNEUwN0JFMDU2N0IxRkIxNTExMEY0NUY4OTRFQi5j
cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt
cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS80LzQ3NUEzQkZBMDk2MTRF
MDdCRTA1NjdCMUZCMTUxMTBGNDVGODk0RUIuY2VyMIG1BggrBgEFBQcBCwSBqDCB
pTCBogYIKwYBBQUHMAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l
dC9yZXBvc2l0b3J5LzI4Y2Q2MjI0LWEzYjAtNDY4ZS1hYTM3LTgyY2E2YTNlOTI0
My8yLzMyNjEzMDM1M2E2NDY2NjMzMTNhMzkzMzMxMzAzYTNhMmYzNDM0MmQzNDM0
MjAzZDNlMjAzMTMzMzMzMzM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgXfwZMQMA0GCSqGSIb3DQEB
CwUAA4IBAQCvMViunjm5DBH2VZ0rtRi558kvRwT0Achj0l6PWJ7Ud3ILSuIXm9TX
EulgidPg/Z6B2nN9vKZU8YNIbSWR/Yd6k25+TIEYe6FeS3EmlVFeh++3HGOlRoi8
+GTBhqUieNMea0Rz06WBuUS9qFMbCN7rvP8K2DexaulGB/O/PqB6CvYdQp7NWNlJ
bOZHPyoZ9AnooOLTteXXOQGfoQvUU2Z9IQxbSMoAgKKw1S4ZS3ZAbqIpAUqrd/kd
JjlR5IX5ta6EUqhDvGnJ70MtyyJoHyuRfyiLwxiuU/3EENUoKr2dik4X1JxXfLbZ
zhHA3mW7VOo7Qal/3ifXOm/FY4RgeXWx
-----END CERTIFICATE-----
Generated at Wed May 13 12:02:00 2026 by rpki-client