Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/326130363a396634313a3330303a3a2f34302d3430203d3e20323134393239.roa
File:                     326130363a396634313a3330303a3a2f34302d3430203d3e20323134393239.roa (raw, json)
Hash identifier:          2IF98WLaAic68Pu908k0h2rFie4r40y3VkB4waaDil0=
Subject key identifier:   C8:CC:4F:69:C3:D1:D1:0D:29:B8:A4:8B:01:7D:D0:43:74:81:89:1C
Certificate issuer:       /CN=06DB699D191D4B0289910C88E99CF94A671142F5
Certificate serial:       5F064BE2D808A4BC2BECFECC936FEDFF6F6E504B
Authority key identifier: 06:DB:69:9D:19:1D:4B:02:89:91:0C:88:E9:9C:F9:4A:67:11:42:F5
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/326130363a396634313a3330303a3a2f34302d3430203d3e20323134393239.roa
Signing time:             Thu 23 Jul 2026 06:34:42 +0000
ROA not before:           Thu 23 Jul 2026 06:29:42 +0000
ROA not after:            Thu 22 Jul 2027 06:34:42 +0000
asID:                     214929
IP address blocks:        2a06:9f41:300::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 01:12:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:06:4b:e2:d8:08:a4:bc:2b:ec:fe:cc:93:6f:ed:ff:6f:6e:50:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06DB699D191D4B0289910C88E99CF94A671142F5
        Validity
            Not Before: Jul 23 06:29:42 2026 GMT
            Not After : Jul 22 06:34:42 2027 GMT
        Subject: CN=C8CC4F69C3D1D10D29B8A48B017DD0437481891C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e3:d6:7a:15:60:45:c0:0c:34:c8:2a:c3:53:
                    bf:8b:c4:ec:26:57:b9:fb:3b:05:3a:c8:fe:fb:72:
                    6a:90:87:83:20:db:43:51:b1:eb:65:bd:1d:a1:6f:
                    f3:84:d4:25:74:97:bf:98:76:85:d5:f2:82:34:5f:
                    91:3b:80:f4:47:8a:85:6d:cb:06:48:a3:77:42:8c:
                    5d:ee:ce:d4:35:bf:1c:b4:bf:5a:82:8d:9d:7d:8c:
                    dc:a3:01:45:f6:bd:53:7d:e7:98:4e:4e:0b:2d:6d:
                    8a:8a:04:e8:c9:c1:6a:e9:e9:2b:86:69:82:f4:30:
                    00:26:1e:62:ea:b9:b1:a6:95:79:1c:43:53:9b:1f:
                    02:60:ef:14:e7:61:d6:e9:be:f0:34:69:4e:fa:23:
                    33:b1:e0:92:9e:f5:38:9e:75:e5:b3:1c:da:e4:2e:
                    55:96:5a:8e:d1:bb:5e:16:1b:59:17:b9:65:91:e7:
                    07:cc:c9:5b:5b:d5:c7:68:8f:66:fe:4a:92:8a:d6:
                    5e:56:9c:20:13:0b:25:1a:fd:14:82:7a:84:cf:bd:
                    3b:af:55:fd:7a:73:8b:f5:a3:84:b5:96:9a:10:9a:
                    13:c5:45:fe:70:89:35:0b:7d:fb:21:3b:f7:c2:13:
                    11:06:b5:11:a3:1a:02:50:5a:be:e8:93:e2:b2:d7:
                    91:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:CC:4F:69:C3:D1:D1:0D:29:B8:A4:8B:01:7D:D0:43:74:81:89:1C
            X509v3 Authority Key Identifier:
                keyid:06:DB:69:9D:19:1D:4B:02:89:91:0C:88:E9:9C:F9:4A:67:11:42:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/326130363a396634313a3330303a3a2f34302d3430203d3e20323134393239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:9f41:300::/40

    Signature Algorithm: sha256WithRSAEncryption
         4e:47:35:78:57:27:05:05:d1:fd:35:95:aa:f3:bc:3a:cc:6c:
         01:80:52:34:63:4c:86:89:0d:18:1f:91:68:e3:92:63:a9:1a:
         cc:15:1b:6c:ec:ed:94:87:fc:06:91:74:ce:98:3c:37:03:f5:
         b2:5d:c0:e8:77:64:9b:c5:00:87:26:e8:9e:83:2d:d6:c8:a0:
         e4:df:ad:26:ee:f0:9b:cf:a3:6e:87:ba:46:96:2a:33:f6:57:
         91:00:d7:47:ef:a2:90:ac:a8:16:71:ef:21:0f:dc:0b:6b:cf:
         a0:4f:61:d6:d6:68:7b:e1:9c:a0:e5:c6:e6:06:b8:d1:57:5f:
         1d:62:f3:2a:9e:cb:a1:a9:dc:52:44:a2:22:a6:55:04:bd:c2:
         9f:24:99:01:63:a4:89:fd:ae:d0:8b:fe:b9:27:9f:bb:df:f4:
         1d:f5:83:10:2d:44:13:ab:c5:62:d0:86:cf:83:c6:85:18:40:
         fc:9f:a4:4e:b0:5f:24:5c:d7:c9:3d:21:ee:b8:46:16:14:02:
         84:c2:58:f4:eb:bd:42:cc:4f:62:21:b3:3b:77:e8:8e:27:7a:
         45:b2:02:f0:9a:26:11:f8:94:a2:5c:53:2c:eb:5c:e1:39:6c:
         d0:a2:54:10:91:de:c6:18:84:ab:45:60:00:08:b5:0d:1f:67:
         d6:92:64:c6
-----BEGIN CERTIFICATE-----
MIIFbTCCBFWgAwIBAgIUXwZL4tgIpLwr7P7Mk2/t/29uUEswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDZEQjY5OUQxOTFENEIwMjg5OTEwQzg4RTk5Q0Y5NEE2
NzExNDJGNTAeFw0yNjA3MjMwNjI5NDJaFw0yNzA3MjIwNjM0NDJaMDMxMTAvBgNV
BAMTKEM4Q0M0RjY5QzNEMUQxMEQyOUI4QTQ4QjAxN0REMDQzNzQ4MTg5MUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ49Z6FWBFwAw0yCrDU7+LxOwm
V7n7OwU6yP77cmqQh4Mg20NRsetlvR2hb/OE1CV0l7+YdoXV8oI0X5E7gPRHioVt
ywZIo3dCjF3uztQ1vxy0v1qCjZ19jNyjAUX2vVN955hOTgstbYqKBOjJwWrp6SuG
aYL0MAAmHmLqubGmlXkcQ1ObHwJg7xTnYdbpvvA0aU76IzOx4JKe9TiedeWzHNrk
LlWWWo7Ru14WG1kXuWWR5wfMyVtb1cdoj2b+SpKK1l5WnCATCyUa/RSCeoTPvTuv
Vf16c4v1o4S1lpoQmhPFRf5wiTULffshO/fCExEGtRGjGgJQWr7ok+Ky15HzAgMB
AAGjggJ3MIICczAdBgNVHQ4EFgQUyMxPacPR0Q0puKSLAX3QQ3SBiRwwHwYDVR0j
BBgwFoAUBttpnRkdSwKJkQyI6Zz5SmcRQvUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMzAxMTk0NGQtN2ViMy00ZjYzLWExNTktY2ZmMDJjMDI2
YWJmLzIvMDZEQjY5OUQxOTFENEIwMjg5OTEwQzg4RTk5Q0Y5NEE2NzExNDJGNS5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzcvMDZEQjY5OUQxOTFENEIwMjg5OTEwQzg4RTk5Q0Y5NEE2NzEx
NDJGNS5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMzAxMTk0NGQt
N2ViMy00ZjYzLWExNTktY2ZmMDJjMDI2YWJmLzIvMzI2MTMwMzYzYTM5NjYzNDMx
M2EzMzMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNlMjAzMjMxMzQzOTMyMzkucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgAqBp9BAzANBgkqhkiG9w0BAQsFAAOCAQEATkc1eFcnBQXR/TWVqvO8
OsxsAYBSNGNMhokNGB+RaOOSY6kazBUbbOztlIf8BpF0zpg8NwP1sl3A6Hdkm8UA
hybonoMt1sig5N+tJu7wm8+jboe6RpYqM/ZXkQDXR++ikKyoFnHvIQ/cC2vPoE9h
1tZoe+GcoOXG5ga40VdfHWLzKp7LoancUkSiIqZVBL3CnySZAWOkif2u0Iv+uSef
u9/0HfWDEC1EE6vFYtCGz4PGhRhA/J+kTrBfJFzXyT0h7rhGFhQChMJY9Ou9QsxP
YiGzO3fojid6RbIC8JomEfiUolxTLOtc4Tls0KJUEJHexhiEq0VgAAi1DR9n1pJk
xg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:20:10 2026 by rpki-client