Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/8/326131333a633863313a3a2f33322d3332203d3e20323135383238.roa
File:                     326131333a633863313a3a2f33322d3332203d3e20323135383238.roa (raw, json)
Hash identifier:          IlMOSvLFq4VX7HZnUVxC1UdUITR3M7tj8HQPD7Fh/uM=
Subject key identifier:   DC:5B:4E:C4:7C:7A:4E:9E:36:82:01:97:14:E3:19:FE:0B:15:57:59
Certificate issuer:       /CN=5EF4C750B1935EE4BF7FC2441A2EE490477A91AE
Certificate serial:       749C60FB7ED28A07940BD20AAA292563D954F057
Authority key identifier: 5E:F4:C7:50:B1:93:5E:E4:BF:7F:C2:44:1A:2E:E4:90:47:7A:91:AE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/5EF4C750B1935EE4BF7FC2441A2EE490477A91AE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/8/326131333a633863313a3a2f33322d3332203d3e20323135383238.roa
Signing time:             Mon 20 Jul 2026 12:03:16 +0000
ROA not before:           Mon 20 Jul 2026 11:58:16 +0000
ROA not after:            Mon 19 Jul 2027 12:03:16 +0000
asID:                     215828
IP address blocks:        2a13:c8c1::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/8/5EF4C750B1935EE4BF7FC2441A2EE490477A91AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/8/5EF4C750B1935EE4BF7FC2441A2EE490477A91AE.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/5EF4C750B1935EE4BF7FC2441A2EE490477A91AE.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:39:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:9c:60:fb:7e:d2:8a:07:94:0b:d2:0a:aa:29:25:63:d9:54:f0:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5EF4C750B1935EE4BF7FC2441A2EE490477A91AE
        Validity
            Not Before: Jul 20 11:58:16 2026 GMT
            Not After : Jul 19 12:03:16 2027 GMT
        Subject: CN=DC5B4EC47C7A4E9E3682019714E319FE0B155759
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c4:b5:58:28:ac:8b:a4:cc:9f:68:e0:a0:dc:
                    50:8f:f9:ed:22:3f:4f:27:4a:c1:21:71:b9:ac:b1:
                    2c:22:f2:18:4e:36:98:b5:48:b7:58:fd:5f:7e:1e:
                    2c:c0:7c:43:fe:ae:0f:28:5c:9e:79:64:85:01:5a:
                    4d:20:b5:53:9e:46:a4:b3:1f:4a:40:83:21:16:44:
                    b5:c5:64:e4:00:79:b7:31:61:08:c5:fb:b6:3d:84:
                    35:5f:28:54:55:fd:a4:f5:8f:68:e0:ba:c6:10:8e:
                    c0:c6:5f:c7:ae:a7:c4:e0:57:3e:29:6f:0a:ab:08:
                    a2:e6:5f:e6:8d:4f:3d:b9:e3:3a:3a:91:c2:cf:2d:
                    3f:85:04:bd:70:5f:47:4b:62:c1:ec:b3:99:c3:17:
                    35:92:26:2a:cb:74:78:5e:eb:63:8d:2b:16:b8:27:
                    e9:b1:a5:7b:aa:60:3d:b4:8f:9f:56:00:00:11:29:
                    9b:87:f3:7b:fd:85:17:00:c1:0d:9c:ea:55:f9:b7:
                    04:9b:8c:52:99:ee:e5:84:c2:a5:13:59:ed:cb:42:
                    6a:1d:72:e7:8a:09:90:4b:fd:41:f7:9b:60:41:b7:
                    1f:9a:0e:f0:05:e0:88:f0:7b:ab:40:ee:6e:8c:c0:
                    30:34:9a:32:07:24:18:f2:15:6f:d6:19:d6:66:f7:
                    90:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:5B:4E:C4:7C:7A:4E:9E:36:82:01:97:14:E3:19:FE:0B:15:57:59
            X509v3 Authority Key Identifier:
                keyid:5E:F4:C7:50:B1:93:5E:E4:BF:7F:C2:44:1A:2E:E4:90:47:7A:91:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/8/5EF4C750B1935EE4BF7FC2441A2EE490477A91AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/5EF4C750B1935EE4BF7FC2441A2EE490477A91AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/8/326131333a633863313a3a2f33322d3332203d3e20323135383238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:c8c1::/32

    Signature Algorithm: sha256WithRSAEncryption
         1e:00:3d:f0:8d:93:06:db:df:c4:9c:cc:53:75:30:ec:53:3f:
         58:50:16:d1:fd:ec:08:39:0d:82:78:da:46:64:2f:29:39:5d:
         85:00:28:fa:25:fc:95:0e:a2:e6:b9:66:07:d0:2a:47:22:6e:
         3c:4e:cb:bd:eb:ec:d1:a9:c1:23:e7:13:73:70:d2:39:e3:b5:
         b1:09:2d:9f:11:84:3e:45:e5:97:a4:2d:ee:e5:ef:69:da:b5:
         be:5e:e9:78:c3:3c:62:16:35:8a:88:59:3b:7d:69:d3:ea:48:
         45:1d:72:90:9a:28:48:23:7c:e3:6a:5a:ac:1e:df:30:4e:c0:
         60:1c:57:fa:97:f7:1a:b2:a2:a4:ef:a6:7c:d5:fa:b0:2b:8b:
         b1:ad:ab:ab:95:38:94:dc:e0:a3:27:4b:55:b4:6c:4b:5c:f3:
         d1:ae:09:4a:7c:93:2a:cb:b2:0e:2b:3a:a5:40:37:be:30:44:
         5f:e5:2d:51:15:77:57:c6:95:90:f4:93:09:b9:62:d6:da:27:
         15:03:fe:20:5b:0e:5d:33:01:2a:fb:f7:26:c1:2c:b5:6e:a5:
         9d:46:f9:a0:bb:62:cf:aa:fc:46:c0:a8:39:9f:d0:96:0a:d4:
         13:4a:d7:fb:ec:60:e9:65:c5:b4:b8:41:ea:cd:87:12:8e:44:
         40:da:55:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:02:10 2026 by rpki-client