Route Origin Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/b07c06ac-19db-4c40-8b8d-95d4f2f53524/1/326131343a366634343a376630303a3a2f34382d3438203d3e20323139303135.roa
File:                     326131343a366634343a376630303a3a2f34382d3438203d3e20323139303135.roa (raw, json)
Hash identifier:          ukucwgJoXYc/O0Ui6Tyy+j7s2rLNjJ/2kwcrer+8l7k=
Subject key identifier:   C3:31:DA:17:23:10:E6:26:E9:94:D0:CF:8A:E2:1D:27:D8:B3:E2:2B
Certificate issuer:       /CN=27EB75FA7E95272BBCF1FA431B7706B00D02D1BA
Certificate serial:       6A5E867082B03526EBC6F4E1B9818BF9DE52A5AC
Authority key identifier: 27:EB:75:FA:7E:95:27:2B:BC:F1:FA:43:1B:77:06:B0:0D:02:D1:BA
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/27EB75FA7E95272BBCF1FA431B7706B00D02D1BA.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/b07c06ac-19db-4c40-8b8d-95d4f2f53524/1/326131343a366634343a376630303a3a2f34382d3438203d3e20323139303135.roa
Signing time:             Fri 14 Aug 2026 13:45:16 +0000
ROA not before:           Fri 14 Aug 2026 13:40:16 +0000
ROA not after:            Fri 13 Aug 2027 13:45:16 +0000
asID:                     219015
IP address blocks:        2a14:6f44:7f00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/b07c06ac-19db-4c40-8b8d-95d4f2f53524/1/27EB75FA7E95272BBCF1FA431B7706B00D02D1BA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/b07c06ac-19db-4c40-8b8d-95d4f2f53524/1/27EB75FA7E95272BBCF1FA431B7706B00D02D1BA.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/27EB75FA7E95272BBCF1FA431B7706B00D02D1BA.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 13:11:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:5e:86:70:82:b0:35:26:eb:c6:f4:e1:b9:81:8b:f9:de:52:a5:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27EB75FA7E95272BBCF1FA431B7706B00D02D1BA
        Validity
            Not Before: Aug 14 13:40:16 2026 GMT
            Not After : Aug 13 13:45:16 2027 GMT
        Subject: CN=C331DA172310E626E994D0CF8AE21D27D8B3E22B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:53:4e:f9:e4:61:b7:1d:f8:fc:e4:49:2e:ee:
                    6f:f4:5a:cf:47:35:82:38:26:68:f2:5e:eb:c7:ce:
                    a4:24:06:11:1d:bf:11:27:cc:c3:f9:87:84:cf:43:
                    0e:de:71:9f:03:1e:1f:bd:ad:87:28:11:91:33:b4:
                    8e:32:b6:65:81:e8:0c:cb:16:fc:8b:82:d5:e2:21:
                    be:52:92:dd:0e:bd:df:e3:3a:64:d1:09:ae:da:de:
                    11:24:ff:4b:db:b9:5f:bf:48:f6:62:83:d2:d2:72:
                    f0:1a:1b:a0:c0:8b:14:26:1a:63:dc:3c:b4:26:78:
                    23:dd:47:3e:2b:ae:9c:53:64:56:64:66:bd:2e:53:
                    53:4e:df:c4:96:4c:7c:1d:57:09:ef:7a:16:df:cd:
                    6d:4c:44:ff:2b:43:14:10:2d:17:f7:79:52:a6:79:
                    62:cb:f5:65:3c:be:5a:23:b9:5b:05:74:d8:9f:7e:
                    9a:48:48:36:60:a5:92:18:71:d3:86:d5:1d:99:52:
                    b2:ab:c0:92:6e:8f:0f:1d:1b:f7:67:3a:2b:7e:6d:
                    8c:1c:21:b0:fb:d3:3e:8b:83:e7:10:a9:63:4c:5f:
                    42:55:4d:68:ca:f0:90:06:b1:ae:1c:b8:58:f6:b1:
                    95:8f:c7:9e:51:fb:dd:74:0e:78:27:02:bd:6a:e8:
                    fd:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:31:DA:17:23:10:E6:26:E9:94:D0:CF:8A:E2:1D:27:D8:B3:E2:2B
            X509v3 Authority Key Identifier:
                keyid:27:EB:75:FA:7E:95:27:2B:BC:F1:FA:43:1B:77:06:B0:0D:02:D1:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/b07c06ac-19db-4c40-8b8d-95d4f2f53524/1/27EB75FA7E95272BBCF1FA431B7706B00D02D1BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/27EB75FA7E95272BBCF1FA431B7706B00D02D1BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b07c06ac-19db-4c40-8b8d-95d4f2f53524/1/326131343a366634343a376630303a3a2f34382d3438203d3e20323139303135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:6f44:7f00::/48

    Signature Algorithm: sha256WithRSAEncryption
         25:23:62:ce:1a:dc:f0:fe:00:5d:54:96:35:8b:8c:55:15:0b:
         75:e7:58:0d:a1:51:7b:47:a5:9c:a4:18:e1:94:ab:34:64:e2:
         4b:b2:e8:a2:2d:72:95:41:95:21:ce:a3:d1:88:db:49:a1:d3:
         4a:75:94:5f:77:29:e6:28:d4:bd:5a:9f:7e:8e:e5:3e:24:68:
         d0:70:1d:4e:5c:fd:ae:41:80:f7:39:9c:25:c5:b6:59:b1:96:
         47:85:fc:b5:e0:90:a1:7e:af:74:c6:17:10:84:27:d4:d2:3f:
         81:8b:c6:5a:ca:9c:6a:38:f0:37:45:4c:fc:7f:a4:f6:ba:ca:
         7e:77:5f:be:fd:9c:09:db:7d:ba:c7:54:fc:3d:67:c5:09:aa:
         8e:90:ed:af:3a:ac:6d:cc:8a:dd:a7:42:c2:4d:d1:95:95:58:
         22:cc:2e:8a:ce:44:c5:20:67:49:da:15:80:a5:08:55:57:23:
         c1:aa:0c:b1:f2:9d:12:50:46:df:fb:56:57:a7:aa:d9:4d:5b:
         98:59:b9:ba:cf:80:d2:56:24:d6:91:dd:e6:65:ae:66:99:78:
         d6:cf:05:d9:dd:f2:1e:8a:0c:37:01:1a:1c:73:99:f7:9f:49:
         f7:32:0a:94:38:fc:11:9e:8a:41:c3:79:4f:c0:92:74:86:2b:
         bb:6e:d6:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 05:51:29 2026 by rpki-client