Route Origin Authorization

$ rpki-client -vvvf rsync.rpki.as205941.org/repo/AS205941/1/326131333a633863343a343030303a3a2f33362d313238203d3e203430343139.roa
File:                     326131333a633863343a343030303a3a2f33362d313238203d3e203430343139.roa (raw, json)
Hash identifier:          SHqO1fEtgb7IgnQBttc+GQz/Zl6B9Ps2sMxx1lk5bR4=
Subject key identifier:   DF:BB:19:32:F7:6C:E5:C9:AF:D1:41:2B:FA:E6:A5:43:3D:49:B2:34
Certificate issuer:       /CN=2EE1DA546F075888B23DD21EA2AC5FE61C943160
Certificate serial:       17BE49057195CDC4D0584DCC923F2D4507A238B5
Authority key identifier: 2E:E1:DA:54:6F:07:58:88:B2:3D:D2:1E:A2:AC:5F:E6:1C:94:31:60
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/2EE1DA546F075888B23DD21EA2AC5FE61C943160.cer
Subject info access:      rsync://rsync.rpki.as205941.org/repo/AS205941/1/326131333a633863343a343030303a3a2f33362d313238203d3e203430343139.roa
Signing time:             Tue 03 Nov 2026 10:27:55 +0000
ROA not before:           Tue 03 Nov 2026 10:22:55 +0000
ROA not after:            Tue 02 Nov 2027 10:27:55 +0000
asID:                     40419
IP address blocks:        2a13:c8c4:4000::/36 maxlen: 128
Validation:               OK
Signature path:           rsync://rsync.rpki.as205941.org/repo/AS205941/1/2EE1DA546F075888B23DD21EA2AC5FE61C943160.crl
                          rsync://rsync.rpki.as205941.org/repo/AS205941/1/2EE1DA546F075888B23DD21EA2AC5FE61C943160.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/2EE1DA546F075888B23DD21EA2AC5FE61C943160.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/ACB5DFF8A45DF5CDAFA2A95C715F10C5FE5F91A3.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rLXf-KRd9c2voqlccV8Qxf5fkaM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 12:50:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:be:49:05:71:95:cd:c4:d0:58:4d:cc:92:3f:2d:45:07:a2:38:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EE1DA546F075888B23DD21EA2AC5FE61C943160
        Validity
            Not Before: Nov  3 10:22:55 2026 GMT
            Not After : Nov  2 10:27:55 2027 GMT
        Subject: CN=DFBB1932F76CE5C9AFD1412BFAE6A5433D49B234
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e5:b0:10:4c:c5:66:b1:fd:95:9b:58:b1:8a:
                    b6:35:fd:10:c1:17:37:9f:62:68:af:73:84:f6:14:
                    9a:e9:d2:9c:54:0b:78:13:b0:9d:0f:58:bd:54:5e:
                    e5:6d:02:3f:31:66:2e:2a:15:8c:51:fc:99:f0:a9:
                    21:35:4a:e1:5d:18:aa:1d:0e:66:53:86:f0:47:5d:
                    d1:40:51:13:9c:44:89:94:d8:70:ae:f6:d5:9e:e2:
                    40:b4:45:8f:08:98:4d:2c:af:35:b5:61:88:28:a1:
                    47:ac:d2:75:fc:7c:c7:73:b3:29:a7:6b:6a:4d:69:
                    52:15:5a:26:26:54:61:fb:f0:f1:01:3e:85:15:1a:
                    3a:e4:5a:18:8e:ba:fb:18:d0:19:bf:c2:0e:65:ce:
                    d7:3f:57:59:48:d6:17:07:56:98:c1:7b:70:34:0a:
                    21:ef:36:dc:51:06:d6:b0:39:ac:d1:5e:9e:2d:6e:
                    83:11:a8:86:51:f0:83:b8:ec:8b:cd:9d:48:ad:b8:
                    a1:35:59:9c:4d:25:0e:4a:d1:1a:8c:6e:66:ba:f7:
                    f0:fd:c0:4b:3c:ef:ab:3e:a8:52:a4:63:fb:40:fb:
                    eb:17:b5:aa:59:10:6f:89:f7:91:8a:07:f0:6f:78:
                    65:b8:c7:81:47:77:cc:fd:86:a9:6e:f3:0d:b1:b0:
                    36:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:BB:19:32:F7:6C:E5:C9:AF:D1:41:2B:FA:E6:A5:43:3D:49:B2:34
            X509v3 Authority Key Identifier:
                keyid:2E:E1:DA:54:6F:07:58:88:B2:3D:D2:1E:A2:AC:5F:E6:1C:94:31:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rpki.as205941.org/repo/AS205941/1/2EE1DA546F075888B23DD21EA2AC5FE61C943160.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/4/2EE1DA546F075888B23DD21EA2AC5FE61C943160.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rpki.as205941.org/repo/AS205941/1/326131333a633863343a343030303a3a2f33362d313238203d3e203430343139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:c8c4:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         04:8d:5d:d5:17:9b:0b:39:0d:e6:49:cc:dc:b3:ae:59:9b:d2:
         50:af:a7:f1:23:8d:a3:71:a1:91:2b:91:6e:dc:0e:12:ea:b0:
         fb:24:02:17:73:60:cb:3f:32:b4:5d:e1:e9:94:22:67:bc:78:
         cc:4e:32:c6:5e:da:1a:80:83:67:6a:33:ba:44:49:91:b5:71:
         ca:fc:c9:51:59:fa:42:59:38:38:da:33:2e:61:8b:7c:a6:67:
         98:1a:59:8b:57:30:b1:a2:44:14:5c:a4:ec:1d:12:34:40:c0:
         06:26:b6:18:9e:24:01:c9:98:41:05:e8:b4:0b:ab:8e:f2:a8:
         a9:24:4a:0d:8f:7b:3a:d2:d7:13:3f:ca:a8:48:13:d2:03:41:
         62:96:f0:03:82:67:fe:d0:3a:5c:50:54:d0:53:c1:d0:ed:72:
         1e:ae:26:b6:0d:18:94:b1:6d:2a:7f:ab:28:23:7b:df:d0:4f:
         ff:02:33:29:e5:81:d8:5b:f7:d0:fd:48:9c:14:fb:f5:b2:00:
         47:a1:d5:86:42:de:fe:ec:ff:c5:f3:9c:1a:cd:7c:84:b6:fa:
         e0:a1:2e:53:c8:1a:e1:35:6c:62:ef:50:30:3f:11:d6:c9:fd:
         a6:f4:d2:49:ee:7a:e8:aa:c6:8c:44:cd:2e:2d:ae:21:80:45:
         9b:95:c1:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:23:38 2026 by rpki-client