Route Origin Authorization

$ rpki-client -vvf rpki.axivora.net/repo/Axivora-Net/1/326131343a373538303a6361303a3a2f34342d3434203d3e20323135373532.roa
File:                     326131343a373538303a6361303a3a2f34342d3434203d3e20323135373532.roa (raw, json)
Hash identifier:          9bl/r9kCLhycZfH94xHNVtAaw5837/fJltXyS8UcRFs=
Subject key identifier:   9F:0C:81:E9:DF:A7:07:1C:B5:6F:9A:2B:7C:BB:AD:C4:91:A0:30:B5
Certificate issuer:       /CN=00F736ADDA2A4172D32FC166E5EBA9341512CDC1
Certificate serial:       5EC75BB9578EED95C1B50299D94BDDCB6C411F67
Authority key identifier: 00:F7:36:AD:DA:2A:41:72:D3:2F:C1:66:E5:EB:A9:34:15:12:CD:C1
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/00F736ADDA2A4172D32FC166E5EBA9341512CDC1.cer
Subject info access:      rsync://rpki.axivora.net/repo/Axivora-Net/1/326131343a373538303a6361303a3a2f34342d3434203d3e20323135373532.roa
Signing time:             Sat 21 Feb 2026 16:33:55 +0000
ROA not before:           Sat 21 Feb 2026 16:28:55 +0000
ROA not after:            Sat 20 Feb 2027 16:33:55 +0000
asID:                     215752
IP address blocks:        2a14:7580:ca0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.axivora.net/repo/Axivora-Net/1/00F736ADDA2A4172D32FC166E5EBA9341512CDC1.crl
                          rsync://rpki.axivora.net/repo/Axivora-Net/1/00F736ADDA2A4172D32FC166E5EBA9341512CDC1.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/00F736ADDA2A4172D32FC166E5EBA9341512CDC1.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 11:22:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:c7:5b:b9:57:8e:ed:95:c1:b5:02:99:d9:4b:dd:cb:6c:41:1f:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00F736ADDA2A4172D32FC166E5EBA9341512CDC1
        Validity
            Not Before: Feb 21 16:28:55 2026 GMT
            Not After : Feb 20 16:33:55 2027 GMT
        Subject: CN=9F0C81E9DFA7071CB56F9A2B7CBBADC491A030B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:dd:b5:94:b7:12:c0:2b:58:ed:af:78:71:f6:
                    4c:e1:7d:cf:ac:28:93:08:38:2d:8c:58:da:f7:cb:
                    7f:2f:ec:03:5c:ae:a7:6e:76:c0:c3:e4:0c:eb:b2:
                    05:be:41:d3:9d:6c:4c:45:fc:5d:bb:39:33:73:38:
                    8e:18:7f:f7:7a:f8:b9:b4:26:c6:1a:6b:1a:2d:e7:
                    ee:81:71:87:e1:ad:de:ca:9b:ed:4f:e4:8e:35:4b:
                    02:01:ef:f6:87:51:8d:4c:8f:9e:e2:31:af:58:3b:
                    23:fb:cc:b6:67:0c:20:d7:25:f5:51:9f:6b:a4:8f:
                    bb:59:e0:d1:d9:fb:b9:d6:c1:46:73:b9:ad:29:f4:
                    e5:c6:8e:63:82:d9:6c:42:1a:e8:b9:aa:75:a0:21:
                    e2:ca:d2:d2:4a:44:65:5b:2f:00:3f:26:ad:16:22:
                    ec:4a:b5:59:42:8c:dc:ae:11:84:84:91:fb:fe:d6:
                    b0:01:67:14:3b:15:9f:80:0e:9f:5d:5a:17:c3:db:
                    e4:61:81:eb:c8:10:b1:eb:6b:6f:7e:cf:a9:61:f8:
                    a0:1a:5b:10:d1:ca:42:4b:53:df:98:f7:82:bd:d4:
                    99:99:8f:45:24:9a:33:87:60:09:fa:79:20:6c:d8:
                    15:30:c9:60:c6:a6:71:63:e2:4a:96:66:67:92:6b:
                    0f:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:0C:81:E9:DF:A7:07:1C:B5:6F:9A:2B:7C:BB:AD:C4:91:A0:30:B5
            X509v3 Authority Key Identifier:
                keyid:00:F7:36:AD:DA:2A:41:72:D3:2F:C1:66:E5:EB:A9:34:15:12:CD:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.axivora.net/repo/Axivora-Net/1/00F736ADDA2A4172D32FC166E5EBA9341512CDC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/00F736ADDA2A4172D32FC166E5EBA9341512CDC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.axivora.net/repo/Axivora-Net/1/326131343a373538303a6361303a3a2f34342d3434203d3e20323135373532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7580:ca0::/44

    Signature Algorithm: sha256WithRSAEncryption
         95:38:04:af:ed:91:40:70:fe:c6:c4:95:5e:56:5b:b3:95:cd:
         be:dc:ed:88:eb:a1:fd:2d:bf:fc:c4:0e:5d:7a:8a:b2:73:59:
         fd:8d:f9:c6:29:b5:98:89:e3:fc:77:9d:41:21:81:11:f2:a4:
         15:1f:f4:0d:b7:49:18:f3:86:30:72:9e:96:49:03:2f:c8:d7:
         95:6e:a1:ce:62:69:b3:b7:11:25:44:90:7b:ac:9b:00:63:0a:
         ce:35:14:21:d3:71:b9:31:83:3d:f5:8e:72:f4:59:06:52:be:
         fa:87:b0:f1:5d:f1:ba:e4:f7:0e:65:3d:61:b7:2e:52:1c:8a:
         e0:85:e5:52:42:74:01:40:2c:fc:4e:b2:97:2f:56:b3:0b:ee:
         a3:b9:b6:3b:39:9f:de:d9:cc:22:03:39:c5:63:43:fe:e7:8a:
         b3:17:ee:2b:ad:c7:3d:d4:aa:db:1f:56:f9:2f:9d:a6:6a:17:
         4c:80:db:5c:44:90:fe:f4:6e:03:b2:e2:b9:ec:c5:8e:d5:1a:
         38:52:6a:f9:6e:2b:bd:37:f1:8a:a8:21:4a:fc:b9:a9:69:1e:
         df:56:3c:0b:57:a8:2a:34:ec:de:b5:28:52:9c:22:5b:1e:40:
         34:5c:b6:78:36:63:8c:b3:0d:92:96:05:e7:8c:4d:06:aa:2a:
         13:3b:b7:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:37:49 2026 by rpki-client