Route Origin Authorization

$ rpki-client -vvvf rpki.axivora.net/repo/Axivora-Net/2/326131343a373538303a3730303a3a2f34342d3438203d3e20313938303235.roa
File:                     326131343a373538303a3730303a3a2f34342d3438203d3e20313938303235.roa (raw, json)
Hash identifier:          wFkbcSdu0uJcxYNPfHpw3rj2hG6P2z41v9sMF0YYM7A=
Subject key identifier:   C6:36:9D:74:56:77:2B:76:20:3C:63:E5:0D:EE:A2:FF:BB:3C:9C:48
Certificate issuer:       /CN=F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378
Certificate serial:       29FC77C8FD512F340828C4A1AB6513159980AD8F
Authority key identifier: F6:DE:6F:C7:AC:46:7F:10:B5:70:5E:60:B8:FD:DA:02:FF:FD:73:78
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.cer
Subject info access:      rsync://rpki.axivora.net/repo/Axivora-Net/2/326131343a373538303a3730303a3a2f34342d3438203d3e20313938303235.roa
Signing time:             Mon 14 Sep 2026 13:14:23 +0000
ROA not before:           Mon 14 Sep 2026 13:09:23 +0000
ROA not after:            Mon 13 Sep 2027 13:14:23 +0000
asID:                     198025
IP address blocks:        2a14:7580:700::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.axivora.net/repo/Axivora-Net/2/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.crl
                          rsync://rpki.axivora.net/repo/Axivora-Net/2/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 12:21:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:fc:77:c8:fd:51:2f:34:08:28:c4:a1:ab:65:13:15:99:80:ad:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378
        Validity
            Not Before: Sep 14 13:09:23 2026 GMT
            Not After : Sep 13 13:14:23 2027 GMT
        Subject: CN=C6369D7456772B76203C63E50DEEA2FFBB3C9C48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7e:47:86:3f:57:68:81:b5:b6:e4:06:db:99:
                    10:af:a9:72:5b:54:d8:a8:5f:da:3c:14:7c:85:68:
                    2b:72:e8:49:a2:20:19:1d:78:f2:81:94:57:cc:b7:
                    dd:cb:c7:bc:c8:cd:37:48:d9:e5:dc:b7:e4:b9:ed:
                    de:d1:0e:f9:95:17:5b:76:07:e1:b7:9c:30:84:c0:
                    c9:1f:fa:aa:55:82:89:d8:00:d9:65:04:2c:cb:db:
                    7c:31:d0:d5:d3:53:64:f0:38:b7:dd:d2:e1:0c:fe:
                    51:84:16:ed:bf:ca:f9:dc:37:66:6f:a1:c1:87:91:
                    7b:6a:d5:46:3f:25:89:40:e6:b2:28:48:4d:f1:5c:
                    d3:59:e4:dd:e7:5e:8f:cb:3e:ef:f3:da:09:ef:b1:
                    dd:a5:e0:6c:ee:83:07:44:39:31:76:90:22:1c:ca:
                    16:e5:88:f4:ee:ba:3a:a2:7d:bb:db:99:83:77:fa:
                    13:4e:83:74:88:d5:11:2a:0f:4b:7d:19:2b:c4:b8:
                    f2:f4:df:80:67:d5:0f:71:28:20:cd:2d:77:07:89:
                    91:80:ed:a9:32:9b:9a:70:85:40:66:3d:93:b8:5a:
                    d5:15:fb:9e:b3:ca:6d:be:8e:81:94:b1:41:0b:60:
                    d3:05:a6:f0:1e:c6:e8:52:75:b7:43:57:71:d0:73:
                    11:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:36:9D:74:56:77:2B:76:20:3C:63:E5:0D:EE:A2:FF:BB:3C:9C:48
            X509v3 Authority Key Identifier:
                keyid:F6:DE:6F:C7:AC:46:7F:10:B5:70:5E:60:B8:FD:DA:02:FF:FD:73:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.axivora.net/repo/Axivora-Net/2/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.axivora.net/repo/Axivora-Net/2/326131343a373538303a3730303a3a2f34342d3438203d3e20313938303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7580:700::/44

    Signature Algorithm: sha256WithRSAEncryption
         13:84:2a:b7:f4:a8:de:47:d6:95:09:32:cd:14:70:63:10:01:
         49:a3:21:37:21:06:76:06:38:0d:98:a3:e2:59:05:1d:7b:a6:
         5f:f8:0c:af:13:33:7d:a3:1b:ce:ad:f3:f1:16:52:88:3a:85:
         46:3f:d0:ee:2f:0a:ec:e9:ff:ef:5d:5d:be:0e:0a:21:44:fb:
         31:31:f4:3c:d2:fc:e6:11:a3:a7:8a:2d:cf:da:dd:03:1c:22:
         63:e9:c7:d0:f1:2a:e4:68:c4:bc:fb:b7:31:4a:1b:ab:b6:00:
         b8:90:6a:20:37:3c:cf:30:c0:1c:a4:d3:56:15:71:d4:74:8d:
         5c:0b:52:6f:5a:5b:6e:62:c7:5b:ba:5c:e8:e0:72:31:39:7f:
         69:54:eb:b3:59:99:63:38:dc:86:d9:2c:b3:37:f8:ab:f3:2f:
         4a:87:62:58:07:f7:15:90:c3:f0:4c:9c:80:d0:26:a6:3f:10:
         e3:e4:26:0a:c6:a4:2a:80:62:30:0d:17:3c:24:46:b8:e2:c3:
         95:dd:b8:01:36:cc:8b:e2:39:b9:5e:c3:c0:c7:6d:83:d7:3e:
         16:7c:36:31:58:ce:39:c8:24:9b:8c:ff:3f:d5:e6:85:28:ed:
         c9:a6:26:58:3f:7b:36:af:c2:a0:dc:c6:69:82:c9:56:44:32:
         08:97:53:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 21:02:47 2026 by rpki-client