Route Origin Authorization

$ rpki-client -vvvf rpki.axivora.net/repo/Axivora-Net/2/326131343a373538303a3732663a3a2f34382d3438203d3e20313534313535.roa
File:                     326131343a373538303a3732663a3a2f34382d3438203d3e20313534313535.roa (raw, json)
Hash identifier:          kquoJPkAdXViUUpdm+9fXvqUeaGeFO7fGOjftAOi2FQ=
Subject key identifier:   B3:4C:CF:BA:6F:1C:FC:17:AE:97:27:EF:8B:BE:F5:2F:37:66:AB:C5
Certificate issuer:       /CN=F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378
Certificate serial:       3789654E9A389AA6905726EBE98381D6F9F5D51B
Authority key identifier: F6:DE:6F:C7:AC:46:7F:10:B5:70:5E:60:B8:FD:DA:02:FF:FD:73:78
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.cer
Subject info access:      rsync://rpki.axivora.net/repo/Axivora-Net/2/326131343a373538303a3732663a3a2f34382d3438203d3e20313534313535.roa
Signing time:             Mon 14 Sep 2026 13:14:24 +0000
ROA not before:           Mon 14 Sep 2026 13:09:24 +0000
ROA not after:            Mon 13 Sep 2027 13:14:24 +0000
asID:                     154155
IP address blocks:        2a14:7580:72f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.axivora.net/repo/Axivora-Net/2/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.crl
                          rsync://rpki.axivora.net/repo/Axivora-Net/2/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:89:65:4e:9a:38:9a:a6:90:57:26:eb:e9:83:81:d6:f9:f5:d5:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378
        Validity
            Not Before: Sep 14 13:09:24 2026 GMT
            Not After : Sep 13 13:14:24 2027 GMT
        Subject: CN=B34CCFBA6F1CFC17AE9727EF8BBEF52F3766ABC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:26:82:78:a8:40:76:b7:a9:89:49:a3:f8:ee:
                    6e:5f:43:93:5b:4f:4e:51:60:aa:94:16:38:81:ae:
                    ba:1a:ab:d7:05:8c:1a:03:bd:8f:e0:cc:ea:06:d1:
                    ad:b8:14:0c:e0:68:f1:5f:a8:b2:60:d3:bd:6e:e1:
                    c2:82:15:99:82:ae:75:a0:1d:21:fc:ad:c4:90:b0:
                    3f:de:c7:21:b9:17:9e:8a:56:b9:77:42:6b:94:06:
                    e3:3a:0a:0a:8d:d1:f7:b2:88:fb:34:b0:c7:0b:67:
                    2c:69:0a:34:99:63:a8:1b:ad:04:41:99:43:05:cd:
                    1d:59:1a:f8:e8:47:1d:07:75:31:0e:b7:fb:56:24:
                    03:fe:7b:b6:d5:06:dd:ea:3a:96:18:80:6d:69:f4:
                    11:69:d5:6d:42:40:38:d9:32:f8:90:89:ec:3e:31:
                    73:b3:90:f0:a9:97:03:dd:c1:a2:05:e5:4c:a4:c9:
                    ea:27:d8:9c:3c:c9:f8:1b:00:60:ef:cf:bc:ea:a8:
                    29:6f:81:f4:11:2a:48:28:39:0d:12:36:d7:f5:fd:
                    75:8d:f1:ca:e8:95:5d:ac:93:18:56:75:72:42:c3:
                    e3:86:da:ba:53:d8:f9:4a:4d:6e:28:a7:d0:ba:77:
                    27:3b:26:c4:24:ca:03:00:eb:39:71:52:b0:c1:f5:
                    65:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:4C:CF:BA:6F:1C:FC:17:AE:97:27:EF:8B:BE:F5:2F:37:66:AB:C5
            X509v3 Authority Key Identifier:
                keyid:F6:DE:6F:C7:AC:46:7F:10:B5:70:5E:60:B8:FD:DA:02:FF:FD:73:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.axivora.net/repo/Axivora-Net/2/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.axivora.net/repo/Axivora-Net/2/326131343a373538303a3732663a3a2f34382d3438203d3e20313534313535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7580:72f::/48

    Signature Algorithm: sha256WithRSAEncryption
         af:72:d5:ae:c3:5e:01:b6:94:29:26:b1:3d:7e:88:4d:30:f0:
         97:0a:01:81:39:04:02:fb:53:9d:f1:b5:84:16:e0:93:0f:41:
         e3:38:11:73:b7:8f:8b:12:ef:c1:67:08:df:b4:62:fe:e1:4b:
         c6:77:fb:37:13:5f:94:7b:08:60:15:9e:69:5a:c2:84:85:c1:
         86:ca:a4:6f:e2:4d:c2:3d:df:a0:4d:93:53:0b:88:1d:ab:fb:
         aa:d4:c4:0f:f2:6f:9f:d9:2d:1f:83:34:cf:60:d8:df:2c:21:
         eb:62:29:08:3c:34:fb:c0:25:92:97:57:b2:6e:e5:c4:2f:28:
         be:49:22:ff:57:31:45:21:75:f8:62:d7:f7:ae:6c:e7:5a:93:
         8b:83:9d:19:81:ad:6a:3a:88:65:9c:17:11:9b:7f:a0:ee:43:
         07:0c:c2:fe:27:95:55:df:bb:09:31:24:e5:16:0a:1f:c3:a8:
         d0:49:4c:0b:78:45:c9:ee:7a:0a:e5:dd:b9:5e:59:20:c7:c2:
         22:c3:23:2b:d5:45:a2:ce:a8:36:80:8b:b3:68:83:1b:56:c6:
         17:99:0f:ab:8d:c1:d8:a0:21:e7:9a:2f:66:eb:0d:48:d8:de:
         c6:d1:5a:6c:ed:0e:b7:b6:5a:a4:c0:ec:a4:f2:73:b9:41:a9:
         d7:c7:60:08
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgIUN4llTpo4mqaQVybr6YOB1vn11RswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjZERTZGQzdBQzQ2N0YxMEI1NzA1RTYwQjhGRERBMDJG
RkZENzM3ODAeFw0yNjA5MTQxMzA5MjRaFw0yNzA5MTMxMzE0MjRaMDMxMTAvBgNV
BAMTKEIzNENDRkJBNkYxQ0ZDMTdBRTk3MjdFRjhCQkVGNTJGMzc2NkFCQzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3JoJ4qEB2t6mJSaP47m5fQ5Nb
T05RYKqUFjiBrroaq9cFjBoDvY/gzOoG0a24FAzgaPFfqLJg071u4cKCFZmCrnWg
HSH8rcSQsD/exyG5F56KVrl3QmuUBuM6CgqN0feyiPs0sMcLZyxpCjSZY6gbrQRB
mUMFzR1ZGvjoRx0HdTEOt/tWJAP+e7bVBt3qOpYYgG1p9BFp1W1CQDjZMviQiew+
MXOzkPCplwPdwaIF5Uykyeon2Jw8yfgbAGDvz7zqqClvgfQRKkgoOQ0SNtf1/XWN
8crolV2skxhWdXJCw+OG2rpT2PlKTW4op9C6dyc7JsQkygMA6zlxUrDB9WUrAgMB
AAGjggIrMIICJzAdBgNVHQ4EFgQUs0zPum8c/Beulyfvi771Lzdmq8UwHwYDVR0j
BBgwFoAU9t5vx6xGfxC1cF5guP3aAv/9c3gwDgYDVR0PAQH/BAQDAgeAMGkGA1Ud
HwRiMGAwXqBcoFqGWHJzeW5jOi8vcnBraS5heGl2b3JhLm5ldC9yZXBvL0F4aXZv
cmEtTmV0LzIvRjZERTZGQzdBQzQ2N0YxMEI1NzA1RTYwQjhGRERBMDJGRkZENzM3
OC5jcmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9y
c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2Zl
LTQyOTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GNkRFNkZDN0FDNDY3RjEwQjU3MDVF
NjBCOEZEREEwMkZGRkQ3Mzc4LmNlcjCBigYIKwYBBQUHAQsEfjB8MHoGCCsGAQUF
BzALhm5yc3luYzovL3Jwa2kuYXhpdm9yYS5uZXQvcmVwby9BeGl2b3JhLU5ldC8y
LzMyNjEzMTM0M2EzNzM1MzgzMDNhMzczMjY2M2EzYTJmMzQzODJkMzQzODIwM2Qz
ZTIwMzEzNTM0MzEzNTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIG
CCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gAcvMA0GCSqGSIb3DQEBCwUA
A4IBAQCvctWuw14BtpQpJrE9fohNMPCXCgGBOQQC+1Od8bWEFuCTD0HjOBFzt4+L
Eu/BZwjftGL+4UvGd/s3E1+UewhgFZ5pWsKEhcGGyqRv4k3CPd+gTZNTC4gdq/uq
1MQP8m+f2S0fgzTPYNjfLCHrYikIPDT7wCWSl1eybuXELyi+SSL/VzFFIXX4Ytf3
rmznWpOLg50Zga1qOohlnBcRm3+g7kMHDML+J5VV37sJMSTlFgofw6jQSUwLeEXJ
7noK5d25Xlkgx8IiwyMr1UWizqg2gIuzaIMbVsYXmQ+rjcHYoCHnmi9m6w1I2N7G
0Vps7Q63tlqkwOyk8nO5QanXx2AI
-----END CERTIFICATE-----
Generated at Mon Sep 21 10:08:46 2026 by rpki-client