Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/17/326130373a353463313a363030303a3a2f33362d3438203d3e20323032313432.roa
File:                     326130373a353463313a363030303a3a2f33362d3438203d3e20323032313432.roa (raw, json)
Hash identifier:          gbz9phaAK9iFt1pwQs8uTlVt4HXqfZvJ962qPZbvCi4=
Subject key identifier:   51:44:AE:A6:4F:E3:B0:23:3F:3C:AD:D2:59:D6:E4:88:E1:DF:C5:D2
Certificate issuer:       /CN=558AB8D1E384C19E265C3C1F40E7F33D970F7120
Certificate serial:       2E901A53854375447D2588AE10114AAD908C1D3F
Authority key identifier: 55:8A:B8:D1:E3:84:C1:9E:26:5C:3C:1F:40:E7:F3:3D:97:0F:71:20
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/558AB8D1E384C19E265C3C1F40E7F33D970F7120.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/17/326130373a353463313a363030303a3a2f33362d3438203d3e20323032313432.roa
Signing time:             Wed 11 Feb 2026 15:59:00 +0000
ROA not before:           Wed 11 Feb 2026 15:54:00 +0000
ROA not after:            Wed 10 Feb 2027 15:59:00 +0000
asID:                     202142
IP address blocks:        2a07:54c1:6000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/17/558AB8D1E384C19E265C3C1F40E7F33D970F7120.crl
                          rsync://rpki.cc/repo/MythicalKitten/17/558AB8D1E384C19E265C3C1F40E7F33D970F7120.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/558AB8D1E384C19E265C3C1F40E7F33D970F7120.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 05:21:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:90:1a:53:85:43:75:44:7d:25:88:ae:10:11:4a:ad:90:8c:1d:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=558AB8D1E384C19E265C3C1F40E7F33D970F7120
        Validity
            Not Before: Feb 11 15:54:00 2026 GMT
            Not After : Feb 10 15:59:00 2027 GMT
        Subject: CN=5144AEA64FE3B0233F3CADD259D6E488E1DFC5D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:22:32:39:f9:a2:47:f4:6f:3b:14:b7:e2:03:
                    a1:28:59:f1:5a:e1:34:ea:bb:0c:9f:c2:1b:63:4c:
                    24:28:a2:07:bb:f7:df:f2:7f:32:33:99:ab:b6:54:
                    22:e5:e4:db:bb:e7:73:2b:b1:d6:65:fb:1b:ad:84:
                    31:5e:9d:80:7f:9c:e7:40:5c:3c:0e:01:68:d6:87:
                    49:63:4a:ec:8c:22:dc:97:b5:00:68:67:e5:dd:9b:
                    6f:b2:94:0c:55:63:78:45:01:27:20:22:ca:55:96:
                    26:f4:57:0f:ef:e0:dc:ab:98:53:d4:12:63:eb:4c:
                    25:77:44:3b:64:60:99:0f:f7:95:fa:b4:d0:96:77:
                    49:e7:c3:a7:ff:d5:6f:39:47:ab:64:fb:8e:0b:20:
                    9d:d1:3c:22:a0:14:a3:88:11:78:4c:63:52:98:d5:
                    ca:8f:2e:7a:c5:68:fc:f9:35:d5:9b:3e:32:70:09:
                    a0:14:40:f9:50:5c:71:72:2d:59:9e:3f:09:de:03:
                    dc:5a:33:44:35:c9:c4:a7:49:2d:4b:84:dc:33:4e:
                    44:7c:ef:c6:34:ce:2c:67:df:a3:9c:de:92:90:54:
                    f2:3d:b3:f5:70:9a:c6:6a:7b:f1:eb:ef:fb:e3:c2:
                    65:69:d5:67:6a:d0:47:42:15:09:e9:a5:c7:c3:f0:
                    c3:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:44:AE:A6:4F:E3:B0:23:3F:3C:AD:D2:59:D6:E4:88:E1:DF:C5:D2
            X509v3 Authority Key Identifier:
                keyid:55:8A:B8:D1:E3:84:C1:9E:26:5C:3C:1F:40:E7:F3:3D:97:0F:71:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/17/558AB8D1E384C19E265C3C1F40E7F33D970F7120.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/558AB8D1E384C19E265C3C1F40E7F33D970F7120.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/17/326130373a353463313a363030303a3a2f33362d3438203d3e20323032313432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         9f:b9:f7:3e:76:53:65:05:45:c7:a1:34:53:54:59:a5:0d:53:
         f8:bc:95:c5:2a:a9:b9:b8:33:34:71:bb:32:48:43:50:b3:db:
         d4:03:b6:4f:2a:60:5f:78:3a:c8:a0:15:c0:33:4e:b4:e1:5c:
         63:13:3b:8e:4f:2d:1e:21:4d:80:3b:22:92:f0:4a:95:0e:7e:
         db:7b:08:b1:a5:55:8f:60:02:0a:75:ba:ba:90:f3:26:17:38:
         74:fd:c9:74:f2:93:7e:b0:d0:ec:71:39:47:c9:5a:98:af:ca:
         7c:ca:0c:3f:02:0b:4e:1b:d7:0f:7b:a6:d5:d5:02:1f:0b:32:
         eb:41:f9:ba:4b:15:1c:13:f6:f5:b6:71:0c:41:6a:ef:98:04:
         74:b0:ab:4a:f1:90:3c:71:8c:29:1c:b4:2f:0f:17:1f:91:fb:
         21:f2:f3:db:6a:fe:e6:e5:45:18:63:3d:4c:c8:9a:cb:ad:21:
         de:7e:3f:76:23:26:73:5b:ff:e7:da:3a:10:b1:c2:e0:a7:e0:
         57:a2:5b:c7:a2:a8:d2:82:a3:d7:d6:59:bb:d4:52:ce:30:10:
         79:f2:05:dc:80:0a:fb:33:fd:44:97:0c:d0:71:36:c9:7b:37:
         17:c9:da:6c:34:34:06:64:fc:4f:3d:30:f5:87:63:73:83:50:
         14:7e:53:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:07:25 2026 by rpki-client