Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/networkservices/1/326131343a366634353a3330323a3a2f34382d3438203d3e203530323234.roa
File:                     326131343a366634353a3330323a3a2f34382d3438203d3e203530323234.roa (raw, json)
Hash identifier:          t1yml6qJEAUVThTV9CA4KD3RsQwl7GZcx9ZZW81gFdM=
Subject key identifier:   DB:39:01:E2:BF:17:AB:DD:49:FB:F6:3E:90:01:42:EC:AA:2B:5C:31
Certificate issuer:       /CN=D7C7075EDD2768C681D7419F3A12E49EA69B5976
Certificate serial:       299F3DCEAEA664ECD99F9E4C8290E0B91BFD474E
Authority key identifier: D7:C7:07:5E:DD:27:68:C6:81:D7:41:9F:3A:12:E4:9E:A6:9B:59:76
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/D7C7075EDD2768C681D7419F3A12E49EA69B5976.cer
Subject info access:      rsync://rpki.cc/repo/networkservices/1/326131343a366634353a3330323a3a2f34382d3438203d3e203530323234.roa
Signing time:             Mon 02 Feb 2026 17:51:14 +0000
ROA not before:           Mon 02 Feb 2026 17:46:14 +0000
ROA not after:            Mon 01 Feb 2027 17:51:14 +0000
asID:                     50224
IP address blocks:        2a14:6f45:302::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.cc/repo/networkservices/1/D7C7075EDD2768C681D7419F3A12E49EA69B5976.crl
                          rsync://rpki.cc/repo/networkservices/1/D7C7075EDD2768C681D7419F3A12E49EA69B5976.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/D7C7075EDD2768C681D7419F3A12E49EA69B5976.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:47:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:9f:3d:ce:ae:a6:64:ec:d9:9f:9e:4c:82:90:e0:b9:1b:fd:47:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7C7075EDD2768C681D7419F3A12E49EA69B5976
        Validity
            Not Before: Feb  2 17:46:14 2026 GMT
            Not After : Feb  1 17:51:14 2027 GMT
        Subject: CN=DB3901E2BF17ABDD49FBF63E900142ECAA2B5C31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f2:c0:3d:5b:78:18:c1:56:cb:75:e1:4d:a4:
                    5f:a1:3f:d6:bf:67:70:f3:58:59:82:f5:d0:c3:c3:
                    89:a6:90:95:88:d4:02:84:dd:f1:52:14:96:ee:c2:
                    81:ca:83:aa:2e:82:19:d7:fb:75:2d:0b:47:c8:0c:
                    03:5a:9f:c9:f1:e3:b1:13:22:b7:3f:a1:a0:92:18:
                    21:f9:82:4e:42:fa:0b:fb:6b:2d:55:e1:69:8b:3d:
                    23:2a:8d:bd:67:ac:a8:ac:9f:d5:61:de:ad:18:3b:
                    3c:92:75:79:1a:ce:b6:80:71:2d:10:69:59:83:c3:
                    9b:34:9e:95:fc:5f:1d:58:d4:8b:76:94:eb:83:3a:
                    8f:bc:2b:af:e1:91:27:5c:92:6e:da:d3:f4:4b:49:
                    e6:80:85:a4:a1:c2:6f:10:93:62:24:8f:b7:fe:83:
                    3c:8a:45:26:78:a3:d7:b4:80:53:14:ae:a6:1c:b2:
                    5e:92:20:65:b0:cb:9d:a5:ad:82:ff:b1:31:cd:a8:
                    22:f4:47:2d:7e:d6:6f:de:1b:dd:af:90:3f:bf:d9:
                    56:8a:71:ae:17:a2:cd:3d:cb:16:3a:28:2d:6a:69:
                    6c:cd:ab:12:1b:88:34:80:51:9e:82:cb:3b:45:35:
                    6c:64:76:c4:32:7f:a9:de:81:7d:79:39:7a:26:c4:
                    ac:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:39:01:E2:BF:17:AB:DD:49:FB:F6:3E:90:01:42:EC:AA:2B:5C:31
            X509v3 Authority Key Identifier:
                keyid:D7:C7:07:5E:DD:27:68:C6:81:D7:41:9F:3A:12:E4:9E:A6:9B:59:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/networkservices/1/D7C7075EDD2768C681D7419F3A12E49EA69B5976.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/D7C7075EDD2768C681D7419F3A12E49EA69B5976.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/networkservices/1/326131343a366634353a3330323a3a2f34382d3438203d3e203530323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:6f45:302::/48

    Signature Algorithm: sha256WithRSAEncryption
         6d:7d:e8:b2:37:38:0f:1f:33:5d:7e:ba:3c:c0:b5:4b:00:a7:
         a4:34:2f:93:a6:f0:11:3b:b6:1d:e8:0f:26:a7:f6:68:2d:30:
         8c:5d:a9:bb:82:72:0b:5b:c1:eb:95:65:98:81:0e:82:fb:09:
         67:1b:51:6a:34:f7:6f:cb:b6:8d:3d:ee:98:78:0f:36:74:79:
         b2:70:dc:0e:a5:98:dc:5d:2e:d9:92:03:9f:32:4d:bd:2e:d0:
         7e:4e:6f:0b:71:34:7f:f4:fb:3d:aa:0e:13:d1:c3:a0:03:12:
         36:b5:84:32:54:1e:b6:a4:5f:94:27:4f:5c:51:da:a0:91:1d:
         9a:0a:39:d6:61:c3:12:02:06:0c:41:e5:31:22:91:17:3c:f9:
         af:d1:8b:29:7f:2e:ab:3e:f9:3a:04:ad:74:d5:37:f5:67:d1:
         0f:10:64:32:3d:9f:c7:a0:b3:e2:1e:bd:ff:49:4d:ca:44:4d:
         4e:32:03:42:f2:98:d0:47:41:a6:86:6b:ca:ce:e1:55:2a:6e:
         eb:80:53:b2:53:7d:c1:49:fa:53:7b:27:a6:5f:a7:aa:5a:e5:
         14:a1:77:2b:c9:be:e7:cc:cd:65:1f:48:bc:bc:a6:01:b9:22:
         4b:c7:95:10:05:e0:74:4d:3c:e0:59:b9:f0:d4:c0:4c:98:b0:
         5d:86:6f:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:34:12 2026 by rpki-client