Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/networkservices/1/326131343a366634353a3331313a3a2f34382d3438203d3e203530323234.roa
File:                     326131343a366634353a3331313a3a2f34382d3438203d3e203530323234.roa (raw, json)
Hash identifier:          UtCeGVmcmbwyvbGfuf7vHPUZrs2EWjWeQsYtnNKOl0g=
Subject key identifier:   9F:97:7A:81:EC:5B:15:1B:CA:D4:EE:03:B9:C6:2E:32:13:80:68:93
Certificate issuer:       /CN=D7C7075EDD2768C681D7419F3A12E49EA69B5976
Certificate serial:       2187654EF9E0DFF2A33A992F8ABCDF42B4EC6ECF
Authority key identifier: D7:C7:07:5E:DD:27:68:C6:81:D7:41:9F:3A:12:E4:9E:A6:9B:59:76
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/D7C7075EDD2768C681D7419F3A12E49EA69B5976.cer
Subject info access:      rsync://rpki.cc/repo/networkservices/1/326131343a366634353a3331313a3a2f34382d3438203d3e203530323234.roa
Signing time:             Mon 02 Feb 2026 17:51:53 +0000
ROA not before:           Mon 02 Feb 2026 17:46:53 +0000
ROA not after:            Mon 01 Feb 2027 17:51:53 +0000
asID:                     50224
IP address blocks:        2a14:6f45:311::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.cc/repo/networkservices/1/D7C7075EDD2768C681D7419F3A12E49EA69B5976.crl
                          rsync://rpki.cc/repo/networkservices/1/D7C7075EDD2768C681D7419F3A12E49EA69B5976.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/D7C7075EDD2768C681D7419F3A12E49EA69B5976.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 05:53:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:87:65:4e:f9:e0:df:f2:a3:3a:99:2f:8a:bc:df:42:b4:ec:6e:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7C7075EDD2768C681D7419F3A12E49EA69B5976
        Validity
            Not Before: Feb  2 17:46:53 2026 GMT
            Not After : Feb  1 17:51:53 2027 GMT
        Subject: CN=9F977A81EC5B151BCAD4EE03B9C62E3213806893
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:57:b2:5d:b7:76:cb:02:22:6d:2a:38:1d:9e:
                    92:da:bb:f5:7e:3a:7f:e6:2f:a5:08:5b:05:91:ad:
                    39:42:6d:e7:4b:0e:8f:5d:98:bf:c3:95:05:8d:45:
                    3e:5b:a0:86:77:ce:e7:36:68:db:7b:6a:dc:f1:8f:
                    7d:88:45:e4:b6:28:e2:30:cd:6e:cc:35:ab:89:59:
                    18:27:d3:ca:11:6d:82:21:fd:31:3d:1e:77:91:75:
                    5b:af:0c:29:42:56:9a:a4:57:31:57:67:2d:c4:19:
                    29:70:39:c4:0f:30:db:c6:8d:ab:85:29:ec:1b:ad:
                    f2:f8:6f:66:25:7b:db:b1:4e:df:70:58:21:10:02:
                    72:94:0d:c4:8a:55:2e:e0:88:b1:84:a8:59:e2:98:
                    cf:03:ce:bf:33:a2:40:09:75:d5:07:48:53:7c:35:
                    8f:90:e3:fd:a7:53:f2:a1:7e:00:9f:0a:72:b7:49:
                    c3:42:a1:d9:78:f3:37:2c:45:dc:23:98:b9:93:98:
                    fb:21:c5:50:3a:e1:b8:c6:8d:d7:0e:6a:e2:d2:1b:
                    ef:39:65:93:d7:52:0b:05:49:32:4a:f7:1b:f1:97:
                    0f:f0:43:c5:13:66:96:be:dd:68:4a:20:b3:77:a5:
                    5d:eb:fc:a1:d1:b4:9f:91:a4:a5:e5:d4:3e:39:e7:
                    87:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:97:7A:81:EC:5B:15:1B:CA:D4:EE:03:B9:C6:2E:32:13:80:68:93
            X509v3 Authority Key Identifier:
                keyid:D7:C7:07:5E:DD:27:68:C6:81:D7:41:9F:3A:12:E4:9E:A6:9B:59:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/networkservices/1/D7C7075EDD2768C681D7419F3A12E49EA69B5976.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/D7C7075EDD2768C681D7419F3A12E49EA69B5976.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/networkservices/1/326131343a366634353a3331313a3a2f34382d3438203d3e203530323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:6f45:311::/48

    Signature Algorithm: sha256WithRSAEncryption
         10:0b:22:ec:ad:f6:34:f1:0e:d1:42:63:fe:92:84:ee:23:86:
         dd:f5:06:b4:26:75:80:c3:2e:d1:20:4d:80:9a:73:50:b4:dd:
         e8:83:c3:2b:31:c5:e9:1c:46:25:1f:2b:cb:98:8a:48:79:db:
         97:9e:6c:59:dc:7c:1a:19:d4:9b:34:35:c4:02:c7:a2:eb:ba:
         6a:05:95:46:95:bf:bb:69:50:99:e3:5a:51:6e:43:31:66:e5:
         3f:4d:ba:c5:f7:bd:9a:49:d0:ab:ee:8b:44:45:c7:95:62:16:
         d3:d4:12:13:b8:85:fd:44:ac:84:8a:4a:90:3b:d7:c4:98:87:
         b3:8f:f2:3b:bc:8e:ec:92:82:4f:29:fd:c3:61:53:47:ec:f5:
         b3:bf:d4:18:db:f9:cd:89:45:a1:a1:5e:7c:3e:cb:d4:d8:4d:
         d7:0a:ec:38:6b:d5:1a:76:a9:7c:a7:42:cc:3f:56:b7:b1:6d:
         f7:51:21:26:dc:bb:9b:5f:56:a3:ca:02:dc:6d:46:c2:96:46:
         01:3c:b4:eb:66:7f:74:59:20:d1:03:28:3f:cc:e5:eb:27:b6:
         bf:f0:86:fc:57:fd:51:f4:a9:1f:1b:d9:19:34:14:d3:6f:1c:
         0e:27:db:3f:0f:d2:bd:eb:60:91:87:41:ea:7d:bb:76:60:79:
         a3:b1:87:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:25:11 2026 by rpki-client