Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/networkservices/1/326131343a366634353a3331323a3a2f34382d3438203d3e203530323234.roa
File:                     326131343a366634353a3331323a3a2f34382d3438203d3e203530323234.roa (raw, json)
Hash identifier:          /OzNRZx4m0Ne8K+Dg/b4+u6KkvfYADceL54WUkjAM00=
Subject key identifier:   11:1B:A5:89:93:16:B2:57:82:6C:D4:33:74:F2:AD:53:D3:20:80:8D
Certificate issuer:       /CN=D7C7075EDD2768C681D7419F3A12E49EA69B5976
Certificate serial:       6C11AE3953571CFEF285F7B365E5CBB10EA31E38
Authority key identifier: D7:C7:07:5E:DD:27:68:C6:81:D7:41:9F:3A:12:E4:9E:A6:9B:59:76
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/D7C7075EDD2768C681D7419F3A12E49EA69B5976.cer
Subject info access:      rsync://rpki.cc/repo/networkservices/1/326131343a366634353a3331323a3a2f34382d3438203d3e203530323234.roa
Signing time:             Mon 02 Feb 2026 17:52:04 +0000
ROA not before:           Mon 02 Feb 2026 17:47:04 +0000
ROA not after:            Mon 01 Feb 2027 17:52:04 +0000
asID:                     50224
IP address blocks:        2a14:6f45:312::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.cc/repo/networkservices/1/D7C7075EDD2768C681D7419F3A12E49EA69B5976.crl
                          rsync://rpki.cc/repo/networkservices/1/D7C7075EDD2768C681D7419F3A12E49EA69B5976.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/D7C7075EDD2768C681D7419F3A12E49EA69B5976.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 05:53:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:11:ae:39:53:57:1c:fe:f2:85:f7:b3:65:e5:cb:b1:0e:a3:1e:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7C7075EDD2768C681D7419F3A12E49EA69B5976
        Validity
            Not Before: Feb  2 17:47:04 2026 GMT
            Not After : Feb  1 17:52:04 2027 GMT
        Subject: CN=111BA5899316B257826CD43374F2AD53D320808D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:34:cc:2a:aa:75:bc:0e:c4:1e:dd:b0:37:34:
                    96:16:9d:b0:4d:26:85:66:f9:cd:9a:21:c6:af:ef:
                    25:c3:21:2f:84:6b:47:ce:1d:4a:33:10:e2:16:d9:
                    43:37:6f:18:d9:dc:0c:9c:c8:52:2b:1d:8c:e5:44:
                    6e:3e:4e:ad:d1:d3:77:b5:30:e2:3a:7a:53:ee:37:
                    c1:7a:4f:1d:55:18:c5:f1:0a:1e:55:83:cf:ff:85:
                    0c:a1:13:98:1e:b6:02:63:ca:19:56:5e:96:1d:33:
                    2d:af:5f:4e:ff:73:26:c0:26:f8:17:f2:f3:bd:a0:
                    c2:3a:b0:06:be:be:fa:f0:78:04:fd:e2:b3:9e:81:
                    74:a2:ea:f8:b4:a5:85:6e:06:40:b0:3e:c4:93:0b:
                    19:17:80:aa:f7:f8:ed:90:c8:e6:af:13:02:81:31:
                    a0:83:98:8a:53:55:c7:2b:27:59:28:0d:46:b4:b8:
                    f3:61:f8:e4:ff:2d:82:87:10:b2:f0:08:66:95:38:
                    98:9f:74:e2:27:37:c6:18:db:86:55:ac:bb:ba:4b:
                    d4:62:57:98:0c:c4:1a:2f:56:9f:33:43:fc:4b:79:
                    6c:75:de:a5:c6:e3:6c:5e:ec:98:0d:a5:5f:06:2a:
                    1d:00:70:f5:87:bd:3a:43:d7:4a:ae:d1:bf:39:f8:
                    2b:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:1B:A5:89:93:16:B2:57:82:6C:D4:33:74:F2:AD:53:D3:20:80:8D
            X509v3 Authority Key Identifier:
                keyid:D7:C7:07:5E:DD:27:68:C6:81:D7:41:9F:3A:12:E4:9E:A6:9B:59:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/networkservices/1/D7C7075EDD2768C681D7419F3A12E49EA69B5976.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/D7C7075EDD2768C681D7419F3A12E49EA69B5976.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/networkservices/1/326131343a366634353a3331323a3a2f34382d3438203d3e203530323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:6f45:312::/48

    Signature Algorithm: sha256WithRSAEncryption
         96:56:60:fd:b6:d1:42:24:a7:cb:0b:7a:ca:e9:2f:81:67:7b:
         be:2d:88:4b:a1:ae:b4:cf:3d:c4:5f:9d:ff:f7:36:da:e5:6a:
         b0:50:97:9c:26:93:fc:9e:76:1a:e6:eb:82:ed:9f:59:40:b4:
         77:7e:ad:98:d3:fe:21:80:7d:d8:62:df:a4:08:dd:fb:54:42:
         d5:1e:c1:03:8f:b9:c1:6d:33:90:71:e5:84:df:93:dd:fd:db:
         22:bf:34:fb:98:10:da:35:10:6c:2f:02:5c:49:00:19:9c:50:
         9d:07:0d:16:7a:f2:da:3b:1a:dc:bf:5d:16:e4:2c:10:0c:cf:
         91:59:32:52:34:75:30:2d:21:38:e6:3e:e4:71:7e:7e:53:20:
         c2:ed:4c:48:c8:06:c7:61:88:be:1c:91:a1:04:2e:af:1f:a8:
         2f:72:3b:ae:7e:2c:e4:a6:0e:05:a7:9f:15:2e:6a:e9:90:f6:
         77:37:d1:bf:9e:9a:c6:9f:e7:58:15:12:ce:98:c9:c8:5f:79:
         71:96:e1:44:74:60:d1:74:fa:c9:46:7e:1c:02:23:08:19:bb:
         9b:40:0b:e8:fa:0a:6f:a3:fd:46:0f:7c:e8:01:07:0f:00:c8:
         27:f7:ef:3e:f0:f1:67:7b:27:ad:68:f5:b1:60:d4:a2:2a:63:
         28:52:e5:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:25:14 2026 by rpki-client