Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/networkservices/1/326131343a366634353a3331333a3a2f34382d3438203d3e203530323234.roa
File:                     326131343a366634353a3331333a3a2f34382d3438203d3e203530323234.roa (raw, json)
Hash identifier:          mJFUSFtLJm2QCw5rZrTf89qhj/5IXlJccIX58qfz9Ws=
Subject key identifier:   37:6D:E3:9C:B1:76:CE:D9:7E:AB:FD:74:F4:B5:7E:44:41:CF:55:AC
Certificate issuer:       /CN=D7C7075EDD2768C681D7419F3A12E49EA69B5976
Certificate serial:       7E1A20615C05DFE80F82E1AC43D34F756CB0F139
Authority key identifier: D7:C7:07:5E:DD:27:68:C6:81:D7:41:9F:3A:12:E4:9E:A6:9B:59:76
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/D7C7075EDD2768C681D7419F3A12E49EA69B5976.cer
Subject info access:      rsync://rpki.cc/repo/networkservices/1/326131343a366634353a3331333a3a2f34382d3438203d3e203530323234.roa
Signing time:             Mon 02 Feb 2026 17:52:14 +0000
ROA not before:           Mon 02 Feb 2026 17:47:14 +0000
ROA not after:            Mon 01 Feb 2027 17:52:14 +0000
asID:                     50224
IP address blocks:        2a14:6f45:313::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.cc/repo/networkservices/1/D7C7075EDD2768C681D7419F3A12E49EA69B5976.crl
                          rsync://rpki.cc/repo/networkservices/1/D7C7075EDD2768C681D7419F3A12E49EA69B5976.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/D7C7075EDD2768C681D7419F3A12E49EA69B5976.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:1a:20:61:5c:05:df:e8:0f:82:e1:ac:43:d3:4f:75:6c:b0:f1:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7C7075EDD2768C681D7419F3A12E49EA69B5976
        Validity
            Not Before: Feb  2 17:47:14 2026 GMT
            Not After : Feb  1 17:52:14 2027 GMT
        Subject: CN=376DE39CB176CED97EABFD74F4B57E4441CF55AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:cf:47:89:ee:e4:6b:0c:64:ea:85:92:eb:10:
                    c7:cf:59:82:eb:95:32:55:d6:af:ae:de:8f:7a:3f:
                    2a:3d:67:30:a0:fd:28:78:8a:6c:ec:9b:7e:14:aa:
                    59:0e:4e:58:13:0d:b0:cd:b7:37:3e:17:4f:85:0a:
                    02:0a:3c:7f:4c:57:83:89:8a:dc:3e:40:6c:86:5a:
                    6e:ea:3f:49:46:7a:56:f8:02:6c:dc:5a:cd:c9:9b:
                    a6:e4:11:69:b9:6b:07:bd:e1:44:44:a7:2d:20:78:
                    ee:df:b8:ab:9c:48:a6:96:52:d4:5a:31:fa:d0:2b:
                    7e:c1:40:8a:4f:41:5a:35:d3:79:13:7a:23:a9:f4:
                    83:0d:c5:53:b9:53:c1:26:2d:44:5f:cb:68:0f:a3:
                    f7:37:42:84:50:7d:db:31:8b:c2:90:99:73:f1:eb:
                    88:17:a6:6e:aa:86:55:51:b7:32:1d:6a:86:e0:4c:
                    9d:69:e1:c6:e9:88:30:a3:0d:3c:02:ba:24:5a:2c:
                    f6:ab:32:7d:67:dc:79:df:a6:c4:3e:59:00:27:51:
                    6d:a1:ea:10:a7:f8:19:86:a3:f2:72:49:ae:73:30:
                    11:04:07:f1:0b:97:73:c3:8f:8d:50:05:3d:c1:bd:
                    10:16:8d:13:a1:d2:76:8c:9c:18:ad:7c:54:ff:e5:
                    0d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:6D:E3:9C:B1:76:CE:D9:7E:AB:FD:74:F4:B5:7E:44:41:CF:55:AC
            X509v3 Authority Key Identifier:
                keyid:D7:C7:07:5E:DD:27:68:C6:81:D7:41:9F:3A:12:E4:9E:A6:9B:59:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/networkservices/1/D7C7075EDD2768C681D7419F3A12E49EA69B5976.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/D7C7075EDD2768C681D7419F3A12E49EA69B5976.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/networkservices/1/326131343a366634353a3331333a3a2f34382d3438203d3e203530323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:6f45:313::/48

    Signature Algorithm: sha256WithRSAEncryption
         1c:01:68:3c:80:f4:bf:aa:81:58:01:d8:5e:63:88:46:29:8c:
         7f:ec:e9:f4:8f:4d:8f:2d:76:36:6d:73:fa:5d:71:6c:18:34:
         b2:7b:ce:ab:c0:61:2d:88:28:f2:66:a7:ce:1c:48:88:de:3d:
         db:79:59:41:7a:71:d5:e4:eb:53:00:1d:57:1a:0b:46:71:c6:
         b6:9a:78:dc:a0:cb:c9:7c:1d:d9:c2:91:1f:1a:bd:96:2b:ba:
         12:06:3d:1a:f6:8f:86:be:93:f0:ef:da:4d:91:a5:8d:53:e2:
         17:48:89:2a:36:59:d0:08:ae:aa:cf:14:55:f9:c5:48:83:db:
         6d:b9:bf:6d:67:7b:26:30:15:43:5f:4b:23:62:c3:5d:0c:74:
         36:65:f3:f4:89:64:10:a3:4b:82:d2:58:cd:6c:c9:c7:d6:5e:
         bd:06:92:3c:6d:29:3b:4b:c5:96:36:f8:a3:39:41:8b:78:a4:
         34:a5:54:23:f9:6c:b0:79:13:18:32:4d:37:a4:cf:82:ba:a5:
         5f:95:08:50:dd:fa:a7:44:d4:3e:fb:96:38:b3:3c:8d:2d:d3:
         5c:e7:ef:e2:11:70:85:ba:ed:0a:35:da:18:60:73:af:39:3c:
         ea:a4:97:03:48:97:da:35:cf:8a:41:a3:e2:dc:8d:aa:79:1c:
         b4:bd:31:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:59:15 2026 by rpki-client