Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/17/326130373a353463313a386330303a3a2f34302d3438203d3e203630393030.roa
File:                     326130373a353463313a386330303a3a2f34302d3438203d3e203630393030.roa (raw, json)
Hash identifier:          sG0FojjRKas8QzcSivJJEAuzVeywTmfpNElJeylPUdA=
Subject key identifier:   27:C8:77:DC:FD:EE:63:1B:0D:D6:06:50:00:AC:CF:F2:54:B1:73:DF
Certificate issuer:       /CN=558AB8D1E384C19E265C3C1F40E7F33D970F7120
Certificate serial:       3595724B585A50EEEF04F32E4FAE11395F2783EB
Authority key identifier: 55:8A:B8:D1:E3:84:C1:9E:26:5C:3C:1F:40:E7:F3:3D:97:0F:71:20
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/558AB8D1E384C19E265C3C1F40E7F33D970F7120.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/17/326130373a353463313a386330303a3a2f34302d3438203d3e203630393030.roa
Signing time:             Fri 05 Jun 2026 12:04:24 +0000
ROA not before:           Fri 05 Jun 2026 11:59:24 +0000
ROA not after:            Fri 04 Jun 2027 12:04:24 +0000
asID:                     60900
IP address blocks:        2a07:54c1:8c00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/17/558AB8D1E384C19E265C3C1F40E7F33D970F7120.crl
                          rsync://rpki.cc/repo/MythicalKitten/17/558AB8D1E384C19E265C3C1F40E7F33D970F7120.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/558AB8D1E384C19E265C3C1F40E7F33D970F7120.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Jun 2026 01:36:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:95:72:4b:58:5a:50:ee:ef:04:f3:2e:4f:ae:11:39:5f:27:83:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=558AB8D1E384C19E265C3C1F40E7F33D970F7120
        Validity
            Not Before: Jun  5 11:59:24 2026 GMT
            Not After : Jun  4 12:04:24 2027 GMT
        Subject: CN=27C877DCFDEE631B0DD6065000ACCFF254B173DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:6a:65:e8:ac:ab:10:1c:6d:ab:be:f2:1c:fd:
                    c6:43:fe:d1:fa:10:44:a6:c1:4e:e6:c2:be:6f:81:
                    fd:f7:c5:33:8e:c4:6d:b1:f1:61:5c:b3:03:20:37:
                    0c:ff:62:fc:75:4a:2b:59:62:fe:00:14:23:f7:28:
                    7c:5c:b2:07:a6:05:fa:34:0a:33:90:19:c0:06:92:
                    03:75:01:91:db:a3:53:81:31:d0:bd:2a:99:e8:62:
                    ff:66:57:fa:ef:36:a3:59:42:de:10:72:c7:48:c0:
                    2b:a9:2c:bf:20:86:a9:a3:0c:68:bd:d3:06:1c:45:
                    11:a0:09:43:96:0c:e5:69:85:43:57:bc:d3:d1:38:
                    c8:0d:06:e5:0c:02:4a:8c:4e:47:bc:f6:60:ba:55:
                    1f:06:06:09:47:22:6a:6a:b3:94:d7:66:8d:c4:48:
                    a9:e6:4a:26:3b:3e:ef:91:0c:ca:ab:d0:d0:95:7b:
                    be:4a:ad:ad:1a:75:db:8a:32:c3:19:a0:00:04:85:
                    40:29:b2:d6:ff:90:82:b0:86:31:d1:c9:09:66:55:
                    67:74:50:c5:b1:80:6f:33:dc:b0:1d:44:2f:ab:35:
                    08:d1:80:14:91:ba:e8:85:a6:44:67:5e:eb:5f:c9:
                    88:8e:27:7a:39:5e:5e:4a:33:43:58:aa:e8:91:20:
                    86:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:C8:77:DC:FD:EE:63:1B:0D:D6:06:50:00:AC:CF:F2:54:B1:73:DF
            X509v3 Authority Key Identifier:
                keyid:55:8A:B8:D1:E3:84:C1:9E:26:5C:3C:1F:40:E7:F3:3D:97:0F:71:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/17/558AB8D1E384C19E265C3C1F40E7F33D970F7120.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/558AB8D1E384C19E265C3C1F40E7F33D970F7120.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/17/326130373a353463313a386330303a3a2f34302d3438203d3e203630393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1:8c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         02:17:30:82:51:8f:dd:8a:bd:d6:a3:a6:77:28:ae:37:97:28:
         09:92:85:b7:ff:a5:02:42:d8:21:bc:a3:79:03:da:e6:47:4d:
         cb:b0:05:91:4f:2f:46:95:0d:84:1b:0e:ef:96:88:1a:83:d7:
         cd:02:d3:c9:24:76:da:12:5f:c3:38:cd:e5:94:9c:66:3c:7c:
         89:fe:e2:2b:7b:35:8e:2e:97:ba:c3:40:eb:84:68:a0:54:8a:
         a3:e8:c1:cb:e9:8b:4a:67:24:56:cd:97:ae:9a:00:6d:10:cd:
         ce:f0:c7:dd:21:7f:d0:c2:2b:3d:ef:cf:45:36:16:41:3d:75:
         77:43:23:67:18:c3:a1:97:9c:18:d0:44:3d:27:bc:01:0d:dd:
         bf:8e:32:66:d5:12:b3:b7:82:23:03:3e:a2:80:91:49:8e:2f:
         bc:1d:c7:06:11:3c:f1:31:3f:00:8a:30:b4:7f:84:e8:82:04:
         9b:bd:fe:af:d5:47:06:81:82:f4:09:e6:3c:2c:74:15:30:36:
         d4:41:89:db:b7:c8:b7:77:a5:10:89:4f:8c:c3:6d:50:1c:18:
         38:72:4d:74:ca:cd:a9:db:bc:20:29:6b:cc:67:33:79:63:a7:
         c2:48:5e:0b:a1:db:7a:24:2e:6e:bd:8d:50:e6:ba:14:7f:d3:
         7f:4e:99:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 14:59:21 2026 by rpki-client