Route Origin Authorization
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a33663a36303a3a2f36342d3634203d3e20333939313638.roa
File: 326130303a646438303a33663a36303a3a2f36342d3634203d3e20333939313638.roa (raw, json)
Hash identifier: oaXTx/W6QECZ1JHdHwYmYlbTiMeEVCawp5XS21IeXXQ=
Subject key identifier: 45:D5:24:82:A4:31:93:C3:81:A4:3B:9C:B8:3D:13:35:66:80:A0:53
Certificate issuer: /CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Certificate serial: 524CF95212146532B7C6AAF5C165BB9C71ABF964
Authority key identifier: EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a33663a36303a3a2f36342d3634203d3e20333939313638.roa
Signing time: Sat 10 Oct 2026 13:29:18 +0000
ROA not before: Sat 10 Oct 2026 13:24:18 +0000
ROA not after: Sat 09 Oct 2027 13:29:18 +0000
asID: 399168
IP address blocks: 2a00:dd80:3f:60::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.mft
rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 09:23:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:4c:f9:52:12:14:65:32:b7:c6:aa:f5:c1:65:bb:9c:71:ab:f9:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Validity
Not Before: Oct 10 13:24:18 2026 GMT
Not After : Oct 9 13:29:18 2027 GMT
Subject: CN=45D52482A43193C381A43B9CB83D13356680A053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:53:de:e8:a2:1a:ec:52:bd:87:d1:2c:d1:ee:
bf:da:a6:f7:b4:1a:f0:5e:4d:80:b9:02:22:ff:0b:
ef:d3:72:de:13:e8:7b:ca:de:ca:16:49:58:99:28:
d6:5d:b1:8d:7b:5d:4a:22:6e:7a:3e:82:9e:d4:20:
50:2e:98:8f:32:ae:08:08:9f:31:d7:1e:73:95:6c:
b6:2c:07:25:49:d5:50:0a:3d:99:73:0e:7a:fa:c8:
fe:9e:c1:d4:e5:32:90:b4:d6:86:96:1b:c2:47:40:
e9:e1:15:ad:98:8e:1f:0e:c0:ee:5e:ca:40:eb:b2:
57:3f:c8:f1:60:c7:83:97:93:35:50:09:75:e3:47:
62:52:a9:6a:6e:c0:b6:ab:f8:8a:fc:c3:80:b6:21:
82:0d:9a:cb:b2:e1:b2:b1:d4:3f:70:ca:07:92:6e:
4b:5b:a9:43:dc:6c:e1:0f:6b:b5:a8:f1:7f:db:c3:
74:51:4f:95:6f:9e:eb:9d:93:ec:65:33:24:78:9b:
cf:82:e5:8b:64:61:f6:86:b9:97:04:19:c9:66:60:
59:b3:15:bb:d5:2b:8d:a5:dd:51:ae:ef:db:da:18:
9c:a0:a9:5a:63:59:01:e0:01:77:5b:ad:a4:ac:ab:
3a:35:f6:57:8c:56:3d:2f:9f:96:b2:8d:8e:c1:71:
e5:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:D5:24:82:A4:31:93:C3:81:A4:3B:9C:B8:3D:13:35:66:80:A0:53
X509v3 Authority Key Identifier:
keyid:EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a33663a36303a3a2f36342d3634203d3e20333939313638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:dd80:3f:60::/64
Signature Algorithm: sha256WithRSAEncryption
22:6a:97:e4:4f:75:b8:d3:ce:e5:eb:78:f2:a2:b8:0f:b1:81:
8f:a0:b7:c9:2d:20:39:11:c5:1f:a1:ad:d0:f0:a5:c9:c1:2e:
c1:6d:01:84:0f:fd:5c:28:4a:4c:7f:05:82:49:d9:0f:8d:96:
18:e7:f1:56:50:94:d4:70:14:47:60:e1:59:29:66:41:14:12:
1c:45:1e:23:08:10:d0:e8:41:9e:55:01:4d:0a:25:e1:5e:79:
9e:37:c0:b2:41:cc:5a:cb:1d:9b:1c:e0:1c:90:60:aa:d1:d0:
52:da:63:ce:bc:a3:a5:db:7d:91:96:d5:04:b0:0b:2a:d1:08:
2f:dc:c9:9f:40:0a:5c:8c:a6:c1:60:0e:fb:11:b6:4f:66:a1:
37:23:80:d5:74:d5:17:f4:38:62:9d:a7:c1:61:a9:17:1c:11:
65:1a:1b:79:10:d5:3b:97:41:a2:fc:bc:19:91:87:db:d6:a5:
6b:c4:9c:9c:31:d3:3d:36:bb:58:5b:4e:08:29:fc:05:0a:b8:
12:57:4d:e8:6c:31:ef:19:47:31:97:ff:cd:d8:03:44:2b:b0:
53:d2:40:04:cb:82:88:e8:14:05:62:7a:5c:e4:94:52:30:2a:
75:9b:92:97:22:f9:42:5d:1c:0a:c9:d1:f6:7d:60:53:68:67:
f7:3c:b2:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 00:28:59 2026 by rpki-client