Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373030303a3a2f33382d3338203d3e20323135313236.roa
File: 326131343a373538313a373030303a3a2f33382d3338203d3e20323135313236.roa (raw, json)
Hash identifier: 26pDBEv4xh7lJ/WewCe1LCqB3WT26rRUEoFdtvQdluc=
Subject key identifier: BB:9B:CA:31:9A:0A:C8:FC:CC:CD:94:24:8A:9B:C1:C6:0F:09:BA:1B
Certificate issuer: /CN=F78178425D897035E1D77343191BF013B39B03A5
Certificate serial: 4C926BDCC7B708A9D21760DCC26F0F97E10B86A9
Authority key identifier: F7:81:78:42:5D:89:70:35:E1:D7:73:43:19:1B:F0:13:B3:9B:03:A5
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373030303a3a2f33382d3338203d3e20323135313236.roa
Signing time: Wed 04 Feb 2026 21:13:13 +0000
ROA not before: Wed 04 Feb 2026 21:08:13 +0000
ROA not after: Wed 03 Feb 2027 21:13:13 +0000
asID: 215126
IP address blocks: 2a14:7581:7000::/38 maxlen: 38
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:92:6b:dc:c7:b7:08:a9:d2:17:60:dc:c2:6f:0f:97:e1:0b:86:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F78178425D897035E1D77343191BF013B39B03A5
Validity
Not Before: Feb 4 21:08:13 2026 GMT
Not After : Feb 3 21:13:13 2027 GMT
Subject: CN=BB9BCA319A0AC8FCCCCD94248A9BC1C60F09BA1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3d:6d:6a:b5:8d:ac:34:1c:1c:19:40:b2:c1:
7e:d1:83:5e:69:78:63:68:7e:b9:f1:68:24:79:10:
f6:66:3e:43:09:d0:af:01:e2:79:15:89:ee:d5:81:
fa:92:98:23:85:0f:b2:85:f4:3c:a4:b7:b4:bf:82:
62:64:ca:a7:2e:3b:32:49:9f:69:68:f0:f3:01:86:
a1:b1:dc:eb:ed:d9:18:ab:c2:fa:bc:50:82:f0:86:
61:34:24:3d:b6:1e:41:c8:dc:cd:83:7b:d6:2c:8a:
47:b3:cb:3b:2b:50:15:54:5f:57:8b:1b:33:0c:ab:
4f:87:1c:54:a5:c3:c9:3a:4b:7a:14:a7:a6:f8:df:
5e:ce:56:bf:86:e5:be:37:1f:02:ea:1a:1e:41:75:
b3:28:0a:6d:fa:c8:5e:b2:e7:84:94:e7:f5:04:7c:
e9:d6:f5:82:24:d0:97:bb:4f:c0:68:7d:72:8d:7c:
02:1d:5a:04:ad:4f:34:42:60:90:a8:8e:33:8b:00:
77:7d:77:9c:89:bf:9c:71:64:4a:23:3e:be:de:92:
47:a9:d6:35:f8:7a:40:3d:0c:f6:1f:a2:ff:72:1e:
6b:17:92:5b:17:99:b2:39:52:06:4c:40:7d:e7:9e:
50:77:f6:a0:45:9c:1b:a7:ba:fd:7d:ec:1a:e4:15:
41:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:9B:CA:31:9A:0A:C8:FC:CC:CD:94:24:8A:9B:C1:C6:0F:09:BA:1B
X509v3 Authority Key Identifier:
keyid:F7:81:78:42:5D:89:70:35:E1:D7:73:43:19:1B:F0:13:B3:9B:03:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/F78178425D897035E1D77343191BF013B39B03A5.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373030303a3a2f33382d3338203d3e20323135313236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:7000::/38
Signature Algorithm: sha256WithRSAEncryption
96:d0:19:2e:14:0a:98:2b:aa:d6:1b:ee:c6:b7:9f:81:33:9e:
29:d2:5d:3b:cf:d6:a8:ce:78:8a:2e:5a:db:82:b4:dd:8c:51:
3f:e6:81:49:bb:db:65:b7:e6:46:3d:3c:a7:e2:04:af:2a:85:
73:d7:cd:0b:b0:a9:60:cf:9f:3d:80:5a:d0:e4:d7:85:d5:94:
f5:cb:30:9e:1b:11:0b:a8:23:1c:61:51:25:db:98:7a:a6:c9:
91:c7:ef:0d:97:2a:a4:b4:39:9b:e2:72:33:2f:9c:04:07:97:
3e:c5:00:06:8a:e0:43:a5:64:56:59:17:63:50:cd:de:1e:e4:
ab:bf:b1:b4:71:f9:71:69:e9:91:05:18:52:db:ae:b5:5f:a9:
4e:53:42:4e:fe:c4:2e:b3:08:15:37:a5:bf:62:c7:5a:0a:5e:
8d:4f:74:b4:e8:28:18:df:e9:ab:29:43:0c:77:fd:2f:57:6d:
67:39:3a:7a:0f:aa:60:31:ab:26:61:eb:9e:ad:37:3b:65:84:
bd:e3:02:70:e9:53:f4:cf:ad:a9:ad:0f:32:20:59:9d:a2:a6:
57:27:d1:cb:00:b0:00:18:9a:b7:3a:1f:3f:c7:dd:be:42:eb:
28:28:b2:3d:c2:fe:34:47:74:a0:8d:5e:68:9e:e9:e8:a7:de:
64:4f:60:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:32:02 2026 by rpki-client