Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373030303a3a2f34382d3438203d3e20323135313236.roa
File: 326131343a373538313a373030303a3a2f34382d3438203d3e20323135313236.roa (raw, json)
Hash identifier: FpTIlYEd4wOrkWMAB0JbZcHdoIRbLyAq+c9Zq3FHhwQ=
Subject key identifier: C2:8E:FA:7A:18:3A:0E:6D:6C:62:59:BA:FE:7B:A1:34:BD:CB:3F:B3
Certificate issuer: /CN=F78178425D897035E1D77343191BF013B39B03A5
Certificate serial: 69B0DE0E5818D8CB288440D79E3E82D332F08F4D
Authority key identifier: F7:81:78:42:5D:89:70:35:E1:D7:73:43:19:1B:F0:13:B3:9B:03:A5
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373030303a3a2f34382d3438203d3e20323135313236.roa
Signing time: Wed 04 Feb 2026 20:21:34 +0000
ROA not before: Wed 04 Feb 2026 20:16:34 +0000
ROA not after: Wed 03 Feb 2027 20:21:34 +0000
asID: 215126
IP address blocks: 2a14:7581:7000::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:b0:de:0e:58:18:d8:cb:28:84:40:d7:9e:3e:82:d3:32:f0:8f:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F78178425D897035E1D77343191BF013B39B03A5
Validity
Not Before: Feb 4 20:16:34 2026 GMT
Not After : Feb 3 20:21:34 2027 GMT
Subject: CN=C28EFA7A183A0E6D6C6259BAFE7BA134BDCB3FB3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:06:a7:03:4b:22:d8:0f:14:7c:99:50:99:58:
a2:4a:7a:83:8c:27:28:3a:11:58:34:87:c2:e9:2e:
3b:f8:73:82:c9:f1:61:81:8b:77:92:a8:6f:c5:7b:
06:d0:c6:7a:f9:76:fd:18:e8:c8:dd:73:84:17:05:
e9:0f:a2:21:c8:1e:96:6a:c1:ae:5d:b3:57:26:bb:
22:c0:40:05:0b:1d:82:5f:dd:7f:a5:bd:07:cc:b7:
04:c3:96:6c:de:35:4a:f6:05:91:3c:a2:58:e9:5f:
be:2d:01:ad:e9:99:45:e2:ad:62:1f:65:c2:25:7e:
35:13:46:e5:1f:a8:0f:49:4d:0d:08:83:42:45:b3:
a2:1f:03:14:54:9e:0d:04:0b:dd:81:6f:0e:b9:23:
50:fc:88:07:9d:50:21:a0:8d:5e:5c:bf:0e:eb:9a:
1f:59:b3:d6:82:3d:e4:b4:81:e1:d2:73:bf:7e:d8:
6c:7e:ff:cf:9b:74:10:12:a3:c4:24:91:88:3f:fc:
2a:51:bc:46:0f:ac:e5:35:68:05:dd:9a:3a:f5:11:
3a:35:37:1b:8f:8a:e9:f9:53:69:ca:bc:31:bc:70:
07:35:33:3f:bf:28:26:50:f5:1c:c6:4d:e4:73:38:
88:c6:19:66:8c:f5:0b:23:49:ca:88:04:27:a4:50:
c4:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:8E:FA:7A:18:3A:0E:6D:6C:62:59:BA:FE:7B:A1:34:BD:CB:3F:B3
X509v3 Authority Key Identifier:
keyid:F7:81:78:42:5D:89:70:35:E1:D7:73:43:19:1B:F0:13:B3:9B:03:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/F78178425D897035E1D77343191BF013B39B03A5.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373030303a3a2f34382d3438203d3e20323135313236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:7000::/48
Signature Algorithm: sha256WithRSAEncryption
19:6d:90:6a:49:f8:75:7d:a2:62:cd:6d:41:75:13:1c:43:87:
90:93:5d:22:22:21:17:ba:42:f4:45:16:0d:e2:9b:53:e1:6f:
a0:64:67:e4:c8:86:ed:a3:81:66:88:41:eb:53:e0:ef:cb:1b:
e1:5e:e2:e7:7c:bc:96:27:a2:c3:80:9b:30:00:98:1d:56:5b:
85:a4:df:69:4e:79:50:41:2e:6f:a0:da:5f:be:6e:ea:cd:2e:
19:ea:f2:de:8b:99:7c:37:be:e1:6b:9a:64:58:4a:0d:87:6e:
10:b7:fd:3d:4b:e0:22:50:a1:fb:04:a7:c9:4d:9b:d7:1e:81:
9d:ec:1e:93:de:6b:51:3a:a6:d8:b2:b7:ae:63:ca:77:23:85:
6f:c5:3c:b7:52:2c:83:df:f0:50:74:ef:5b:e1:b6:ea:57:7e:
7f:59:ad:c9:87:60:83:4e:8b:1f:64:ed:82:80:01:f2:6c:57:
a8:9d:cf:85:8d:eb:09:14:3f:20:d9:5c:2e:65:b3:9a:cc:9f:
3f:5a:03:49:bf:dc:03:cf:ae:72:2d:92:a5:ab:11:1a:16:09:
38:49:9e:2a:2e:6d:17:1a:66:9b:b1:25:43:9e:2b:23:20:a3:
f3:14:d4:94:86:ec:fc:50:8c:94:fa:ea:0f:dc:ed:56:c1:ce:
7e:ee:cd:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:33:02 2026 by rpki-client