Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373030323a3a2f34382d3438203d3e20323135313236.roa
File: 326131343a373538313a373030323a3a2f34382d3438203d3e20323135313236.roa (raw, json)
Hash identifier: tXYIpPpe+CA9uxN09qjW2HV5aClFuXYsRTk8RgSJa8o=
Subject key identifier: 1C:B7:99:31:CD:A1:F0:63:6D:88:55:78:2A:5E:14:EA:38:E8:24:4B
Certificate issuer: /CN=F78178425D897035E1D77343191BF013B39B03A5
Certificate serial: 7BBE662FB4C9F9110D49FCBDBFB1C4E973257D38
Authority key identifier: F7:81:78:42:5D:89:70:35:E1:D7:73:43:19:1B:F0:13:B3:9B:03:A5
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373030323a3a2f34382d3438203d3e20323135313236.roa
Signing time: Wed 04 Feb 2026 20:23:01 +0000
ROA not before: Wed 04 Feb 2026 20:18:01 +0000
ROA not after: Wed 03 Feb 2027 20:23:01 +0000
asID: 215126
IP address blocks: 2a14:7581:7002::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:be:66:2f:b4:c9:f9:11:0d:49:fc:bd:bf:b1:c4:e9:73:25:7d:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F78178425D897035E1D77343191BF013B39B03A5
Validity
Not Before: Feb 4 20:18:01 2026 GMT
Not After : Feb 3 20:23:01 2027 GMT
Subject: CN=1CB79931CDA1F0636D8855782A5E14EA38E8244B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:38:ab:0b:33:6c:ed:93:05:f8:02:2c:0c:e4:
af:e6:aa:6e:4f:64:85:5f:eb:91:49:6a:e4:38:d8:
e7:62:73:0a:c9:ec:30:46:10:33:e8:4e:8b:33:99:
f9:ed:6c:ff:d4:d2:05:35:4c:64:c5:50:28:b3:b3:
af:c4:4c:ac:76:3c:43:94:e9:91:66:26:be:6a:79:
ea:c6:17:03:58:99:0c:0a:23:77:0b:b3:03:e6:88:
ef:e5:ce:05:91:c8:e6:4a:16:e7:21:70:ab:cc:f7:
18:35:84:71:63:b8:80:eb:76:f4:c1:77:05:d4:d3:
6a:ee:d3:b6:da:8e:19:fd:3e:b4:7a:c1:6d:74:dd:
26:a0:28:b2:71:7e:83:37:29:fa:58:1d:f7:11:43:
1d:79:e2:cd:c9:a0:e9:19:fc:6c:d0:58:86:1d:b7:
c2:7d:fd:7d:c4:af:9c:f9:66:e3:65:7f:95:8a:b5:
9f:58:48:dd:d4:ae:b1:4a:cb:46:02:0c:1d:fe:ab:
ba:5b:e7:54:36:01:b4:6c:a9:82:ba:d9:07:43:09:
c2:7d:c6:9a:fe:71:82:62:c7:d0:ba:55:76:52:01:
ef:e6:28:07:5a:05:41:3f:58:79:80:37:17:d2:29:
e1:cb:c1:0a:1f:30:5f:78:4b:fb:f5:b7:23:43:d9:
40:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:B7:99:31:CD:A1:F0:63:6D:88:55:78:2A:5E:14:EA:38:E8:24:4B
X509v3 Authority Key Identifier:
keyid:F7:81:78:42:5D:89:70:35:E1:D7:73:43:19:1B:F0:13:B3:9B:03:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/F78178425D897035E1D77343191BF013B39B03A5.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373030323a3a2f34382d3438203d3e20323135313236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:7002::/48
Signature Algorithm: sha256WithRSAEncryption
21:07:c4:ff:f0:10:60:a4:f0:2c:44:20:1a:56:e2:cf:88:b6:
c6:70:51:61:46:c6:b5:74:fe:6b:df:49:45:37:c5:6c:39:71:
5c:ff:0c:70:3e:49:d6:ed:a4:bf:cc:94:7b:5d:7e:39:df:b6:
ae:1e:fd:47:23:dd:9e:da:06:be:87:b0:93:be:0a:c7:a4:26:
04:bb:bb:8d:0b:ca:86:bf:b7:1e:30:19:dd:9a:e9:3d:3e:0d:
e0:45:ac:aa:44:77:c5:9a:9a:06:23:78:82:82:d0:d7:58:4e:
fa:5e:1d:ca:d1:aa:e1:62:c4:ba:cf:e5:77:11:d7:03:a1:a5:
b0:8c:df:99:7f:e0:e3:3e:69:e5:a8:2f:35:8d:7d:03:f6:e2:
26:4c:5b:ff:1c:57:2e:02:35:bd:cb:11:a9:4e:7e:27:eb:c5:
01:b7:91:fb:94:45:9d:95:a0:e9:ad:ad:cb:8e:5d:2f:49:a8:
1f:95:9c:cd:20:c3:d3:75:a2:c7:9e:ba:b5:ed:81:93:65:fa:
0b:6b:68:a6:d8:dd:07:8f:b1:59:51:52:4e:91:fe:19:7d:36:
45:f8:1b:cc:58:99:e1:92:a8:f3:c7:97:0c:7f:37:b4:e6:9b:
e1:0f:54:25:e7:4b:2e:ab:85:8a:21:85:10:f0:e6:27:31:04:
0a:31:3e:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:03:52 2026 by rpki-client