Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373030333a3a2f34382d3438203d3e20323135313236.roa
File: 326131343a373538313a373030333a3a2f34382d3438203d3e20323135313236.roa (raw, json)
Hash identifier: 8sU1kvdJhcbao2mSDe/rv+iel7o6SFQPa2YEdRrdYw8=
Subject key identifier: 1B:E6:CE:11:FC:76:EB:6D:88:5B:EA:1F:EA:36:EA:1C:5A:D1:5D:8F
Certificate issuer: /CN=F78178425D897035E1D77343191BF013B39B03A5
Certificate serial: 486FFBB949FD1A4E0FE791F1CCE902B102B98BF8
Authority key identifier: F7:81:78:42:5D:89:70:35:E1:D7:73:43:19:1B:F0:13:B3:9B:03:A5
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373030333a3a2f34382d3438203d3e20323135313236.roa
Signing time: Wed 04 Feb 2026 20:23:29 +0000
ROA not before: Wed 04 Feb 2026 20:18:29 +0000
ROA not after: Wed 03 Feb 2027 20:23:29 +0000
asID: 215126
IP address blocks: 2a14:7581:7003::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:6f:fb:b9:49:fd:1a:4e:0f:e7:91:f1:cc:e9:02:b1:02:b9:8b:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F78178425D897035E1D77343191BF013B39B03A5
Validity
Not Before: Feb 4 20:18:29 2026 GMT
Not After : Feb 3 20:23:29 2027 GMT
Subject: CN=1BE6CE11FC76EB6D885BEA1FEA36EA1C5AD15D8F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d0:6e:d7:c8:63:78:8d:29:7c:46:d4:40:d0:
4e:bc:6e:71:d4:85:80:cf:3d:e9:39:e4:7e:54:ab:
72:b0:2f:36:4f:ce:89:95:d5:aa:8e:cf:e4:e7:b1:
44:96:80:e0:03:a2:3f:df:ae:ef:0e:c3:2e:fd:2f:
b9:c4:ba:4b:b2:73:0e:88:57:13:32:77:c1:dd:9c:
46:df:b8:ce:47:22:ec:43:6d:3d:68:5e:8c:db:cc:
74:9c:1f:70:0a:ad:9c:78:34:7a:48:51:27:3c:31:
b0:1d:b6:78:8e:96:d2:a8:12:b0:b9:af:02:42:73:
88:d9:c3:23:48:47:7a:8e:72:b8:c5:26:56:7e:4d:
c9:7b:3a:90:f6:75:6c:fc:f8:dc:7f:58:17:bc:7f:
40:75:9c:67:c8:8f:d4:3f:3a:4d:61:bb:8b:55:9f:
b7:2d:70:92:c0:53:34:e0:07:6f:76:ef:f0:88:3e:
7d:b5:84:50:4d:8f:91:f3:b2:4d:ba:f1:9a:41:cf:
1f:07:42:4b:f3:37:fb:ab:af:dd:14:3a:26:12:90:
03:07:e9:e8:19:f7:32:2c:3c:46:d5:85:4f:a7:cf:
e7:38:a3:02:6b:4a:9f:4d:25:5a:8b:f7:0d:59:ce:
3e:06:6d:1e:ba:ce:85:b6:00:b5:53:33:85:0f:3f:
30:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:E6:CE:11:FC:76:EB:6D:88:5B:EA:1F:EA:36:EA:1C:5A:D1:5D:8F
X509v3 Authority Key Identifier:
keyid:F7:81:78:42:5D:89:70:35:E1:D7:73:43:19:1B:F0:13:B3:9B:03:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/F78178425D897035E1D77343191BF013B39B03A5.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373030333a3a2f34382d3438203d3e20323135313236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:7003::/48
Signature Algorithm: sha256WithRSAEncryption
23:83:68:0d:0a:d3:bf:21:bc:64:7f:76:ad:74:be:26:70:89:
25:29:b9:bd:5a:20:4b:88:de:86:3b:0d:72:5a:d4:2a:f3:fa:
fc:72:8e:89:12:53:84:7d:d7:b5:e9:63:92:bc:ff:65:7d:d3:
a8:72:68:2d:48:9c:92:75:d2:83:2d:4f:ba:8d:eb:14:22:76:
6e:88:0f:13:04:3d:c3:7b:a4:f7:7a:17:7c:7a:31:23:8e:4d:
10:02:e3:72:79:8d:ee:c5:19:4a:20:9f:7a:69:81:c5:19:b8:
73:9f:35:c1:a5:43:87:65:eb:31:9c:f3:73:95:6a:1a:39:e1:
15:20:95:0d:e7:3b:50:75:ef:6b:9e:57:48:99:ed:12:ca:8a:
59:77:61:12:81:2c:9f:6e:5f:99:04:a0:cc:0c:73:92:8f:31:
90:6b:5f:2e:b9:1a:cd:6a:3a:25:fa:a3:a1:27:73:27:b1:06:
71:83:23:1c:f8:6f:92:dc:57:fd:d2:7a:d3:a9:cf:a6:8b:f1:
1f:f6:e9:16:4a:f3:b7:54:c2:a7:31:f4:f7:a9:fa:4f:d8:a5:
db:b9:38:b0:c9:54:44:ad:39:71:62:58:c3:73:2c:0a:b0:e2:
0f:df:21:2f:3f:c0:39:dc:7e:5d:6d:61:31:86:46:7a:ef:ad:
6f:32:83:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:33:04 2026 by rpki-client