Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373030343a3a2f34382d3438203d3e20323135313236.roa
File: 326131343a373538313a373030343a3a2f34382d3438203d3e20323135313236.roa (raw, json)
Hash identifier: ybb6+QFRdLlCTe/0UBSUpYte58PBWnRujrXv/Ct+5Ow=
Subject key identifier: F4:E4:28:68:70:45:D9:97:C0:86:50:C2:78:83:A7:E5:02:88:B4:A5
Certificate issuer: /CN=F78178425D897035E1D77343191BF013B39B03A5
Certificate serial: 51ACD5785EAE592326C0641D8D725C565D30D86C
Authority key identifier: F7:81:78:42:5D:89:70:35:E1:D7:73:43:19:1B:F0:13:B3:9B:03:A5
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373030343a3a2f34382d3438203d3e20323135313236.roa
Signing time: Wed 04 Feb 2026 20:23:45 +0000
ROA not before: Wed 04 Feb 2026 20:18:45 +0000
ROA not after: Wed 03 Feb 2027 20:23:45 +0000
asID: 215126
IP address blocks: 2a14:7581:7004::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:ac:d5:78:5e:ae:59:23:26:c0:64:1d:8d:72:5c:56:5d:30:d8:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F78178425D897035E1D77343191BF013B39B03A5
Validity
Not Before: Feb 4 20:18:45 2026 GMT
Not After : Feb 3 20:23:45 2027 GMT
Subject: CN=F4E428687045D997C08650C27883A7E50288B4A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:49:d3:08:bc:55:a9:7f:8f:bd:20:9e:ec:20:
31:41:ed:f3:6f:37:06:f1:d7:b3:bb:6e:ef:eb:f0:
1e:7d:62:ba:c7:62:42:6f:55:aa:05:90:52:b1:05:
ab:e1:f6:72:1c:ed:ff:ce:1a:1d:47:30:4b:93:4b:
24:a1:d2:b4:bd:7b:cb:8c:61:ad:b3:c1:50:80:88:
16:c6:0b:c3:28:71:53:7f:f2:d4:c6:3c:b7:58:9c:
59:63:cb:3c:f8:3e:af:9e:4c:3f:89:5b:91:60:ce:
d2:b3:b3:c2:93:a1:67:7b:47:b0:bb:61:dd:c5:2a:
03:13:03:c2:67:57:b0:19:fd:88:d8:08:f7:32:aa:
95:1a:f8:f8:7c:35:d5:f5:9d:62:09:b7:2a:15:bb:
db:b7:85:44:6e:e3:e2:b1:90:c1:72:d8:c8:de:14:
22:28:02:50:be:49:34:b4:2e:41:27:7e:4c:f5:d3:
6e:7c:50:75:45:01:58:f2:68:91:44:5b:ef:de:18:
58:84:f8:a3:fa:81:76:77:bb:d8:8c:1a:bb:5e:89:
90:68:d6:9b:50:78:d6:9e:91:c0:5a:fa:c5:0a:81:
ab:8e:bb:7a:32:9b:bd:f4:b5:d3:b6:68:31:80:d0:
61:83:b7:fe:63:8f:e6:a7:63:c0:0d:0a:e0:c0:8d:
ef:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:E4:28:68:70:45:D9:97:C0:86:50:C2:78:83:A7:E5:02:88:B4:A5
X509v3 Authority Key Identifier:
keyid:F7:81:78:42:5D:89:70:35:E1:D7:73:43:19:1B:F0:13:B3:9B:03:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/F78178425D897035E1D77343191BF013B39B03A5.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373030343a3a2f34382d3438203d3e20323135313236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:7004::/48
Signature Algorithm: sha256WithRSAEncryption
68:fd:29:0a:a1:79:39:05:87:82:4f:40:09:7f:1e:84:d2:fa:
c1:19:ac:07:91:d4:73:d7:fc:aa:f2:28:99:c2:7a:b4:69:5e:
b7:a3:30:5c:f6:2d:b4:67:41:c1:fa:f6:bf:c3:88:2a:bf:ea:
e1:61:95:11:d1:9f:a9:ed:ed:75:4b:1a:6d:07:79:eb:bc:3d:
dd:a9:0f:1b:62:c8:ce:e0:48:7a:55:95:0d:4a:d8:8f:37:04:
b0:53:3d:35:b6:78:58:ba:7f:45:d5:7f:6b:13:8c:f5:b0:79:
d7:df:97:74:9f:63:8b:dd:d9:d7:4b:ec:80:cc:9e:7d:32:9e:
9c:33:9a:56:94:7f:64:f5:44:15:11:e1:b3:c7:4e:bd:7d:0f:
ce:9f:93:47:88:be:f1:77:6f:bb:d3:b0:2b:5a:92:90:0d:bc:
74:85:0e:11:80:db:dc:ea:08:0f:33:c4:d1:b8:58:5e:62:04:
47:ba:7d:87:1d:65:64:2d:e3:dc:f4:10:00:b1:73:0c:fc:aa:
9c:4a:35:b4:56:03:28:59:2d:f1:af:7f:38:2d:f3:02:17:45:
0f:d1:48:be:73:23:dc:e5:b9:42:61:7d:0d:4d:86:75:5c:9b:
9e:30:df:07:d5:92:b9:10:09:ff:5c:78:8d:fa:0f:de:2a:89:
fe:88:c3:50
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIUUazVeF6uWSMmwGQdjXJcVl0w2GwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjc4MTc4NDI1RDg5NzAzNUUxRDc3MzQzMTkxQkYwMTNC
MzlCMDNBNTAeFw0yNjAyMDQyMDE4NDVaFw0yNzAyMDMyMDIzNDVaMDMxMTAvBgNV
BAMTKEY0RTQyODY4NzA0NUQ5OTdDMDg2NTBDMjc4ODNBN0U1MDI4OEI0QTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCGSdMIvFWpf4+9IJ7sIDFB7fNv
Nwbx17O7bu/r8B59YrrHYkJvVaoFkFKxBavh9nIc7f/OGh1HMEuTSySh0rS9e8uM
Ya2zwVCAiBbGC8MocVN/8tTGPLdYnFljyzz4Pq+eTD+JW5FgztKzs8KToWd7R7C7
Yd3FKgMTA8JnV7AZ/YjYCPcyqpUa+Ph8NdX1nWIJtyoVu9u3hURu4+KxkMFy2Mje
FCIoAlC+STS0LkEnfkz10258UHVFAVjyaJFEW+/eGFiE+KP6gXZ3u9iMGrteiZBo
1ptQeNaekcBa+sUKgauOu3oym730tdO2aDGA0GGDt/5jj+anY8ANCuDAje+3AgMB
AAGjggKFMIICgTAdBgNVHQ4EFgQU9OQoaHBF2ZfAhlDCeIOn5QKItKUwHwYDVR0j
BBgwFoAU94F4Ql2JcDXh13NDGRvwE7ObA6UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMGUxY2IwMjMtOTAwMi00ZTk1LWJkNTctNWZiODVlZmEw
ZTk3LzAvRjc4MTc4NDI1RDg5NzAzNUUxRDc3MzQzMTkxQkYwMTNCMzlCMDNBNS5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GNzgxNzg0MjVEODk3MDM1RTFENzczNDMx
OTFCRjAxM0IzOUIwM0E1LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS8wZTFjYjAyMy05MDAyLTRlOTUtYmQ1Ny01ZmI4NWVmYTBlOTcvMC8zMjYxMzEz
NDNhMzczNTM4MzEzYTM3MzAzMDM0M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz
MTM1MzEzMjM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gXAEMA0GCSqGSIb3DQEBCwUAA4IBAQBo
/SkKoXk5BYeCT0AJfx6E0vrBGawHkdRz1/yq8iiZwnq0aV63ozBc9i20Z0HB+va/
w4gqv+rhYZUR0Z+p7e11SxptB3nrvD3dqQ8bYsjO4Eh6VZUNStiPNwSwUz01tnhY
un9F1X9rE4z1sHnX35d0n2OL3dnXS+yAzJ59Mp6cM5pWlH9k9UQVEeGzx069fQ/O
n5NHiL7xd2+707ArWpKQDbx0hQ4RgNvc6ggPM8TRuFheYgRHun2HHWVkLePc9BAA
sXMM/KqcSjW0VgMoWS3xr384LfMCF0UP0Ui+cyPc5blCYX0NTYZ1XJueMN8H1ZK5
EAn/XHiN+g/eKon+iMNQ
-----END CERTIFICATE-----
Generated at Mon Mar 2 22:32:04 2026 by rpki-client