Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373130323a3a2f34382d3438203d3e20323135313236.roa
File: 326131343a373538313a373130323a3a2f34382d3438203d3e20323135313236.roa (raw, json)
Hash identifier: eODEc9ZvWyE4p70AjkAAjTZ896vf4gDf3KoJsJV/1vQ=
Subject key identifier: 58:62:79:F1:B7:64:A6:52:94:72:88:03:7D:2C:25:2E:63:67:DC:95
Certificate issuer: /CN=F78178425D897035E1D77343191BF013B39B03A5
Certificate serial: 2B7F27543801FF83B1A0B18DF2B8C4E48DDD2A2F
Authority key identifier: F7:81:78:42:5D:89:70:35:E1:D7:73:43:19:1B:F0:13:B3:9B:03:A5
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373130323a3a2f34382d3438203d3e20323135313236.roa
Signing time: Wed 04 Feb 2026 20:30:58 +0000
ROA not before: Wed 04 Feb 2026 20:25:58 +0000
ROA not after: Wed 03 Feb 2027 20:30:58 +0000
asID: 215126
IP address blocks: 2a14:7581:7102::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:7f:27:54:38:01:ff:83:b1:a0:b1:8d:f2:b8:c4:e4:8d:dd:2a:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F78178425D897035E1D77343191BF013B39B03A5
Validity
Not Before: Feb 4 20:25:58 2026 GMT
Not After : Feb 3 20:30:58 2027 GMT
Subject: CN=586279F1B764A652947288037D2C252E6367DC95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4f:59:95:93:cf:6c:cd:e5:b9:52:ea:c8:37:
ec:fd:d1:8c:81:e5:20:44:c4:a7:57:30:ed:5e:80:
9e:62:a7:d9:6e:9f:58:f5:48:00:a2:63:24:88:73:
68:cc:62:f2:2a:a5:43:a4:1b:18:d8:e4:3d:b9:d7:
a5:75:1c:3b:27:de:83:5d:6a:eb:4f:5a:41:99:33:
d4:89:9b:ba:15:c5:7a:11:8c:07:2c:e4:f8:ef:ad:
4c:88:80:e9:c8:18:2d:df:c6:6e:80:b1:81:8c:f5:
00:9c:7d:aa:39:1c:ae:07:43:a7:64:e7:bd:ac:d0:
4e:37:12:34:24:c4:9f:48:77:8d:a0:4a:1e:49:8f:
a0:3e:17:c7:a2:c6:d7:c3:4e:93:8a:12:c4:27:81:
32:42:7a:18:f4:ba:ef:b2:0c:9f:43:6d:7e:f3:48:
12:77:c1:89:72:af:fe:10:ef:4e:ab:a3:02:d1:82:
84:bf:53:24:49:73:e0:6e:de:af:e7:b3:6e:fb:a7:
68:c5:88:7d:76:7f:3b:08:dc:dd:fa:05:c5:aa:45:
61:42:7b:9a:63:b5:37:2e:1e:d7:12:37:b3:38:ce:
72:3f:8d:9f:e9:8f:8f:2c:ad:af:13:0a:9b:4a:19:
12:95:6e:66:1c:29:42:03:55:ff:c7:04:2b:00:5f:
4e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:62:79:F1:B7:64:A6:52:94:72:88:03:7D:2C:25:2E:63:67:DC:95
X509v3 Authority Key Identifier:
keyid:F7:81:78:42:5D:89:70:35:E1:D7:73:43:19:1B:F0:13:B3:9B:03:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/F78178425D897035E1D77343191BF013B39B03A5.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373130323a3a2f34382d3438203d3e20323135313236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:7102::/48
Signature Algorithm: sha256WithRSAEncryption
2f:67:fc:7b:bb:cd:43:2f:24:ae:88:e9:bd:ab:e0:97:86:e3:
66:7f:53:e4:ca:81:b7:89:48:ff:0a:aa:28:b5:62:f3:98:6e:
e2:cd:7c:60:8a:67:7d:92:3a:a2:36:6d:b5:07:b3:6a:55:a8:
e7:bf:cd:e6:4f:c9:97:c3:cc:01:9e:30:16:30:12:5f:e5:27:
7e:83:65:ab:8c:e4:52:20:c3:73:5b:6e:56:d5:48:b3:12:20:
f2:36:21:c7:bd:db:17:cc:a8:87:ff:f3:52:84:52:22:b7:22:
5d:a5:98:56:54:ac:8f:f6:a3:88:95:58:80:af:f7:4e:58:21:
e8:8d:b0:54:21:05:dd:aa:00:23:f0:1d:5e:70:a3:eb:09:2a:
8b:45:bd:ea:aa:38:b9:ee:2f:5a:23:6f:5d:8f:6a:71:dc:ee:
ba:b4:d2:4f:15:80:5f:8e:60:26:3a:77:9f:8f:07:7e:f5:ea:
fe:73:99:be:7c:43:5c:1c:c9:49:8a:72:8c:e7:e1:a0:74:a8:
e3:82:42:4c:25:bd:17:e6:61:3c:f8:7d:5d:58:2e:23:41:54:
05:fb:d9:c2:c0:ac:a8:fb:ad:79:31:1d:c3:67:64:77:e4:bf:
58:17:d8:cb:dd:e0:a3:fd:bb:3a:70:c5:70:ca:9b:85:f7:d7:
a0:84:49:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:02:55 2026 by rpki-client