Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373230303a3a2f34302d3430203d3e20323135313236.roa
File: 326131343a373538313a373230303a3a2f34302d3430203d3e20323135313236.roa (raw, json)
Hash identifier: /v4pDkZ1bY1yIe9L5hEY83Qefa6ktFiwpq5403KMzNc=
Subject key identifier: 1B:41:FB:DB:0F:E7:C1:66:32:42:1B:AE:2F:72:CE:C2:4B:40:25:20
Certificate issuer: /CN=F78178425D897035E1D77343191BF013B39B03A5
Certificate serial: 61097D2EC1BD0E92F6C9CB90CD2E827E201E4856
Authority key identifier: F7:81:78:42:5D:89:70:35:E1:D7:73:43:19:1B:F0:13:B3:9B:03:A5
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373230303a3a2f34302d3430203d3e20323135313236.roa
Signing time: Wed 04 Feb 2026 20:19:13 +0000
ROA not before: Wed 04 Feb 2026 20:14:13 +0000
ROA not after: Wed 03 Feb 2027 20:19:13 +0000
asID: 215126
IP address blocks: 2a14:7581:7200::/40 maxlen: 40
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:09:7d:2e:c1:bd:0e:92:f6:c9:cb:90:cd:2e:82:7e:20:1e:48:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F78178425D897035E1D77343191BF013B39B03A5
Validity
Not Before: Feb 4 20:14:13 2026 GMT
Not After : Feb 3 20:19:13 2027 GMT
Subject: CN=1B41FBDB0FE7C16632421BAE2F72CEC24B402520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b8:47:e1:45:a8:67:66:eb:47:c7:6f:00:95:
a7:9a:79:34:47:08:ba:d8:ce:6b:51:72:5e:47:61:
58:1a:b1:f7:83:59:5e:53:79:7d:ae:3a:9c:d4:02:
a9:85:f4:c9:d5:1b:a4:5f:0c:97:b7:9b:cf:0e:1b:
2f:ec:09:30:7e:ae:d5:ff:9c:bf:9b:84:ca:86:9f:
0d:70:c9:0e:1d:59:c7:f2:33:9c:f6:7c:0d:a2:fb:
1b:72:a5:27:38:19:bc:f5:2d:73:f2:72:3b:7a:64:
95:d3:98:3c:96:99:da:ab:d2:19:97:5b:6e:5d:33:
23:a0:fc:66:04:4b:a4:51:25:18:e8:d3:b6:54:bd:
c6:e5:33:91:3a:b4:d3:02:af:27:eb:55:5f:55:cd:
63:c1:6e:17:16:da:b7:68:57:49:09:33:94:15:d6:
f2:52:9e:58:f0:bd:92:9f:fd:cc:d1:2f:7e:f5:76:
77:02:62:e8:c9:ea:65:29:08:c7:76:39:81:e9:6b:
54:29:49:7c:10:dc:a8:d0:9a:76:6d:e8:2a:ff:50:
63:0c:12:23:fc:3c:11:aa:6f:ae:be:84:54:60:50:
d5:74:a9:02:9a:5c:5b:8d:40:9f:c2:f0:a4:58:54:
93:f3:61:a3:da:3c:fb:38:f8:dc:73:0c:df:e4:f5:
d5:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:41:FB:DB:0F:E7:C1:66:32:42:1B:AE:2F:72:CE:C2:4B:40:25:20
X509v3 Authority Key Identifier:
keyid:F7:81:78:42:5D:89:70:35:E1:D7:73:43:19:1B:F0:13:B3:9B:03:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/F78178425D897035E1D77343191BF013B39B03A5.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373230303a3a2f34302d3430203d3e20323135313236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:7200::/40
Signature Algorithm: sha256WithRSAEncryption
3d:9c:32:e4:af:64:68:57:c2:cd:c2:5e:0d:66:ec:98:9d:fd:
dc:74:12:92:a7:c7:92:95:57:0e:c4:98:73:06:1b:62:78:dc:
94:0d:10:70:9e:dd:a7:7e:86:95:c9:6c:5c:73:da:d6:1f:0d:
bc:bd:0a:71:d0:20:1d:f9:5b:c3:c5:49:8e:00:8d:da:10:f6:
62:80:6c:d9:9c:68:85:63:72:d9:b0:aa:81:8e:2a:bc:7a:5f:
d4:b3:d2:e1:37:ad:2c:08:19:5f:ed:ab:4d:f0:99:54:c3:99:
97:72:d8:58:2e:5b:6d:be:a1:98:8c:ff:4f:2d:ee:83:a8:c9:
21:b0:1a:c9:f9:5b:3c:0b:78:3f:92:1f:5c:75:c3:50:4b:6f:
47:c8:2a:db:5b:91:4b:81:81:ee:37:62:a5:12:8f:f9:d6:c2:
b4:20:df:a7:5b:c4:a2:f1:b4:8d:e2:36:77:45:68:fe:56:0a:
af:3f:fd:08:52:5d:72:fd:f8:33:80:95:5e:6f:c6:70:1e:e9:
cd:a0:4d:75:1a:47:aa:8c:6d:7e:55:bd:85:f8:24:9c:28:67:
ef:79:aa:39:2e:4c:c3:9f:6e:20:8a:b9:5c:d6:74:3f:72:08:
49:31:3d:38:de:61:af:c1:1e:3b:b8:f7:63:28:46:98:57:f9:
b9:d9:a7:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 01:51:31 2026 by rpki-client