Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373330303a3a2f34302d3430203d3e20323135313236.roa
File: 326131343a373538313a373330303a3a2f34302d3430203d3e20323135313236.roa (raw, json)
Hash identifier: dMM1PUTa8MsbMlk0dktYn+1zkyD1RsP1WJsqr5bUqiY=
Subject key identifier: 33:77:1C:0A:8A:C9:60:A6:9E:DB:9F:79:4A:57:2F:D9:D5:4A:4D:C5
Certificate issuer: /CN=F78178425D897035E1D77343191BF013B39B03A5
Certificate serial: 367EC47F874050CE0388A3EAC601A11E4A7FD597
Authority key identifier: F7:81:78:42:5D:89:70:35:E1:D7:73:43:19:1B:F0:13:B3:9B:03:A5
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373330303a3a2f34302d3430203d3e20323135313236.roa
Signing time: Wed 04 Feb 2026 20:19:51 +0000
ROA not before: Wed 04 Feb 2026 20:14:51 +0000
ROA not after: Wed 03 Feb 2027 20:19:51 +0000
asID: 215126
IP address blocks: 2a14:7581:7300::/40 maxlen: 40
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:7e:c4:7f:87:40:50:ce:03:88:a3:ea:c6:01:a1:1e:4a:7f:d5:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F78178425D897035E1D77343191BF013B39B03A5
Validity
Not Before: Feb 4 20:14:51 2026 GMT
Not After : Feb 3 20:19:51 2027 GMT
Subject: CN=33771C0A8AC960A69EDB9F794A572FD9D54A4DC5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:8d:5f:bf:ac:73:7d:a7:84:cb:1f:a5:28:ac:
60:3c:2a:d0:d9:06:c3:02:6e:68:d9:0a:aa:67:56:
20:15:11:18:b4:c2:59:5b:d7:cd:24:90:cd:08:2d:
ee:80:4e:ff:57:ef:f7:57:b6:6c:ce:40:eb:67:40:
eb:39:ec:97:03:84:c8:d3:7c:e6:2d:bb:60:86:c9:
60:c2:65:1e:bb:a3:1d:35:98:83:e5:cf:40:50:9f:
b2:f9:d6:2d:f7:33:9a:ea:28:05:94:60:83:d6:93:
f0:5d:49:ac:da:3a:9b:71:fe:59:a9:f4:5f:46:8b:
52:a2:96:76:75:44:b2:27:e0:e7:c8:fe:10:d1:ef:
f2:a9:ca:44:37:c6:ac:65:8c:19:a0:a2:93:5e:62:
13:27:ae:83:cb:38:a9:2f:d2:22:b8:d3:07:80:c2:
1c:3d:95:5b:c4:a5:a4:f2:46:cb:21:de:30:5a:60:
6d:7b:f8:a1:c9:89:0c:a0:88:f9:3b:80:8d:b0:48:
4f:c5:b9:6e:5d:a2:39:81:df:61:ab:a9:9e:28:3a:
38:80:22:40:b4:5a:02:be:ac:5b:a4:b7:2a:9f:98:
c0:77:77:86:ec:dd:04:db:1f:7d:17:2f:c3:a5:e6:
25:bc:cd:4d:42:b8:1d:14:ef:d1:ab:8a:49:46:15:
45:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:77:1C:0A:8A:C9:60:A6:9E:DB:9F:79:4A:57:2F:D9:D5:4A:4D:C5
X509v3 Authority Key Identifier:
keyid:F7:81:78:42:5D:89:70:35:E1:D7:73:43:19:1B:F0:13:B3:9B:03:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/F78178425D897035E1D77343191BF013B39B03A5.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373330303a3a2f34302d3430203d3e20323135313236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:7300::/40
Signature Algorithm: sha256WithRSAEncryption
10:3d:ba:99:37:2b:ab:c2:83:fe:04:4f:e7:bc:44:9f:31:cf:
24:86:ea:78:75:81:0f:00:da:27:2b:9f:d5:b9:2f:07:54:27:
fd:54:47:2a:d0:6b:95:76:0d:56:32:01:70:f2:04:16:f8:ef:
35:c9:11:cc:0f:e0:a8:31:e7:ba:60:bf:e7:8c:e7:66:ab:ea:
3c:67:ae:51:50:84:e6:7d:6a:25:8e:11:85:21:32:ec:3e:ba:
76:a3:de:da:a8:0e:0f:b6:c4:4a:6f:02:87:66:bc:c1:b1:37:
1c:91:cd:41:77:e1:19:7e:22:ea:5d:65:14:ac:a3:ff:8d:60:
f7:33:51:87:2c:2f:31:ce:4f:9f:5b:c2:7d:e2:bf:8a:c4:fa:
79:f5:6b:ee:13:9b:25:27:a6:18:73:b3:91:02:6e:1c:f3:c7:
e6:a4:78:66:ff:6a:45:44:4e:df:2d:b7:af:51:fc:ba:e0:5b:
0b:a1:38:79:cc:83:5d:ae:34:9f:92:60:03:79:4c:c6:07:35:
df:85:72:b5:09:69:bb:18:ea:fc:9f:31:3f:d6:98:e1:ba:d3:
29:8f:50:97:ee:14:05:04:92:5f:13:4c:cc:e5:40:71:ac:7a:
99:e7:0a:99:15:3c:97:ea:a4:66:cd:ab:ce:e9:83:58:1c:e7:
01:c9:04:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:31:47 2026 by rpki-client