Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373330323a3a2f34382d3438203d3e20323135313236.roa
File: 326131343a373538313a373330323a3a2f34382d3438203d3e20323135313236.roa (raw, json)
Hash identifier: wUAxSruA1vjFJa7p9LsOaz2R1OL+/5wjINafohsKyi4=
Subject key identifier: 22:5D:45:7F:7E:66:CE:D8:29:2C:02:8A:A3:70:05:23:01:E8:9B:86
Certificate issuer: /CN=F78178425D897035E1D77343191BF013B39B03A5
Certificate serial: 5BE210DD992735CC3B33792DBAF5547446874F2E
Authority key identifier: F7:81:78:42:5D:89:70:35:E1:D7:73:43:19:1B:F0:13:B3:9B:03:A5
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373330323a3a2f34382d3438203d3e20323135313236.roa
Signing time: Wed 04 Feb 2026 20:35:33 +0000
ROA not before: Wed 04 Feb 2026 20:30:33 +0000
ROA not after: Wed 03 Feb 2027 20:35:33 +0000
asID: 215126
IP address blocks: 2a14:7581:7302::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:e2:10:dd:99:27:35:cc:3b:33:79:2d:ba:f5:54:74:46:87:4f:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F78178425D897035E1D77343191BF013B39B03A5
Validity
Not Before: Feb 4 20:30:33 2026 GMT
Not After : Feb 3 20:35:33 2027 GMT
Subject: CN=225D457F7E66CED8292C028AA370052301E89B86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ca:46:83:6e:20:c6:03:3f:2e:52:8d:54:9c:
3b:61:3d:0d:21:f8:a2:84:f6:13:36:1d:2b:6f:b8:
f2:f3:c0:80:34:a4:26:2b:f3:95:36:e4:7f:25:7e:
5c:76:a1:7e:0f:2a:3c:b7:f8:70:4b:3c:44:5a:bf:
81:ae:b4:01:0f:19:51:38:e7:41:13:30:55:12:5e:
98:90:55:5b:59:68:d9:06:76:1f:4c:36:96:32:b6:
b2:78:f1:ef:de:ff:8c:98:d6:40:8a:8c:d9:5f:07:
3b:56:68:ac:eb:78:80:a8:44:d9:24:3b:92:f8:ad:
1f:38:bc:b8:b3:81:3a:55:bf:46:d4:73:18:e8:3c:
78:4a:1c:eb:95:49:c9:53:c9:46:7b:19:04:90:c6:
7f:ba:22:a0:7c:42:5a:b2:58:a0:7f:ed:15:12:3f:
b0:f3:0d:ac:bc:5d:00:10:05:c7:8d:4d:fa:10:bc:
a6:c5:da:3f:1f:4f:2e:e3:eb:38:e8:f1:3c:83:de:
f8:55:e5:ab:58:cf:26:c6:f0:0a:54:f1:c5:f7:d9:
fc:7f:c3:ef:bc:b7:15:f1:50:0a:2d:14:21:71:2b:
ee:35:d0:0a:93:29:2c:2b:e6:ea:53:da:d8:52:31:
c3:74:a5:46:75:db:75:61:2c:20:e7:92:87:bc:85:
3d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:5D:45:7F:7E:66:CE:D8:29:2C:02:8A:A3:70:05:23:01:E8:9B:86
X509v3 Authority Key Identifier:
keyid:F7:81:78:42:5D:89:70:35:E1:D7:73:43:19:1B:F0:13:B3:9B:03:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/F78178425D897035E1D77343191BF013B39B03A5.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373330323a3a2f34382d3438203d3e20323135313236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:7302::/48
Signature Algorithm: sha256WithRSAEncryption
3d:67:9b:4d:c8:9f:19:d5:df:69:c0:09:38:31:53:5e:03:ad:
ef:fb:af:88:f9:4e:36:dc:7b:c1:56:9c:a3:88:24:ad:15:6e:
9a:50:b9:3f:df:50:89:da:ff:b8:bb:6e:50:1e:23:e6:8d:c5:
b2:3e:14:e3:d9:ca:28:b2:48:76:ef:02:98:42:6e:f0:f1:1e:
28:03:ba:d9:8b:89:fc:d7:dc:8a:3d:e6:b6:00:a5:ed:f0:2b:
0a:b4:0c:c8:1d:90:bc:65:66:af:55:a1:5e:3b:aa:d4:67:1e:
34:a8:c9:d3:3a:27:b4:60:ee:6f:ce:26:38:27:44:58:3e:f9:
be:2e:aa:c2:04:64:98:f3:34:00:7e:e2:a2:6c:5d:3a:e6:a0:
f3:8d:24:76:92:4e:95:69:dc:8c:50:aa:f7:34:54:7e:27:2d:
38:fb:ed:76:98:f2:7d:5f:c4:3b:a8:90:17:60:ef:34:19:54:
e6:84:5a:8b:4a:8a:c5:42:28:29:28:89:d3:68:9b:73:1c:f7:
3e:90:2d:c3:6b:7d:48:f6:50:71:37:95:0d:f8:4b:1d:2c:0d:
16:bf:90:8a:c7:94:71:d2:9c:71:e0:97:42:42:b3:db:2f:ce:
71:a4:aa:6b:92:b6:67:aa:5e:72:b9:c7:f8:39:30:31:b4:4d:
22:80:20:3e
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIUW+IQ3ZknNcw7M3ktuvVUdEaHTy4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjc4MTc4NDI1RDg5NzAzNUUxRDc3MzQzMTkxQkYwMTNC
MzlCMDNBNTAeFw0yNjAyMDQyMDMwMzNaFw0yNzAyMDMyMDM1MzNaMDMxMTAvBgNV
BAMTKDIyNUQ0NTdGN0U2NkNFRDgyOTJDMDI4QUEzNzAwNTIzMDFFODlCODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLykaDbiDGAz8uUo1UnDthPQ0h
+KKE9hM2HStvuPLzwIA0pCYr85U25H8lflx2oX4PKjy3+HBLPERav4GutAEPGVE4
50ETMFUSXpiQVVtZaNkGdh9MNpYytrJ48e/e/4yY1kCKjNlfBztWaKzreICoRNkk
O5L4rR84vLizgTpVv0bUcxjoPHhKHOuVSclTyUZ7GQSQxn+6IqB8QlqyWKB/7RUS
P7DzDay8XQAQBceNTfoQvKbF2j8fTy7j6zjo8TyD3vhV5atYzybG8ApU8cX32fx/
w++8txXxUAotFCFxK+410AqTKSwr5upT2thSMcN0pUZ123VhLCDnkoe8hT0DAgMB
AAGjggKFMIICgTAdBgNVHQ4EFgQUIl1Ff35mztgpLAKKo3AFIwHom4YwHwYDVR0j
BBgwFoAU94F4Ql2JcDXh13NDGRvwE7ObA6UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMGUxY2IwMjMtOTAwMi00ZTk1LWJkNTctNWZiODVlZmEw
ZTk3LzAvRjc4MTc4NDI1RDg5NzAzNUUxRDc3MzQzMTkxQkYwMTNCMzlCMDNBNS5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GNzgxNzg0MjVEODk3MDM1RTFENzczNDMx
OTFCRjAxM0IzOUIwM0E1LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS8wZTFjYjAyMy05MDAyLTRlOTUtYmQ1Ny01ZmI4NWVmYTBlOTcvMC8zMjYxMzEz
NDNhMzczNTM4MzEzYTM3MzMzMDMyM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz
MTM1MzEzMjM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gXMCMA0GCSqGSIb3DQEBCwUAA4IBAQA9
Z5tNyJ8Z1d9pwAk4MVNeA63v+6+I+U423HvBVpyjiCStFW6aULk/31CJ2v+4u25Q
HiPmjcWyPhTj2cooskh27wKYQm7w8R4oA7rZi4n819yKPea2AKXt8CsKtAzIHZC8
ZWavVaFeO6rUZx40qMnTOie0YO5vziY4J0RYPvm+LqrCBGSY8zQAfuKibF065qDz
jSR2kk6VadyMUKr3NFR+Jy04++12mPJ9X8Q7qJAXYO80GVTmhFqLSorFQigpKInT
aJtzHPc+kC3Da31I9lBxN5UN+EsdLA0Wv5CKx5Rx0pxx4JdCQrPbL85xpKprkrZn
ql5yucf4OTAxtE0igCA+
-----END CERTIFICATE-----
Generated at Mon Mar 2 20:52:16 2026 by rpki-client