Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373330333a3a2f34382d3438203d3e20323135313236.roa
File: 326131343a373538313a373330333a3a2f34382d3438203d3e20323135313236.roa (raw, json)
Hash identifier: +I+WJ5Wp/zwlIXBz9/0hG6LE2VBE4oexyBcj3NRfZj0=
Subject key identifier: 06:40:42:BF:F3:D4:AD:C9:89:37:7E:25:DB:C5:42:61:7A:38:99:9E
Certificate issuer: /CN=F78178425D897035E1D77343191BF013B39B03A5
Certificate serial: 6B292FBB0460825C2C37747BA16251AB1422B2C6
Authority key identifier: F7:81:78:42:5D:89:70:35:E1:D7:73:43:19:1B:F0:13:B3:9B:03:A5
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373330333a3a2f34382d3438203d3e20323135313236.roa
Signing time: Wed 04 Feb 2026 20:35:52 +0000
ROA not before: Wed 04 Feb 2026 20:30:52 +0000
ROA not after: Wed 03 Feb 2027 20:35:52 +0000
asID: 215126
IP address blocks: 2a14:7581:7303::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:29:2f:bb:04:60:82:5c:2c:37:74:7b:a1:62:51:ab:14:22:b2:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F78178425D897035E1D77343191BF013B39B03A5
Validity
Not Before: Feb 4 20:30:52 2026 GMT
Not After : Feb 3 20:35:52 2027 GMT
Subject: CN=064042BFF3D4ADC989377E25DBC542617A38999E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7f:ae:21:44:c9:0e:d4:d7:17:2a:d7:75:c3:
41:70:bb:3a:4d:70:6f:21:29:00:b8:2e:fa:05:93:
94:cb:55:26:18:39:eb:47:88:44:02:e1:f9:77:a8:
2e:38:4d:14:f6:0a:29:9b:45:0b:be:dc:61:e9:35:
96:71:0f:a4:37:0f:4b:5e:0c:f0:6c:47:f5:b5:b5:
0e:04:55:2f:88:ac:f5:bd:34:35:2d:04:be:ce:1e:
76:0b:f9:14:32:05:e0:5c:39:d7:72:fd:7f:8a:e4:
20:e1:61:bd:5a:d6:cf:22:2d:57:93:8f:af:b6:11:
27:2c:ca:e3:83:cc:6a:80:c6:5d:c3:65:ed:fc:7e:
9c:95:ac:b5:24:bf:e9:dd:05:a3:98:9b:bd:a4:41:
63:99:05:73:94:d4:9e:66:c7:9a:66:f4:84:fa:51:
bd:3a:75:58:e4:3f:c0:cf:17:96:b4:d5:a7:e4:20:
29:42:48:e1:1e:43:f2:05:53:59:31:64:d1:2e:9b:
2a:7c:6b:23:16:ef:ce:00:40:e8:d5:ae:ed:5a:86:
56:21:54:16:56:0b:15:90:5a:2b:b1:8a:b6:6f:a5:
b0:34:a6:9a:ee:f7:e8:e1:4b:65:99:7f:76:7c:3f:
f3:aa:7f:cc:6b:fc:85:fd:59:25:97:56:a7:72:ec:
cd:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:40:42:BF:F3:D4:AD:C9:89:37:7E:25:DB:C5:42:61:7A:38:99:9E
X509v3 Authority Key Identifier:
keyid:F7:81:78:42:5D:89:70:35:E1:D7:73:43:19:1B:F0:13:B3:9B:03:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/F78178425D897035E1D77343191BF013B39B03A5.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373330333a3a2f34382d3438203d3e20323135313236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:7303::/48
Signature Algorithm: sha256WithRSAEncryption
94:a4:e8:4b:f8:a9:dc:d8:4e:9e:2e:84:3f:97:df:6e:d8:ea:
47:89:1d:23:be:33:69:81:94:f2:32:1e:fd:c6:2c:58:cd:49:
47:0d:71:7a:cf:29:7e:43:3e:1a:de:e1:35:ce:e5:2e:cb:ae:
a7:95:e0:8d:bd:88:d1:85:b9:8e:43:bc:43:39:f0:94:ed:94:
02:db:fb:60:2d:ac:0b:79:37:47:9f:ab:67:db:37:c5:cf:af:
a0:58:74:68:a7:a2:65:6c:95:24:4a:ab:65:de:8a:75:88:69:
aa:05:a2:f1:d8:93:4d:c7:d1:33:3c:34:da:a0:f0:6e:7b:b0:
74:16:8c:31:28:49:8c:02:92:5e:82:95:fa:b2:ce:06:7d:66:
c7:0a:a6:50:37:4a:ce:91:75:6b:aa:2c:48:82:a2:40:cf:55:
e9:ee:b5:95:89:32:c6:05:2d:37:fb:69:d1:3b:6b:74:13:a9:
31:d4:aa:a3:00:18:4d:b2:b5:5e:20:e0:14:46:1d:1d:00:57:
2c:dc:d0:6b:57:5d:61:62:06:35:75:61:e3:ea:f2:9e:4c:b2:
6d:1b:0c:ab:b5:48:e0:9d:c7:b8:5f:42:14:76:10:19:5d:1b:
20:d9:f8:d7:20:ad:b9:26:09:c9:c5:60:ba:4c:62:96:60:ea:
93:00:94:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:52:18 2026 by rpki-client