Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373330343a3a2f34382d3438203d3e20323135313236.roa
File: 326131343a373538313a373330343a3a2f34382d3438203d3e20323135313236.roa (raw, json)
Hash identifier: HH2OEUt0CC1CahzmOlvijzk7+nF/eNSnHsU3m7noeYk=
Subject key identifier: CB:F8:2C:B3:B8:78:E7:00:49:55:DD:D5:DE:F4:37:8E:FD:46:9F:A5
Certificate issuer: /CN=F78178425D897035E1D77343191BF013B39B03A5
Certificate serial: 40A83FFEA2193B20EF3F872405A027DEE2FEF4E9
Authority key identifier: F7:81:78:42:5D:89:70:35:E1:D7:73:43:19:1B:F0:13:B3:9B:03:A5
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373330343a3a2f34382d3438203d3e20323135313236.roa
Signing time: Wed 04 Feb 2026 20:36:07 +0000
ROA not before: Wed 04 Feb 2026 20:31:07 +0000
ROA not after: Wed 03 Feb 2027 20:36:07 +0000
asID: 215126
IP address blocks: 2a14:7581:7304::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:a8:3f:fe:a2:19:3b:20:ef:3f:87:24:05:a0:27:de:e2:fe:f4:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F78178425D897035E1D77343191BF013B39B03A5
Validity
Not Before: Feb 4 20:31:07 2026 GMT
Not After : Feb 3 20:36:07 2027 GMT
Subject: CN=CBF82CB3B878E7004955DDD5DEF4378EFD469FA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1e:83:5e:79:18:a6:e0:56:2e:57:f1:0b:d6:
86:b7:6c:ce:9e:84:61:21:9b:1e:c0:f5:1d:6b:27:
d4:d3:f7:0e:65:4b:05:c5:ff:3b:41:3b:0d:df:a7:
c4:2c:44:32:9e:d1:43:98:1d:35:1a:df:a8:9c:4c:
20:ed:fc:7f:f9:21:b1:fa:00:2e:31:08:fe:e4:d3:
b2:d5:80:7b:db:9b:ae:a0:45:c4:bb:67:15:98:25:
88:7a:83:dd:e5:a9:d9:80:0e:bd:65:aa:cc:17:d6:
e6:26:7a:3e:08:44:a4:4f:64:42:1d:c2:b9:60:75:
f7:d3:bb:30:61:05:a2:97:f5:6a:cc:15:58:b5:72:
47:be:2e:24:95:36:88:8e:35:e8:aa:c9:d6:be:46:
98:9d:79:b9:a7:08:d7:d8:6d:73:24:ae:59:bb:fb:
7c:25:ea:2f:6d:68:a4:9a:aa:fd:41:f3:1f:a9:65:
c4:6d:bc:d3:ab:2f:28:ff:e2:15:8e:3c:c3:5d:31:
32:40:e5:a3:32:4e:36:05:4c:b9:58:65:af:00:1c:
07:87:b6:99:bb:15:9b:b4:6c:77:ab:b3:f1:72:1d:
9c:d4:95:78:6a:87:cc:df:f4:91:4c:e5:d0:8e:69:
c7:ef:1c:9d:13:9a:a1:0c:32:dc:e7:ad:7b:15:b9:
77:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:F8:2C:B3:B8:78:E7:00:49:55:DD:D5:DE:F4:37:8E:FD:46:9F:A5
X509v3 Authority Key Identifier:
keyid:F7:81:78:42:5D:89:70:35:E1:D7:73:43:19:1B:F0:13:B3:9B:03:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/F78178425D897035E1D77343191BF013B39B03A5.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373330343a3a2f34382d3438203d3e20323135313236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:7304::/48
Signature Algorithm: sha256WithRSAEncryption
99:ed:1c:f2:64:2b:e6:bc:73:81:d2:91:8c:98:1d:f7:17:1b:
f3:6a:82:68:1d:b6:d3:13:85:10:65:64:e6:aa:b3:36:e3:25:
4f:15:4c:d3:ce:51:db:2f:c3:d8:27:55:23:0d:ac:a4:3e:49:
a6:12:b2:08:d3:38:eb:66:55:d3:10:76:9e:e5:6b:34:f4:bb:
74:73:a8:e9:4d:54:c7:91:88:81:5b:67:bc:e8:52:dd:de:e4:
b4:d5:8f:b4:bc:03:de:f9:63:84:fe:10:ea:f9:bd:9f:cc:44:
db:4d:cb:9c:39:8b:71:48:17:d4:14:58:d3:12:39:39:b7:3f:
fd:c4:c9:11:03:f7:d3:24:18:30:fc:df:2b:4e:e5:37:45:fe:
8f:9a:6b:d3:f3:88:20:02:52:36:41:6a:2b:ed:7a:81:61:e5:
a9:68:2b:c5:31:52:76:20:e0:c1:23:71:f4:18:31:27:c2:9d:
d9:42:9e:11:41:1d:ca:e3:9e:8a:27:18:e6:c9:f9:00:5c:87:
e4:95:c9:7c:a3:23:f8:a2:df:bb:a4:23:a1:aa:47:a3:64:ba:
d9:c6:ec:4f:8d:46:74:3c:09:01:5c:99:1a:0a:cb:31:43:e1:
cc:74:8c:f1:e5:76:dd:81:22:96:a9:c5:31:3d:89:75:ce:d2:
63:53:76:96
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIUQKg//qIZOyDvP4ckBaAn3uL+9OkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjc4MTc4NDI1RDg5NzAzNUUxRDc3MzQzMTkxQkYwMTNC
MzlCMDNBNTAeFw0yNjAyMDQyMDMxMDdaFw0yNzAyMDMyMDM2MDdaMDMxMTAvBgNV
BAMTKENCRjgyQ0IzQjg3OEU3MDA0OTU1RERENURFRjQzNzhFRkQ0NjlGQTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4HoNeeRim4FYuV/EL1oa3bM6e
hGEhmx7A9R1rJ9TT9w5lSwXF/ztBOw3fp8QsRDKe0UOYHTUa36icTCDt/H/5IbH6
AC4xCP7k07LVgHvbm66gRcS7ZxWYJYh6g93lqdmADr1lqswX1uYmej4IRKRPZEId
wrlgdffTuzBhBaKX9WrMFVi1cke+LiSVNoiONeiqyda+RpidebmnCNfYbXMkrlm7
+3wl6i9taKSaqv1B8x+pZcRtvNOrLyj/4hWOPMNdMTJA5aMyTjYFTLlYZa8AHAeH
tpm7FZu0bHers/FyHZzUlXhqh8zf9JFM5dCOacfvHJ0TmqEMMtznrXsVuXd1AgMB
AAGjggKFMIICgTAdBgNVHQ4EFgQUy/gss7h45wBJVd3V3vQ3jv1Gn6UwHwYDVR0j
BBgwFoAU94F4Ql2JcDXh13NDGRvwE7ObA6UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMGUxY2IwMjMtOTAwMi00ZTk1LWJkNTctNWZiODVlZmEw
ZTk3LzAvRjc4MTc4NDI1RDg5NzAzNUUxRDc3MzQzMTkxQkYwMTNCMzlCMDNBNS5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GNzgxNzg0MjVEODk3MDM1RTFENzczNDMx
OTFCRjAxM0IzOUIwM0E1LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS8wZTFjYjAyMy05MDAyLTRlOTUtYmQ1Ny01ZmI4NWVmYTBlOTcvMC8zMjYxMzEz
NDNhMzczNTM4MzEzYTM3MzMzMDM0M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz
MTM1MzEzMjM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gXMEMA0GCSqGSIb3DQEBCwUAA4IBAQCZ
7RzyZCvmvHOB0pGMmB33FxvzaoJoHbbTE4UQZWTmqrM24yVPFUzTzlHbL8PYJ1Uj
DaykPkmmErII0zjrZlXTEHae5Ws09Lt0c6jpTVTHkYiBW2e86FLd3uS01Y+0vAPe
+WOE/hDq+b2fzETbTcucOYtxSBfUFFjTEjk5tz/9xMkRA/fTJBgw/N8rTuU3Rf6P
mmvT84ggAlI2QWor7XqBYeWpaCvFMVJ2IODBI3H0GDEnwp3ZQp4RQR3K456KJxjm
yfkAXIfklcl8oyP4ot+7pCOhqkejZLrZxuxPjUZ0PAkBXJkaCssxQ+HMdIzx5Xbd
gSKWqcUxPYl1ztJjU3aW
-----END CERTIFICATE-----
Generated at Tue Mar 3 01:50:22 2026 by rpki-client