Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373430303a3a2f33382d3338203d3e20323135313236.roa
File: 326131343a373538313a373430303a3a2f33382d3338203d3e20323135313236.roa (raw, json)
Hash identifier: dLj4Fa2+2BHeLh31K0/cG86INpLvOaNz00wlpGjXTms=
Subject key identifier: 89:FA:92:31:A2:80:3D:78:0B:C6:BF:56:EA:B8:31:FF:0B:73:54:DA
Certificate issuer: /CN=F78178425D897035E1D77343191BF013B39B03A5
Certificate serial: 45A5332150E0F8FE8069D2B77D47919B2B074BD0
Authority key identifier: F7:81:78:42:5D:89:70:35:E1:D7:73:43:19:1B:F0:13:B3:9B:03:A5
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373430303a3a2f33382d3338203d3e20323135313236.roa
Signing time: Wed 04 Feb 2026 20:17:42 +0000
ROA not before: Wed 04 Feb 2026 20:12:42 +0000
ROA not after: Wed 03 Feb 2027 20:17:42 +0000
asID: 215126
IP address blocks: 2a14:7581:7400::/38 maxlen: 38
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:a5:33:21:50:e0:f8:fe:80:69:d2:b7:7d:47:91:9b:2b:07:4b:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F78178425D897035E1D77343191BF013B39B03A5
Validity
Not Before: Feb 4 20:12:42 2026 GMT
Not After : Feb 3 20:17:42 2027 GMT
Subject: CN=89FA9231A2803D780BC6BF56EAB831FF0B7354DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:6e:8a:04:b4:8b:74:0f:8e:0a:9d:a4:0a:f2:
0d:ff:52:a3:d3:06:65:9a:59:8c:a6:72:d1:13:c2:
9d:23:c8:a9:b5:48:8b:af:ca:85:52:28:93:82:59:
52:4e:aa:92:22:53:6d:85:6f:70:f1:57:f1:b2:2e:
df:7e:6e:b2:35:31:6a:61:76:00:9f:95:9d:d9:44:
c3:d3:d8:47:08:7c:9e:0d:cc:89:c6:b0:35:cc:38:
a3:e7:f9:39:b1:79:ae:bb:44:79:4e:d2:2c:41:75:
89:62:54:9d:c1:05:97:65:2d:23:6e:c5:e0:79:ab:
6d:53:de:fb:9f:9d:bd:b7:32:20:d2:e0:85:1e:58:
a9:ca:de:ba:44:fa:c9:2c:7b:40:1d:cb:7a:4c:f4:
82:fb:6a:a6:8e:6c:7e:bc:40:24:ca:b5:31:29:59:
80:35:e2:7a:81:58:0a:32:69:b0:0b:bb:4c:9c:26:
94:c5:af:2a:b5:ec:75:44:50:46:8b:1f:22:05:fa:
cd:c2:d0:bc:d1:a7:7c:27:fe:49:9a:80:39:9e:c4:
98:e9:c8:ed:eb:b6:0c:77:9b:67:2c:64:15:f4:fd:
6a:01:b8:68:09:c0:38:44:98:27:77:be:08:4d:86:
40:97:9a:6f:5a:d4:89:57:e6:1a:36:ff:f4:99:a4:
91:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:FA:92:31:A2:80:3D:78:0B:C6:BF:56:EA:B8:31:FF:0B:73:54:DA
X509v3 Authority Key Identifier:
keyid:F7:81:78:42:5D:89:70:35:E1:D7:73:43:19:1B:F0:13:B3:9B:03:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/F78178425D897035E1D77343191BF013B39B03A5.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373430303a3a2f33382d3338203d3e20323135313236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:7400::/38
Signature Algorithm: sha256WithRSAEncryption
54:c3:05:ab:cc:3b:51:f7:81:1c:3a:82:a6:03:09:9c:cb:21:
18:06:32:71:20:80:04:60:28:26:9f:74:46:61:6e:85:30:48:
74:bb:80:4d:d2:39:50:cc:24:ec:18:bf:98:8f:96:c0:99:c0:
51:36:c6:8e:51:90:22:63:dd:af:83:99:a9:95:f3:1b:f9:3e:
1c:66:08:bc:49:5b:9f:13:3a:e8:7e:09:74:c0:13:9a:0c:38:
31:cd:56:bd:a3:b7:b8:eb:17:05:b3:ca:f1:97:61:b7:ad:3c:
df:11:db:2a:38:03:9a:00:63:bc:c9:43:49:1d:a8:1e:3c:2e:
a6:49:f5:21:6f:94:86:78:d9:28:98:d7:b7:28:b5:63:0c:4d:
66:50:6d:22:1d:b3:66:97:cb:b5:9e:9d:f7:b6:e6:ad:71:c0:
3f:3f:f0:ce:4a:fb:20:3a:38:95:b2:22:dc:a4:21:c0:47:a1:
25:da:47:f3:dd:23:e9:a7:a5:55:58:cd:df:8b:38:08:dc:e6:
4f:40:8f:f5:ad:bb:c7:f1:82:e6:98:14:c5:c6:d8:8f:77:af:
de:7b:c6:aa:ae:57:da:77:f0:a0:55:9a:33:2c:4e:09:14:41:
67:c6:ef:4e:77:b6:d9:24:0d:a9:47:cf:7d:05:e2:b2:60:e6:
80:5e:b5:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:52:14 2026 by rpki-client