Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373830303a3a2f33372d3337203d3e20323135313236.roa
File: 326131343a373538313a373830303a3a2f33372d3337203d3e20323135313236.roa (raw, json)
Hash identifier: GRw4RirfjVxuigSnXYvzV5PKigDws8mWVuiTxnW9tN8=
Subject key identifier: 36:20:B9:1F:9E:69:09:34:23:01:1D:11:8A:A3:5D:1B:E8:D5:83:15
Certificate issuer: /CN=F78178425D897035E1D77343191BF013B39B03A5
Certificate serial: 4B7A4B1F69F8E5CF629EE47505709C5A1B04E0AF
Authority key identifier: F7:81:78:42:5D:89:70:35:E1:D7:73:43:19:1B:F0:13:B3:9B:03:A5
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373830303a3a2f33372d3337203d3e20323135313236.roa
Signing time: Wed 04 Feb 2026 20:16:44 +0000
ROA not before: Wed 04 Feb 2026 20:11:44 +0000
ROA not after: Wed 03 Feb 2027 20:16:44 +0000
asID: 215126
IP address blocks: 2a14:7581:7800::/37 maxlen: 37
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:7a:4b:1f:69:f8:e5:cf:62:9e:e4:75:05:70:9c:5a:1b:04:e0:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F78178425D897035E1D77343191BF013B39B03A5
Validity
Not Before: Feb 4 20:11:44 2026 GMT
Not After : Feb 3 20:16:44 2027 GMT
Subject: CN=3620B91F9E69093423011D118AA35D1BE8D58315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:74:2a:e8:d6:25:76:d6:f7:ab:39:17:65:91:
7f:1b:0e:ca:95:59:0a:0a:f0:9e:d4:e0:95:1e:98:
dd:5c:bb:ab:e5:11:be:3b:ca:d9:3b:6e:3a:11:e5:
d6:20:d6:5c:b3:8d:4d:db:55:dd:23:7f:6f:b9:95:
9d:65:c7:d3:cd:e2:25:15:10:c2:35:d0:4e:2e:4c:
53:c1:5b:da:35:0a:76:e5:33:06:4f:ed:2f:2d:8c:
21:47:64:ca:fe:42:65:87:9b:2c:d1:d7:f4:c8:1f:
f5:49:9b:ee:bb:ca:eb:d2:f6:2a:6f:77:dd:df:71:
93:d4:96:09:77:bc:87:0d:f7:ff:ac:8a:c7:0d:3e:
8b:ab:2c:90:fe:47:c9:fa:d8:e4:48:9e:57:0a:ac:
09:fb:b3:25:a3:2d:af:3a:9c:7a:fe:16:67:01:98:
6b:83:25:17:92:c3:17:16:fc:25:cd:ab:c4:0b:70:
b0:ba:ba:2e:67:8e:06:fa:97:60:2c:8b:f5:71:d4:
f8:d6:68:94:af:33:9d:62:60:e8:bc:78:52:b5:68:
0e:b5:3f:d6:57:66:aa:f3:64:6d:df:e6:09:c4:2b:
dd:43:34:c6:6a:5a:51:df:23:52:29:b1:d8:cf:df:
de:51:94:25:c7:07:9d:a1:e2:4a:e5:6a:22:1b:f8:
4f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:20:B9:1F:9E:69:09:34:23:01:1D:11:8A:A3:5D:1B:E8:D5:83:15
X509v3 Authority Key Identifier:
keyid:F7:81:78:42:5D:89:70:35:E1:D7:73:43:19:1B:F0:13:B3:9B:03:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/F78178425D897035E1D77343191BF013B39B03A5.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373830303a3a2f33372d3337203d3e20323135313236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:7800::/37
Signature Algorithm: sha256WithRSAEncryption
31:60:fc:38:56:ed:e5:36:da:e5:6d:13:c7:78:18:57:d9:ef:
16:aa:9f:e3:c9:92:2c:67:9a:22:03:41:52:6d:7c:e6:ff:1c:
9b:4b:a7:01:6d:cf:60:6c:d0:6c:db:5d:dd:64:57:69:4e:34:
d1:06:03:74:3e:a0:c8:a6:52:d2:01:a4:e0:54:ba:a6:da:61:
4a:c6:cb:07:ac:d8:49:8a:5a:a1:30:fe:57:41:ef:93:6f:a8:
91:80:63:e7:3b:e2:d9:df:47:b6:11:b4:95:a4:bc:a1:3d:d7:
9e:22:c8:8c:a8:65:a8:57:ef:bb:e4:a9:9f:a9:b5:04:08:89:
31:af:32:a8:a2:49:fd:1c:f3:b0:b9:31:a2:30:f2:5f:c5:7d:
3f:b8:8e:6a:f5:23:c3:dc:62:e9:36:1e:26:96:e2:ff:cd:8b:
58:ed:f9:22:40:c8:4e:2a:8e:af:5d:42:cc:5e:04:73:6b:c7:
0d:72:a4:33:72:f6:5d:17:95:c0:3f:0b:bb:39:e5:ac:ea:5a:
13:78:79:af:18:de:2d:07:df:11:c8:4a:b0:e8:98:32:a1:17:
cd:c7:fa:93:3c:b8:81:18:06:a1:c2:da:8d:c9:80:2e:bd:65:
7a:16:ae:9e:9b:d2:cf:0f:5b:1e:4c:6d:49:f6:d8:5b:f3:b1:
41:7d:e7:b7
-----BEGIN CERTIFICATE-----
MIIFejCCBGKgAwIBAgIUS3pLH2n45c9inuR1BXCcWhsE4K8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjc4MTc4NDI1RDg5NzAzNUUxRDc3MzQzMTkxQkYwMTNC
MzlCMDNBNTAeFw0yNjAyMDQyMDExNDRaFw0yNzAyMDMyMDE2NDRaMDMxMTAvBgNV
BAMTKDM2MjBCOTFGOUU2OTA5MzQyMzAxMUQxMThBQTM1RDFCRThENTgzMTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAdCro1iV21verORdlkX8bDsqV
WQoK8J7U4JUemN1cu6vlEb47ytk7bjoR5dYg1lyzjU3bVd0jf2+5lZ1lx9PN4iUV
EMI10E4uTFPBW9o1CnblMwZP7S8tjCFHZMr+QmWHmyzR1/TIH/VJm+67yuvS9ipv
d93fcZPUlgl3vIcN9/+siscNPourLJD+R8n62ORInlcKrAn7syWjLa86nHr+FmcB
mGuDJReSwxcW/CXNq8QLcLC6ui5njgb6l2Asi/Vx1PjWaJSvM51iYOi8eFK1aA61
P9ZXZqrzZG3f5gnEK91DNMZqWlHfI1IpsdjP395RlCXHB52h4krlaiIb+E+vAgMB
AAGjggKEMIICgDAdBgNVHQ4EFgQUNiC5H55pCTQjAR0RiqNdG+jVgxUwHwYDVR0j
BBgwFoAU94F4Ql2JcDXh13NDGRvwE7ObA6UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMGUxY2IwMjMtOTAwMi00ZTk1LWJkNTctNWZiODVlZmEw
ZTk3LzAvRjc4MTc4NDI1RDg5NzAzNUUxRDc3MzQzMTkxQkYwMTNCMzlCMDNBNS5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GNzgxNzg0MjVEODk3MDM1RTFENzczNDMx
OTFCRjAxM0IzOUIwM0E1LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS8wZTFjYjAyMy05MDAyLTRlOTUtYmQ1Ny01ZmI4NWVmYTBlOTcvMC8zMjYxMzEz
NDNhMzczNTM4MzEzYTM3MzgzMDMwM2EzYTJmMzMzNzJkMzMzNzIwM2QzZTIwMzIz
MTM1MzEzMjM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF
BwEHAQH/BBIwEDAOBAIAAjAIAwYDKhR1gXgwDQYJKoZIhvcNAQELBQADggEBADFg
/DhW7eU22uVtE8d4GFfZ7xaqn+PJkixnmiIDQVJtfOb/HJtLpwFtz2Bs0GzbXd1k
V2lONNEGA3Q+oMimUtIBpOBUuqbaYUrGywes2EmKWqEw/ldB75NvqJGAY+c74tnf
R7YRtJWkvKE9154iyIyoZahX77vkqZ+ptQQIiTGvMqiiSf0c87C5MaIw8l/FfT+4
jmr1I8PcYuk2HiaW4v/Ni1jt+SJAyE4qjq9dQsxeBHNrxw1ypDNy9l0XlcA/C7s5
5azqWhN4ea8Y3i0H3xHISrDomDKhF83H+pM8uIEYBqHC2o3JgC69ZXoWrp6b0s8P
Wx5MbUn22FvzsUF957c=
-----END CERTIFICATE-----
Generated at Tue Mar 3 01:51:32 2026 by rpki-client