Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a376530303a3a2f34382d3438203d3e20323135313236.roa
File:                     326131343a373538313a376530303a3a2f34382d3438203d3e20323135313236.roa (raw, json)
Hash identifier:          zzkM6bqZpoTZnVyDyPmK0O5NEJeSuJEnByfxnV/fyWo=
Subject key identifier:   45:49:85:33:45:68:4B:51:D1:18:17:7B:8D:DF:B0:BE:37:48:AF:B2
Certificate issuer:       /CN=F78178425D897035E1D77343191BF013B39B03A5
Certificate serial:       31DE6CD706AEC60B3CF59B3DEB90FBF857F07314
Authority key identifier: F7:81:78:42:5D:89:70:35:E1:D7:73:43:19:1B:F0:13:B3:9B:03:A5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a376530303a3a2f34382d3438203d3e20323135313236.roa
Signing time:             Wed 04 Feb 2026 21:37:30 +0000
ROA not before:           Wed 04 Feb 2026 21:32:30 +0000
ROA not after:            Wed 03 Feb 2027 21:37:30 +0000
asID:                     215126
IP address blocks:        2a14:7581:7e00::/48 maxlen: 48
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:de:6c:d7:06:ae:c6:0b:3c:f5:9b:3d:eb:90:fb:f8:57:f0:73:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F78178425D897035E1D77343191BF013B39B03A5
        Validity
            Not Before: Feb  4 21:32:30 2026 GMT
            Not After : Feb  3 21:37:30 2027 GMT
        Subject: CN=4549853345684B51D118177B8DDFB0BE3748AFB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ba:0f:b1:d8:27:ae:62:b0:e0:00:9a:3d:78:
                    f3:4b:8f:ef:45:6c:b4:ea:1c:55:ba:07:0b:7c:bd:
                    87:49:97:c7:c3:92:58:c7:49:e7:d4:a7:5e:44:85:
                    40:f8:75:eb:0e:5b:6f:92:77:1c:6c:cc:e1:62:92:
                    c3:2e:dd:5b:ac:64:52:38:bf:79:b4:05:35:a2:45:
                    dd:fb:50:18:6c:a8:6b:d6:f1:1e:ec:3e:03:6e:b7:
                    5c:0e:15:4e:11:a8:d8:22:c4:5c:ab:4a:1a:4e:73:
                    7c:e2:20:da:74:b0:ec:71:c3:d6:e8:91:f2:59:eb:
                    85:75:37:3d:c4:55:cb:37:63:cc:99:f2:c3:84:8a:
                    e8:09:69:ac:0b:5f:11:4d:be:b9:47:64:7a:1d:39:
                    d3:bd:41:fb:d8:2d:04:ed:46:34:8c:6c:b2:2b:e5:
                    e8:27:04:b7:84:41:eb:46:9b:42:a2:a6:a2:8d:7f:
                    d4:78:1e:3e:b3:5c:0e:0b:75:25:4c:58:a6:c9:17:
                    42:27:7f:ba:8c:11:96:aa:1c:ac:be:ae:50:18:42:
                    98:de:09:ab:88:00:38:3f:aa:0f:92:29:4b:0b:69:
                    d8:9f:ee:5b:94:70:a0:a9:3e:cc:9e:9a:60:2a:5e:
                    bd:26:c5:5b:22:a8:2c:e3:b5:fc:4d:8a:6a:c2:43:
                    2d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:49:85:33:45:68:4B:51:D1:18:17:7B:8D:DF:B0:BE:37:48:AF:B2
            X509v3 Authority Key Identifier:
                keyid:F7:81:78:42:5D:89:70:35:E1:D7:73:43:19:1B:F0:13:B3:9B:03:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/F78178425D897035E1D77343191BF013B39B03A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a376530303a3a2f34382d3438203d3e20323135313236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:7e00::/48

    Signature Algorithm: sha256WithRSAEncryption
         2c:ab:68:4f:6e:7a:df:cb:53:b3:e7:1f:ca:ea:a4:17:b6:35:
         73:4e:18:eb:ff:9d:e6:9e:54:0e:f1:9c:13:c6:c4:1f:80:a4:
         15:7a:06:fe:43:3b:1b:d2:32:77:c0:74:8f:9b:dd:02:f2:77:
         a2:19:6d:9e:73:00:91:7b:ef:9e:2d:9f:e8:68:72:97:2f:bd:
         84:19:05:c2:cb:2f:73:a8:0f:3b:0e:07:87:50:e9:50:9f:ca:
         e7:9f:0d:a7:90:9f:f5:8e:66:d8:ef:ca:aa:2c:b1:1d:d7:6a:
         6d:58:3b:52:c4:3a:e6:62:73:05:8c:cf:e6:7f:dd:4a:93:4e:
         20:ab:96:59:cf:dd:94:c2:0a:23:30:0f:d1:b1:95:81:42:97:
         86:9e:38:25:b3:0f:a7:49:c5:cb:b0:4d:ed:44:be:9d:31:50:
         65:29:ee:b0:76:a6:45:9a:89:71:20:a1:de:4d:d8:cb:f3:d0:
         94:60:3b:de:a6:49:7c:ff:4d:11:5a:c0:9f:4d:01:64:9d:7f:
         62:9e:28:dc:f2:fd:60:1e:ab:61:11:b9:00:76:cb:46:fd:87:
         6a:99:96:c0:fb:0c:a7:fc:b7:62:37:63:f8:8b:66:fd:84:c9:
         4f:2e:8d:0a:fe:c9:8b:6e:ce:4e:70:41:8e:27:52:b3:b3:89:
         60:4d:cd:c9
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIUMd5s1wauxgs89Zs965D7+FfwcxQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjc4MTc4NDI1RDg5NzAzNUUxRDc3MzQzMTkxQkYwMTNC
MzlCMDNBNTAeFw0yNjAyMDQyMTMyMzBaFw0yNzAyMDMyMTM3MzBaMDMxMTAvBgNV
BAMTKDQ1NDk4NTMzNDU2ODRCNTFEMTE4MTc3QjhEREZCMEJFMzc0OEFGQjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIug+x2CeuYrDgAJo9ePNLj+9F
bLTqHFW6Bwt8vYdJl8fDkljHSefUp15EhUD4desOW2+SdxxszOFiksMu3VusZFI4
v3m0BTWiRd37UBhsqGvW8R7sPgNut1wOFU4RqNgixFyrShpOc3ziINp0sOxxw9bo
kfJZ64V1Nz3EVcs3Y8yZ8sOEiugJaawLXxFNvrlHZHodOdO9QfvYLQTtRjSMbLIr
5egnBLeEQetGm0KipqKNf9R4Hj6zXA4LdSVMWKbJF0Inf7qMEZaqHKy+rlAYQpje
CauIADg/qg+SKUsLadif7luUcKCpPsyemmAqXr0mxVsiqCzjtfxNimrCQy0fAgMB
AAGjggKFMIICgTAdBgNVHQ4EFgQURUmFM0VoS1HRGBd7jd+wvjdIr7IwHwYDVR0j
BBgwFoAU94F4Ql2JcDXh13NDGRvwE7ObA6UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMGUxY2IwMjMtOTAwMi00ZTk1LWJkNTctNWZiODVlZmEw
ZTk3LzAvRjc4MTc4NDI1RDg5NzAzNUUxRDc3MzQzMTkxQkYwMTNCMzlCMDNBNS5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GNzgxNzg0MjVEODk3MDM1RTFENzczNDMx
OTFCRjAxM0IzOUIwM0E1LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS8wZTFjYjAyMy05MDAyLTRlOTUtYmQ1Ny01ZmI4NWVmYTBlOTcvMC8zMjYxMzEz
NDNhMzczNTM4MzEzYTM3NjUzMDMwM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz
MTM1MzEzMjM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gX4AMA0GCSqGSIb3DQEBCwUAA4IBAQAs
q2hPbnrfy1Oz5x/K6qQXtjVzThjr/53mnlQO8ZwTxsQfgKQVegb+Qzsb0jJ3wHSP
m90C8neiGW2ecwCRe++eLZ/oaHKXL72EGQXCyy9zqA87DgeHUOlQn8rnnw2nkJ/1
jmbY78qqLLEd12ptWDtSxDrmYnMFjM/mf91Kk04gq5ZZz92UwgojMA/RsZWBQpeG
njglsw+nScXLsE3tRL6dMVBlKe6wdqZFmolxIKHeTdjL89CUYDvepkl8/00RWsCf
TQFknX9inijc8v1gHqthEbkAdstG/YdqmZbA+wyn/LdiN2P4i2b9hMlPLo0K/smL
bs5OcEGOJ1Kzs4lgTc3J
-----END CERTIFICATE-----