Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ab51b1b2-5e14-4c36-86aa-ab1ad1d7dd30/1/326130623a346530373a6130303a3a2f34302d3438203d3e20323036363034.roa
File: 326130623a346530373a6130303a3a2f34302d3438203d3e20323036363034.roa (raw, json)
Hash identifier: ZTcOp/I962Tva/WopSOoUjQqPzmLqzHDIQTk1Bff0cQ=
Subject key identifier: 76:48:4F:14:99:AC:DB:B5:0A:0B:9A:99:5A:B6:F8:93:68:92:22:67
Certificate issuer: /CN=44E86F9479A4B9985DBD67FEC14630BC1F6A5707
Certificate serial: 74D7F918EBA11B61D1E95B2A2EA9A67740F92DFE
Authority key identifier: 44:E8:6F:94:79:A4:B9:98:5D:BD:67:FE:C1:46:30:BC:1F:6A:57:07
Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/44E86F9479A4B9985DBD67FEC14630BC1F6A5707.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ab51b1b2-5e14-4c36-86aa-ab1ad1d7dd30/1/326130623a346530373a6130303a3a2f34302d3438203d3e20323036363034.roa
Signing time: Tue 28 Oct 2025 12:43:54 +0000
ROA not before: Tue 28 Oct 2025 12:38:54 +0000
ROA not after: Tue 27 Oct 2026 12:43:54 +0000
asID: 206604
IP address blocks: 2a0b:4e07:a00::/40 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:d7:f9:18:eb:a1:1b:61:d1:e9:5b:2a:2e:a9:a6:77:40:f9:2d:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44E86F9479A4B9985DBD67FEC14630BC1F6A5707
Validity
Not Before: Oct 28 12:38:54 2025 GMT
Not After : Oct 27 12:43:54 2026 GMT
Subject: CN=76484F1499ACDBB50A0B9A995AB6F89368922267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b1:5b:0f:6c:e5:f9:6c:45:50:f3:78:9e:3a:
ba:9c:38:b4:e5:de:d3:f6:85:37:68:b1:65:64:ac:
bb:98:a3:fd:ee:ff:34:12:e6:3a:6b:71:30:8b:99:
65:fc:3d:5d:9a:38:e8:6c:cc:1a:b6:9a:88:1e:6c:
83:e8:40:23:12:56:0d:01:26:28:59:f5:b4:12:89:
08:e4:1a:87:63:41:9d:21:81:2e:88:b4:00:87:b0:
2c:d3:b5:5c:47:a5:8e:2b:7b:be:66:de:a2:b0:5f:
04:ba:54:94:7b:d1:f7:30:48:6e:8b:27:ec:e6:c2:
9f:d3:e4:eb:20:b7:e6:5c:9f:f2:3b:d1:a6:48:a4:
66:42:35:97:16:0a:39:f1:6f:6a:37:76:a0:bd:0d:
d3:e8:24:5a:da:8a:ae:b5:a6:50:ca:7a:2f:ea:59:
30:ed:06:65:a8:99:de:11:64:28:8d:0c:0e:26:3b:
9d:bf:aa:b6:6b:95:0f:64:50:0a:74:90:09:b5:72:
aa:db:32:6a:72:a7:ee:21:2b:98:73:20:cd:cf:c5:
36:ec:05:ee:48:37:75:49:8b:02:e5:0b:ff:74:6a:
c7:db:d0:cc:e4:d8:21:cb:25:f3:98:a8:45:5b:3d:
d0:a5:91:66:70:86:a1:66:83:e8:16:7c:a3:a1:9f:
66:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:48:4F:14:99:AC:DB:B5:0A:0B:9A:99:5A:B6:F8:93:68:92:22:67
X509v3 Authority Key Identifier:
keyid:44:E8:6F:94:79:A4:B9:98:5D:BD:67:FE:C1:46:30:BC:1F:6A:57:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ab51b1b2-5e14-4c36-86aa-ab1ad1d7dd30/1/44E86F9479A4B9985DBD67FEC14630BC1F6A5707.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/44E86F9479A4B9985DBD67FEC14630BC1F6A5707.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ab51b1b2-5e14-4c36-86aa-ab1ad1d7dd30/1/326130623a346530373a6130303a3a2f34302d3438203d3e20323036363034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4e07:a00::/40
Signature Algorithm: sha256WithRSAEncryption
8c:60:1d:6d:83:bf:e1:40:a9:ea:b0:45:10:16:1e:0d:4c:2a:
44:ce:7a:01:93:b3:7b:cd:18:fe:1c:1a:db:fb:d7:e8:1a:7b:
e2:0d:43:f7:a0:94:eb:fb:65:5b:05:f7:a6:7b:56:37:a7:61:
c1:d9:0c:2b:0a:04:61:bd:4c:f5:51:59:ca:0c:8e:3d:d1:e2:
08:e7:bb:8b:83:29:20:f5:36:34:9c:2d:d9:fe:82:42:b6:26:
0e:80:2c:5a:e4:e4:6f:12:6d:97:50:e3:7f:7c:8e:de:17:b7:
58:73:06:94:da:9f:0c:47:55:38:54:39:fe:e1:c3:57:fc:64:
98:6d:51:1f:45:39:ea:cd:c5:c4:c9:b3:e9:00:f8:fb:8f:5b:
a4:f0:fc:63:7d:f4:1a:c7:c2:f3:5b:3e:67:d2:fd:67:84:49:
1c:d1:d1:1b:05:4c:10:77:45:5f:f5:aa:e1:61:17:70:fc:85:
2d:99:e3:53:6e:ac:c8:7e:dd:63:bf:99:84:e8:5a:53:fe:cd:
e0:95:fd:df:e5:10:c0:3e:ab:53:42:2d:e0:ec:bd:8c:15:24:
9a:a1:60:da:ce:33:2b:65:1a:06:90:05:42:72:7c:cf:27:0c:
69:86:79:75:09:c2:88:af:af:90:a7:4b:b1:a5:18:ed:ea:a7:
fb:0e:88:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:23:33 2025 by rpki-client