Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666630303a3a2f34382d3438203d3e20323037393630.roa
File: 326131313a663263303a666630303a3a2f34382d3438203d3e20323037393630.roa (raw, json)
Hash identifier: vlZXQVsccvhX9Xp7n97oPTi1sU/brtJRb0zaewhmEQ4=
Subject key identifier: 7D:B3:07:2C:AB:2B:9F:4E:5A:E4:E7:74:C9:B3:59:E9:BD:C9:49:75
Certificate issuer: /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial: 792FEC4C1CB3279B021F0D0067848F4A3AB0F86C
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666630303a3a2f34382d3438203d3e20323037393630.roa
Signing time: Mon 02 Feb 2026 07:32:11 +0000
ROA not before: Mon 02 Feb 2026 07:27:11 +0000
ROA not after: Mon 01 Feb 2027 07:32:11 +0000
asID: 207960
IP address blocks: 2a11:f2c0:ff00::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:2f:ec:4c:1c:b3:27:9b:02:1f:0d:00:67:84:8f:4a:3a:b0:f8:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
Validity
Not Before: Feb 2 07:27:11 2026 GMT
Not After : Feb 1 07:32:11 2027 GMT
Subject: CN=7DB3072CAB2B9F4E5AE4E774C9B359E9BDC94975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:23:da:fc:b4:0d:bf:49:7d:0a:76:db:4c:ca:
1d:f0:27:62:b0:0a:ce:e4:fb:1f:a3:72:2e:a9:d7:
ba:6a:36:80:7c:d2:89:e7:45:51:a6:39:b0:91:0e:
28:32:68:d2:b8:f9:91:2d:36:d6:92:2b:16:1f:f9:
3d:c5:79:7d:90:de:23:60:4f:5c:47:a6:b5:de:99:
d9:0d:60:00:3b:89:69:83:03:75:da:7f:c4:ce:da:
ac:74:da:b7:b3:73:66:91:c3:95:23:b2:dc:79:e9:
76:82:df:fe:94:76:8f:f5:07:75:ec:f1:91:a1:e9:
68:35:85:d7:49:ea:0e:a4:41:70:8a:dc:94:58:02:
88:fd:ed:d6:f6:25:72:9e:44:cd:e8:01:be:b8:a3:
ba:25:a2:34:ac:61:2b:48:d1:cf:c5:00:df:1a:dc:
f6:b7:40:c4:e5:4d:e0:25:b1:35:20:66:be:7e:90:
20:84:53:38:f1:f2:8f:f9:fe:ab:5b:1f:20:fa:2e:
ab:16:09:9a:52:bd:d7:21:11:44:1e:4a:f9:af:39:
e8:5e:ea:1f:1d:bb:9e:cb:89:92:9f:ba:53:d8:97:
37:4b:f2:9c:d6:c3:db:a7:32:c6:a3:b1:fa:7c:ed:
4e:29:6e:28:6c:e2:f0:7a:92:69:d8:81:7d:5e:92:
27:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:B3:07:2C:AB:2B:9F:4E:5A:E4:E7:74:C9:B3:59:E9:BD:C9:49:75
X509v3 Authority Key Identifier:
keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/326131313a663263303a666630303a3a2f34382d3438203d3e20323037393630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f2c0:ff00::/48
Signature Algorithm: sha256WithRSAEncryption
ab:d3:0e:4c:f8:f3:26:2f:ef:34:23:c8:7c:63:ff:f9:12:ad:
ba:e9:85:dd:3f:72:58:91:a6:74:27:30:15:10:6a:32:61:9e:
73:61:51:c7:48:68:a6:be:06:0e:e3:e4:62:9d:6a:6d:d1:5b:
1f:5d:34:1f:4b:70:58:03:27:a9:0e:a6:41:4a:3a:6e:fb:40:
2d:fb:b2:fc:f6:a9:19:a3:61:80:45:cc:59:0a:21:5f:52:50:
18:3e:15:3c:56:13:a9:cf:11:92:81:c1:7a:f5:c5:62:72:85:
29:ff:2d:81:8b:32:9a:d1:f7:28:3e:b2:91:0c:fa:ce:d0:31:
38:13:a6:9f:b5:f1:e4:82:d8:09:41:d6:de:80:97:2d:ce:32:
a8:9e:9e:d7:3b:64:81:48:ab:b4:f8:e7:52:10:da:12:08:a2:
63:b8:14:92:e8:8b:d6:4a:f6:e1:74:31:b2:d8:61:43:19:b0:
ad:f9:7a:7d:70:b0:b0:be:e6:1f:54:1e:f2:a0:eb:33:c5:1f:
b4:ca:13:05:83:1d:60:92:85:7e:b5:db:45:05:91:14:e9:22:
13:9f:dd:7c:bd:71:25:c5:e0:76:0b:1b:07:53:c4:32:22:35:
b8:b9:26:39:f3:d9:27:eb:0f:f6:db:b7:88:c7:63:d2:39:34:
87:05:33:bb
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIUeS/sTByzJ5sCHw0AZ4SPSjqw+GwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDgzOWE5M2RhYjU0NGMyOTZmZmExNDM0NTY4NDRhOGIy
ODE4YjFkMDAeFw0yNjAyMDIwNzI3MTFaFw0yNzAyMDEwNzMyMTFaMDMxMTAvBgNV
BAMTKDdEQjMwNzJDQUIyQjlGNEU1QUU0RTc3NEM5QjM1OUU5QkRDOTQ5NzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbI9r8tA2/SX0KdttMyh3wJ2Kw
Cs7k+x+jci6p17pqNoB80onnRVGmObCRDigyaNK4+ZEtNtaSKxYf+T3FeX2Q3iNg
T1xHprXemdkNYAA7iWmDA3Xaf8TO2qx02rezc2aRw5Ujstx56XaC3/6Udo/1B3Xs
8ZGh6Wg1hddJ6g6kQXCK3JRYAoj97db2JXKeRM3oAb64o7olojSsYStI0c/FAN8a
3Pa3QMTlTeAlsTUgZr5+kCCEUzjx8o/5/qtbHyD6LqsWCZpSvdchEUQeSvmvOehe
6h8du57LiZKfulPYlzdL8pzWw9unMsajsfp87U4pbihs4vB6kmnYgX1ekidbAgMB
AAGjggJKMIICRjAdBgNVHQ4EFgQUfbMHLKsrn05a5Od0ybNZ6b3JSXUwHwYDVR0j
BBgwFoAUCDmpPatUTClv+hQ0VoRKiygYsdAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZGRlODM3ZmItNjM5MC00MWI1LTgyYTAtZjBkMDJjMDNh
MmM2LzcvMDgzOUE5M0RBQjU0NEMyOTZGRkExNDM0NTY4NDRBOEIyODE4QjFEMC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NEbXBQYXRVVENsdi1oUTBWb1JLaXln
WXNkQS5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZGRlODM3ZmIt
NjM5MC00MWI1LTgyYTAtZjBkMDJjMDNhMmM2LzcvMzI2MTMxMzEzYTY2MzI2MzMw
M2E2NjY2MzAzMDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzAzNzM5MzYzMC5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw
DwQCAAIwCQMHACoR8sD/ADANBgkqhkiG9w0BAQsFAAOCAQEAq9MOTPjzJi/vNCPI
fGP/+RKtuumF3T9yWJGmdCcwFRBqMmGec2FRx0hopr4GDuPkYp1qbdFbH100H0tw
WAMnqQ6mQUo6bvtALfuy/PapGaNhgEXMWQohX1JQGD4VPFYTqc8RkoHBevXFYnKF
Kf8tgYsymtH3KD6ykQz6ztAxOBOmn7Xx5ILYCUHW3oCXLc4yqJ6e1ztkgUirtPjn
UhDaEgiiY7gUkuiL1kr24XQxsthhQxmwrfl6fXCwsL7mH1Qe8qDrM8UftMoTBYMd
YJKFfrXbRQWRFOkiE5/dfL1xJcXgdgsbB1PEMiI1uLkmOfPZJ+sP9tu3iMdj0jk0
hwUzuw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:39:18 2026 by rpki-client