Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656431303a3a2f34362d3438203d3e20323135393536.roa
File: 326131343a373538303a656431303a3a2f34362d3438203d3e20323135393536.roa (raw, json)
Hash identifier: 94DTzLjsfej96EpSaRH/jZ4Ae8DSz40+nJ10e7Dah/o=
Subject key identifier: F8:FC:17:A3:43:A2:C6:45:1B:1A:89:CC:E9:A4:47:A9:C1:8D:54:C3
Certificate issuer: /CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B
Certificate serial: 2908F05629D0D6967DC7BE7F8C4BF604A55257E9
Authority key identifier: 9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656431303a3a2f34362d3438203d3e20323135393536.roa
Signing time: Sun 29 Mar 2026 19:22:09 +0000
ROA not before: Sun 29 Mar 2026 19:17:09 +0000
ROA not after: Sun 28 Mar 2027 19:22:09 +0000
asID: 215956
IP address blocks: 2a14:7580:ed10::/46 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:08:f0:56:29:d0:d6:96:7d:c7:be:7f:8c:4b:f6:04:a5:52:57:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B
Validity
Not Before: Mar 29 19:17:09 2026 GMT
Not After : Mar 28 19:22:09 2027 GMT
Subject: CN=F8FC17A343A2C6451B1A89CCE9A447A9C18D54C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:fc:3d:64:82:b2:51:c6:1d:17:c7:a4:69:5f:
1d:35:6f:ce:d8:f0:4f:17:7f:fd:2c:ca:ed:a9:a1:
2d:79:59:49:28:cc:f7:94:08:74:a6:fa:db:fc:e0:
63:d1:76:10:7c:76:c0:95:30:bb:77:42:9f:b8:59:
7c:57:45:71:26:8f:65:e3:55:d2:a9:1d:57:9e:3a:
14:e2:43:cd:00:ad:0c:af:4c:1e:30:d1:63:d9:db:
58:8e:d2:86:00:62:51:63:74:b6:07:a3:e8:8c:68:
e4:d5:c0:fe:6b:5d:8d:0f:3e:5c:3a:27:4d:89:9a:
ee:ed:ce:4f:91:3f:45:4d:3c:7b:fd:8b:ee:35:e5:
ac:ca:38:08:02:b9:61:3c:4a:15:99:11:83:54:48:
33:62:e5:49:ae:00:8e:08:8c:23:c7:f9:f9:01:97:
22:eb:d4:4b:55:71:18:78:ae:42:a6:f4:a3:38:9f:
47:ae:83:c0:2a:2d:ff:0f:76:72:9f:37:7a:05:e6:
a4:d3:db:84:43:49:75:0f:e8:98:b4:3a:6b:67:4c:
76:7e:33:77:28:1e:97:61:cc:68:0e:06:c3:c6:96:
d1:2c:14:77:c4:1d:36:33:18:17:58:99:fe:cc:a3:
d3:11:a3:eb:14:bd:c0:b6:3a:ab:f9:c0:76:eb:e3:
17:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:FC:17:A3:43:A2:C6:45:1B:1A:89:CC:E9:A4:47:A9:C1:8D:54:C3
X509v3 Authority Key Identifier:
keyid:9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656431303a3a2f34362d3438203d3e20323135393536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:ed10::/46
Signature Algorithm: sha256WithRSAEncryption
25:0e:95:5c:a0:d7:92:b3:59:d5:0f:2d:3e:ae:4d:cb:7f:c9:
94:89:75:7f:0e:c8:2f:d3:fb:94:e3:21:7e:66:f4:ca:76:0e:
f5:11:28:de:1b:11:01:5d:f9:9d:c5:3d:5b:4d:42:8e:41:33:
58:c0:65:b6:63:e9:76:f1:93:a5:11:5b:38:d4:8e:ad:d9:94:
b4:a5:a6:12:d8:64:54:31:a2:26:0a:0c:cf:fe:b2:f8:45:6a:
ee:64:d7:c4:02:af:ef:f4:26:85:de:17:57:24:56:04:69:7a:
66:a7:4e:a0:44:26:fa:41:49:9d:76:71:cd:b1:6c:c8:71:04:
40:9f:3c:22:06:ca:d2:cb:71:a5:f8:33:ef:2c:7f:43:eb:01:
03:e8:96:45:5b:21:dc:7c:28:fa:c4:bb:64:01:20:c9:1e:d0:
90:b0:b4:25:66:90:39:01:9b:ca:4d:65:2a:5c:9b:3b:16:ed:
c6:cf:21:45:ca:4c:65:74:ae:bb:19:e1:24:58:72:f9:f6:67:
18:e2:51:a3:97:81:ac:a7:0f:fb:94:e5:48:c6:75:8b:b8:ed:
48:32:c3:76:46:3d:fb:2f:6e:18:fe:be:88:16:c4:79:a6:64:
1c:76:c5:5b:17:c8:d0:14:b8:5b:c6:b2:72:56:ea:97:30:6b:
75:53:37:26
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIUKQjwVinQ1pZ9x75/jEv2BKVSV+kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUM4MjEyQzVEMURERTg0QjU1NzNFRkM3M0RBQjg0MkQ5
QjhEOTAyQjAeFw0yNjAzMjkxOTE3MDlaFw0yNzAzMjgxOTIyMDlaMDMxMTAvBgNV
BAMTKEY4RkMxN0EzNDNBMkM2NDUxQjFBODlDQ0U5QTQ0N0E5QzE4RDU0QzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe/D1kgrJRxh0Xx6RpXx01b87Y
8E8Xf/0syu2poS15WUkozPeUCHSm+tv84GPRdhB8dsCVMLt3Qp+4WXxXRXEmj2Xj
VdKpHVeeOhTiQ80ArQyvTB4w0WPZ21iO0oYAYlFjdLYHo+iMaOTVwP5rXY0PPlw6
J02Jmu7tzk+RP0VNPHv9i+415azKOAgCuWE8ShWZEYNUSDNi5UmuAI4IjCPH+fkB
lyLr1EtVcRh4rkKm9KM4n0eug8AqLf8PdnKfN3oF5qTT24RDSXUP6Ji0OmtnTHZ+
M3coHpdhzGgOBsPGltEsFHfEHTYzGBdYmf7Mo9MRo+sUvcC2Oqv5wHbr4xdvAgMB
AAGjggKFMIICgTAdBgNVHQ4EFgQU+PwXo0OixkUbGonM6aRHqcGNVMMwHwYDVR0j
BBgwFoAUnIISxdHd6EtVc+/HPauELZuNkCswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZWJmMDRjN2MtZjgyZC00NzFkLTg1YWQtOThjNjVkZTFj
OTEyLzMvOUM4MjEyQzVEMURERTg0QjU1NzNFRkM3M0RBQjg0MkQ5QjhEOTAyQi5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC85QzgyMTJDNUQxRERFODRCNTU3M0VGQzcz
REFCODQyRDlCOEQ5MDJCLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9lYmYwNGM3Yy1mODJkLTQ3MWQtODVhZC05OGM2NWRlMWM5MTIvMy8zMjYxMzEz
NDNhMzczNTM4MzAzYTY1NjQzMTMwM2EzYTJmMzQzNjJkMzQzODIwM2QzZTIwMzIz
MTM1MzkzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcCKhR1gO0QMA0GCSqGSIb3DQEBCwUAA4IBAQAl
DpVcoNeSs1nVDy0+rk3Lf8mUiXV/Dsgv0/uU4yF+ZvTKdg71ESjeGxEBXfmdxT1b
TUKOQTNYwGW2Y+l28ZOlEVs41I6t2ZS0paYS2GRUMaImCgzP/rL4RWruZNfEAq/v
9CaF3hdXJFYEaXpmp06gRCb6QUmddnHNsWzIcQRAnzwiBsrSy3Gl+DPvLH9D6wED
6JZFWyHcfCj6xLtkASDJHtCQsLQlZpA5AZvKTWUqXJs7Fu3GzyFFykxldK67GeEk
WHL59mcY4lGjl4Gspw/7lOVIxnWLuO1IMsN2Rj37L24Y/r6IFsR5pmQcdsVbF8jQ
FLhbxrJyVuqXMGt1Uzcm
-----END CERTIFICATE-----
Generated at Sat Apr 18 01:53:44 2026 by rpki-client