Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656434303a3a2f34372d3438203d3e20323135393536.roa
File: 326131343a373538303a656434303a3a2f34372d3438203d3e20323135393536.roa (raw, json)
Hash identifier: APlzVKem+OfgUna9ZEs0OGRVpITrVDe8X2kzTyua8kg=
Subject key identifier: A6:B1:AF:F4:B0:45:71:E9:F2:16:52:A5:95:7C:07:9E:03:68:C6:44
Certificate issuer: /CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B
Certificate serial: 201D061DC1556E44D455418007FE648DED63A74F
Authority key identifier: 9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656434303a3a2f34372d3438203d3e20323135393536.roa
Signing time: Sun 29 Mar 2026 19:22:14 +0000
ROA not before: Sun 29 Mar 2026 19:17:14 +0000
ROA not after: Sun 28 Mar 2027 19:22:14 +0000
asID: 215956
IP address blocks: 2a14:7580:ed40::/47 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:1d:06:1d:c1:55:6e:44:d4:55:41:80:07:fe:64:8d:ed:63:a7:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B
Validity
Not Before: Mar 29 19:17:14 2026 GMT
Not After : Mar 28 19:22:14 2027 GMT
Subject: CN=A6B1AFF4B04571E9F21652A5957C079E0368C644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e7:fd:27:83:39:15:44:bc:4b:83:db:49:81:
a1:3e:a4:e4:d1:1c:d4:45:43:5e:b4:bb:6c:0b:4b:
45:df:fd:03:de:06:7a:41:a1:bf:fb:08:4f:31:01:
b8:e2:c5:a5:5c:a3:1c:ac:fe:55:ae:1e:9a:78:2f:
23:75:58:28:02:ad:f0:7a:62:34:15:6d:2b:71:87:
9e:9d:d2:1b:a0:39:6c:79:9b:5a:c5:7e:48:d0:7c:
19:3c:d4:14:2b:38:30:bf:ad:0c:b1:11:c9:2f:6c:
69:3b:df:44:43:d4:8c:03:50:3e:3c:00:5f:75:94:
dc:48:90:24:35:82:7c:e1:18:b8:e9:80:b9:d8:7f:
3e:36:01:a5:53:f0:95:0e:f0:87:f9:54:47:a2:89:
80:38:71:4c:f5:72:28:e8:d5:41:40:f7:b2:29:95:
67:63:e5:bd:fc:d8:0b:36:29:20:c9:31:71:b5:e8:
69:a9:69:3d:9b:61:10:2b:77:f3:fd:90:e6:ed:7a:
e9:87:ba:47:9a:04:7d:c0:35:32:77:a9:24:e5:3c:
37:80:52:4c:fd:15:28:d7:69:04:f3:98:42:f0:85:
d7:c6:fa:30:e4:52:77:5b:6d:7c:9a:e7:da:9e:8f:
bb:8f:1b:69:cc:a0:c5:3d:66:49:79:9f:45:81:ff:
a4:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:B1:AF:F4:B0:45:71:E9:F2:16:52:A5:95:7C:07:9E:03:68:C6:44
X509v3 Authority Key Identifier:
keyid:9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656434303a3a2f34372d3438203d3e20323135393536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:ed40::/47
Signature Algorithm: sha256WithRSAEncryption
27:d0:eb:bc:12:a8:7a:db:81:81:fa:96:86:30:47:84:b4:91:
22:37:6f:11:50:6e:ae:11:4f:22:79:c9:a5:10:ea:20:96:76:
ed:db:18:f0:ab:b2:5c:cd:bb:db:46:cf:2e:51:56:43:9c:69:
bc:90:2f:e5:0d:3b:ae:d8:00:ed:57:ea:ba:08:81:51:99:fb:
1c:6b:1c:4e:96:a9:a5:c1:20:96:8c:9b:79:b3:a4:db:ef:b9:
8c:42:ec:b3:f3:6e:1a:ff:1f:bf:c3:47:a6:e1:2a:31:b3:c7:
3f:bb:8e:2e:94:e3:7f:ce:6a:a1:f4:cd:85:21:87:45:fd:b3:
a5:fc:39:86:76:9e:1a:46:5f:dc:f5:09:1d:d3:69:db:9a:85:
65:4c:72:64:45:ce:ad:39:54:79:8f:c5:7b:2b:98:4e:a1:24:
77:4d:8d:cc:7c:f0:5a:3b:d9:de:95:6c:4a:f8:b2:16:78:81:
08:77:88:3e:e4:e1:10:8d:c3:53:df:db:ca:e6:67:ef:3f:7b:
a2:ce:d3:28:5c:f7:05:4f:f1:20:ed:b8:cb:22:21:3c:e7:52:
11:c2:50:8a:9c:54:68:e5:8c:83:ca:d8:2c:aa:a8:fe:7c:06:
93:f1:40:d3:f3:34:54:47:a8:4a:bb:0c:9c:f3:30:89:4b:28:
d7:ec:e6:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:42:36 2026 by rpki-client