Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656435323a3a2f34372d3438203d3e20323135393536.roa
File: 326131343a373538303a656435323a3a2f34372d3438203d3e20323135393536.roa (raw, json)
Hash identifier: ZnA11WFg2nPgRnNeEqA7JPyg6KNlDwzLj7GUUBOMkxQ=
Subject key identifier: 29:70:24:A0:63:54:40:7C:DF:05:E8:1F:71:B5:4A:52:32:FD:DE:01
Certificate issuer: /CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B
Certificate serial: 0955D415233AA273534C0C607501EB2A71326DF1
Authority key identifier: 9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656435323a3a2f34372d3438203d3e20323135393536.roa
Signing time: Sun 29 Mar 2026 19:22:13 +0000
ROA not before: Sun 29 Mar 2026 19:17:13 +0000
ROA not after: Sun 28 Mar 2027 19:22:13 +0000
asID: 215956
IP address blocks: 2a14:7580:ed52::/47 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:55:d4:15:23:3a:a2:73:53:4c:0c:60:75:01:eb:2a:71:32:6d:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B
Validity
Not Before: Mar 29 19:17:13 2026 GMT
Not After : Mar 28 19:22:13 2027 GMT
Subject: CN=297024A06354407CDF05E81F71B54A5232FDDE01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b1:7e:cc:55:d3:4b:de:da:66:48:32:9e:a5:
b0:9a:79:56:c6:69:a3:f5:4b:ab:00:c7:0a:4e:d4:
36:90:9e:6c:23:fa:41:29:a1:d6:20:ee:58:cd:3e:
cc:1e:c6:86:89:8f:68:78:0d:fd:29:ad:5a:8f:b6:
3c:d1:24:ff:95:91:50:73:8b:52:89:08:66:18:49:
98:c9:8b:2c:3e:dc:22:59:a0:aa:ab:ab:8a:48:61:
95:f6:40:23:fd:17:16:b0:53:b5:d6:2a:48:41:b6:
60:63:88:34:10:3a:ed:a3:00:10:e4:90:1c:99:4b:
bf:06:d6:70:81:b0:95:ac:49:ab:18:9f:a6:44:ba:
22:ec:68:0c:f3:2f:ee:ad:51:fd:03:b3:b9:d3:62:
27:2a:42:45:fa:17:5f:98:56:60:27:68:90:7b:8b:
ea:01:c7:4d:5c:b4:59:32:18:80:45:bb:06:e6:be:
d3:c9:a7:32:c2:b6:e8:b1:ab:34:7f:1a:80:5c:ec:
63:87:01:c1:f0:da:ec:1d:4d:f0:bc:a2:ed:d3:6c:
d9:10:f4:a7:45:74:db:02:10:d0:c6:5c:bb:f8:2e:
09:bf:09:c4:07:f0:2a:3a:00:22:cf:56:b4:b1:82:
2a:fa:04:8e:c3:05:68:96:8a:96:78:75:81:29:7c:
9d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:70:24:A0:63:54:40:7C:DF:05:E8:1F:71:B5:4A:52:32:FD:DE:01
X509v3 Authority Key Identifier:
keyid:9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656435323a3a2f34372d3438203d3e20323135393536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:ed52::/47
Signature Algorithm: sha256WithRSAEncryption
af:09:51:2f:f9:f5:07:5b:e2:c4:e3:fa:86:8f:fc:d2:a1:81:
85:be:cd:b3:95:45:0b:c7:37:ff:12:37:dd:39:36:92:b8:ba:
a3:2c:f2:0f:fa:c4:0b:e7:c1:93:9b:6e:e4:5d:0a:de:9b:be:
83:ba:8a:e1:63:fe:40:2c:21:a4:68:8b:58:8d:37:7a:22:d5:
89:af:7d:33:53:71:25:c5:d6:68:dc:f3:d6:22:7e:7e:8c:1d:
51:38:ec:3a:1b:a3:05:67:03:89:d4:51:8c:87:12:62:c7:2c:
23:45:50:9d:17:28:83:b5:63:c1:30:af:b8:be:06:5a:1d:36:
54:92:7f:64:47:6d:b0:ed:f5:76:bb:14:75:03:74:0d:d0:d8:
9e:42:7f:2e:7c:e2:c4:43:42:65:6b:cd:9a:11:00:88:bb:37:
02:78:58:13:a4:ec:d1:8e:3c:62:2d:73:3b:c3:f5:d9:77:0e:
58:64:b5:f3:e6:9b:44:61:fe:b9:22:4a:72:7b:60:63:3c:d4:
ec:80:f2:9b:fb:61:80:f7:03:a4:54:05:0b:b9:39:a6:18:9e:
4d:1e:d7:f9:80:c4:b4:60:85:74:3c:7f:bf:65:6a:f2:2c:7f:
b7:89:90:f6:e5:fc:94:57:50:76:ec:19:51:64:62:57:a2:b8:
fd:71:8c:1b
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIUCVXUFSM6onNTTAxgdQHrKnEybfEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUM4MjEyQzVEMURERTg0QjU1NzNFRkM3M0RBQjg0MkQ5
QjhEOTAyQjAeFw0yNjAzMjkxOTE3MTNaFw0yNzAzMjgxOTIyMTNaMDMxMTAvBgNV
BAMTKDI5NzAyNEEwNjM1NDQwN0NERjA1RTgxRjcxQjU0QTUyMzJGRERFMDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVsX7MVdNL3tpmSDKepbCaeVbG
aaP1S6sAxwpO1DaQnmwj+kEpodYg7ljNPswexoaJj2h4Df0prVqPtjzRJP+VkVBz
i1KJCGYYSZjJiyw+3CJZoKqrq4pIYZX2QCP9FxawU7XWKkhBtmBjiDQQOu2jABDk
kByZS78G1nCBsJWsSasYn6ZEuiLsaAzzL+6tUf0Ds7nTYicqQkX6F1+YVmAnaJB7
i+oBx01ctFkyGIBFuwbmvtPJpzLCtuixqzR/GoBc7GOHAcHw2uwdTfC8ou3TbNkQ
9KdFdNsCENDGXLv4Lgm/CcQH8Co6ACLPVrSxgir6BI7DBWiWipZ4dYEpfJ1PAgMB
AAGjggKFMIICgTAdBgNVHQ4EFgQUKXAkoGNUQHzfBegfcbVKUjL93gEwHwYDVR0j
BBgwFoAUnIISxdHd6EtVc+/HPauELZuNkCswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZWJmMDRjN2MtZjgyZC00NzFkLTg1YWQtOThjNjVkZTFj
OTEyLzMvOUM4MjEyQzVEMURERTg0QjU1NzNFRkM3M0RBQjg0MkQ5QjhEOTAyQi5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC85QzgyMTJDNUQxRERFODRCNTU3M0VGQzcz
REFCODQyRDlCOEQ5MDJCLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9lYmYwNGM3Yy1mODJkLTQ3MWQtODVhZC05OGM2NWRlMWM5MTIvMy8zMjYxMzEz
NDNhMzczNTM4MzAzYTY1NjQzNTMyM2EzYTJmMzQzNzJkMzQzODIwM2QzZTIwMzIz
MTM1MzkzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcBKhR1gO1SMA0GCSqGSIb3DQEBCwUAA4IBAQCv
CVEv+fUHW+LE4/qGj/zSoYGFvs2zlUULxzf/EjfdOTaSuLqjLPIP+sQL58GTm27k
XQrem76DuorhY/5ALCGkaItYjTd6ItWJr30zU3ElxdZo3PPWIn5+jB1ROOw6G6MF
ZwOJ1FGMhxJixywjRVCdFyiDtWPBMK+4vgZaHTZUkn9kR22w7fV2uxR1A3QN0Nie
Qn8ufOLEQ0Jla82aEQCIuzcCeFgTpOzRjjxiLXM7w/XZdw5YZLXz5ptEYf65Ikpy
e2BjPNTsgPKb+2GA9wOkVAULuTmmGJ5NHtf5gMS0YIV0PH+/ZWryLH+3iZD25fyU
V1B27BlRZGJXorj9cYwb
-----END CERTIFICATE-----
Generated at Sat Apr 18 03:25:49 2026 by rpki-client