Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656530363a3a2f34382d3438203d3e20323135393536.roa
File: 326131343a373538303a656530363a3a2f34382d3438203d3e20323135393536.roa (raw, json)
Hash identifier: xgxMh9s10hG27dkXdpisSQFF8hsLEyAHFD99x27yu1E=
Subject key identifier: 14:7D:9F:99:EE:AC:62:0C:64:44:ED:6C:E7:CA:FE:AE:C0:55:C9:FF
Certificate issuer: /CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B
Certificate serial: 79BD8DB5BB51B07B333EBEDCDE25AAF488D5EF4A
Authority key identifier: 9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656530363a3a2f34382d3438203d3e20323135393536.roa
Signing time: Sun 29 Mar 2026 19:22:11 +0000
ROA not before: Sun 29 Mar 2026 19:17:11 +0000
ROA not after: Sun 28 Mar 2027 19:22:11 +0000
asID: 215956
IP address blocks: 2a14:7580:ee06::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:bd:8d:b5:bb:51:b0:7b:33:3e:be:dc:de:25:aa:f4:88:d5:ef:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B
Validity
Not Before: Mar 29 19:17:11 2026 GMT
Not After : Mar 28 19:22:11 2027 GMT
Subject: CN=147D9F99EEAC620C6444ED6CE7CAFEAEC055C9FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1d:6c:c0:d1:51:85:bb:09:59:d2:30:cb:e0:
0c:88:17:ba:85:5c:e7:36:cf:b1:52:a6:1d:ba:16:
ba:08:a2:83:7d:10:56:6d:01:d8:16:65:d1:86:8b:
65:2d:a6:26:78:be:e0:8f:be:73:3d:66:39:88:43:
f4:e2:91:6a:00:0e:71:0d:13:e9:4a:1d:13:fa:0d:
3b:52:f8:c4:eb:48:64:eb:65:a7:41:64:e8:91:c0:
7b:5a:95:90:a9:f2:d7:de:5d:59:a0:cb:ec:26:03:
c4:41:cc:21:e6:40:69:8f:f7:30:6e:91:76:71:91:
25:60:94:6a:6c:2d:86:e3:63:88:5f:17:78:0b:bf:
c0:7c:fc:0d:53:1b:40:2b:77:31:79:a1:1e:bb:27:
a8:ad:cd:a8:5c:db:07:2f:f1:b3:be:1c:62:8e:2c:
24:7f:bb:85:df:19:33:67:18:50:60:ea:f1:9f:d0:
98:70:80:25:da:84:4c:ee:c2:dc:05:5a:c6:b4:2b:
2c:6f:b0:03:90:e4:0b:83:a5:dd:5a:d5:48:54:57:
5c:bd:d6:b2:05:2c:e7:4b:4e:68:6a:7f:2c:ef:ad:
66:4f:12:3a:ee:bc:3c:3d:b7:18:5c:69:b4:6d:89:
99:d7:28:bf:b1:42:25:37:b1:5e:a1:92:0a:b6:af:
37:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:7D:9F:99:EE:AC:62:0C:64:44:ED:6C:E7:CA:FE:AE:C0:55:C9:FF
X509v3 Authority Key Identifier:
keyid:9C:82:12:C5:D1:DD:E8:4B:55:73:EF:C7:3D:AB:84:2D:9B:8D:90:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9C8212C5D1DDE84B5573EFC73DAB842D9B8D902B.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/3/326131343a373538303a656530363a3a2f34382d3438203d3e20323135393536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:ee06::/48
Signature Algorithm: sha256WithRSAEncryption
5f:3a:84:b7:be:9a:a4:00:3a:28:0f:a0:15:36:ee:9e:f7:59:
bf:35:e5:92:d5:13:8e:c8:e7:b3:f6:2d:6b:e8:5d:f1:f5:d8:
92:79:56:0b:7b:80:02:aa:54:46:4f:a9:17:3e:0b:1e:15:2e:
6c:b2:4b:fc:b0:fb:00:e9:03:91:a7:6b:3f:7f:1a:22:50:16:
33:0f:b2:04:9b:ad:42:ed:f5:c4:62:60:40:f5:9b:a7:28:82:
87:ab:3a:e7:be:97:e8:80:1e:7d:7b:5c:c6:ef:db:73:31:9c:
5e:4b:be:25:f2:2b:8f:69:39:df:68:b7:a9:e7:7d:3a:f7:7d:
33:d6:d4:30:e7:ae:a8:10:01:38:59:6b:24:87:3e:6e:22:6c:
51:7e:84:71:d9:6f:2b:17:11:2d:fe:33:25:5a:9a:fe:5a:8e:
06:45:f7:ba:2e:e5:0e:7d:f3:26:39:6d:dd:8b:13:d1:5c:46:
68:2e:74:25:b7:e2:d5:c8:71:c1:12:43:e2:33:36:e1:b9:35:
a5:e0:06:90:24:41:57:1a:a1:c5:fe:87:65:a0:c3:48:25:79:
31:1d:0c:f5:b6:82:d6:5e:4a:b5:39:48:92:3e:c2:b1:70:81:
9f:8c:ee:7e:22:a1:b2:64:c5:83:94:72:2f:13:c9:22:a5:51:
03:2c:bc:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:32:11 2026 by rpki-client