Route Origin Authorization
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a33623a333a3a2f36342d3634203d3e20333939313538.roa
File: 326130303a646438303a33623a333a3a2f36342d3634203d3e20333939313538.roa (raw, json)
Hash identifier: Zta2yb7kSxVMz4VcO60Of0RnxIwjq1RflfAskRWfafE=
Subject key identifier: 68:A2:A1:92:2E:E5:17:D0:2A:5B:39:09:01:D8:17:86:CE:37:D3:FE
Certificate issuer: /CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Certificate serial: 6986630AA5DCEB2D60C84C489F65C2EAD4573334
Authority key identifier: EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a33623a333a3a2f36342d3634203d3e20333939313538.roa
Signing time: Sat 10 Oct 2026 11:29:15 +0000
ROA not before: Sat 10 Oct 2026 11:24:15 +0000
ROA not after: Sat 09 Oct 2027 11:29:15 +0000
asID: 399158
IP address blocks: 2a00:dd80:3b:3::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.mft
rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:86:63:0a:a5:dc:eb:2d:60:c8:4c:48:9f:65:c2:ea:d4:57:33:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Validity
Not Before: Oct 10 11:24:15 2026 GMT
Not After : Oct 9 11:29:15 2027 GMT
Subject: CN=68A2A1922EE517D02A5B390901D81786CE37D3FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:91:d2:69:09:d2:2a:40:ba:9e:1e:cf:19:28:
68:dd:5a:b4:db:1e:f6:c9:1c:56:62:2d:b9:0c:2f:
78:17:f9:70:2f:15:48:65:0b:dd:b1:0c:aa:ce:a2:
eb:31:55:90:ad:64:ff:88:42:3d:f2:a3:b1:db:cb:
98:99:34:45:db:7a:c4:ac:28:3d:8e:8a:e6:23:4d:
e6:8a:15:e2:d1:32:77:4e:0c:31:98:a7:c2:99:fb:
d8:d6:1c:da:25:f7:ba:86:94:80:c3:40:fb:04:5b:
6d:24:78:6d:f7:56:05:75:ec:40:5d:63:b8:65:c4:
dc:de:65:04:7a:bc:83:19:f7:7e:0a:ad:22:2d:e1:
02:24:f6:f9:5a:3a:a5:45:ed:8e:22:b1:28:99:48:
ce:e9:92:8f:e2:b2:b7:b7:a6:d2:bf:67:45:cb:c4:
ab:36:42:a7:6b:4e:ab:ca:73:67:3e:72:1e:1a:e6:
99:e0:45:60:a0:f8:50:95:58:24:96:ce:6d:b4:f1:
61:54:bf:52:03:aa:a6:00:87:a1:5b:84:d5:59:16:
a8:d2:f9:f1:50:4d:42:0f:43:f0:35:0a:4b:a9:df:
76:e1:a3:3b:7a:d9:38:c8:33:a3:d0:56:3d:6c:b7:
7f:f2:4e:08:31:f2:33:e3:69:6f:65:6e:af:14:64:
a2:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:A2:A1:92:2E:E5:17:D0:2A:5B:39:09:01:D8:17:86:CE:37:D3:FE
X509v3 Authority Key Identifier:
keyid:EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a33623a333a3a2f36342d3634203d3e20333939313538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:dd80:3b:3::/64
Signature Algorithm: sha256WithRSAEncryption
72:73:68:4b:dc:24:65:92:a8:9e:06:cb:91:f2:02:ac:cd:89:
52:fe:dc:db:24:80:31:78:ae:37:84:16:fd:ed:74:66:dd:22:
42:46:95:9d:8f:dd:e5:5e:a7:6d:24:f9:07:96:a2:f4:7a:e6:
19:33:98:ff:9a:ad:6b:57:69:87:d6:05:fd:1e:bb:ac:88:b7:
fb:d2:4e:58:46:f6:57:ea:0d:ab:88:3b:f0:ce:72:d0:39:4e:
14:76:20:53:0a:a4:14:5a:a8:66:77:8a:ab:ce:f5:38:59:c3:
35:d1:8d:df:83:f4:d9:9a:e8:f7:44:e9:42:96:74:74:0b:0e:
3c:d0:07:d4:96:0e:49:25:54:24:61:d3:cd:ad:85:bc:d2:c9:
3d:b0:ec:b1:76:84:48:e0:3f:3d:31:56:99:34:8a:80:39:a5:
45:95:88:0b:3e:16:83:1b:34:78:c8:20:e9:76:06:ac:da:c7:
65:09:e9:51:97:f2:af:ca:bc:82:10:b1:98:1a:9f:59:a0:90:
92:50:3d:c6:2c:64:08:80:f2:7e:f1:b0:b3:35:7c:cd:cc:49:
1b:88:84:d0:8b:2f:67:88:b0:ce:83:4b:12:d9:e8:8b:23:ca:
17:c2:89:50:1f:91:07:46:0f:cb:db:5e:d9:1f:5c:fd:d2:90:
7e:cd:69:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 05:54:54 2026 by rpki-client