Route Origin Authorization
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a33623a343a3a2f36342d3634203d3e20333939313538.roa
File: 326130303a646438303a33623a343a3a2f36342d3634203d3e20333939313538.roa (raw, json)
Hash identifier: rbr7Sjd9q4ZkEtSnjEZFLLi+jQbgaYZ94PmNsFGbyAA=
Subject key identifier: 68:52:B7:FC:B2:A8:8D:ED:0C:B4:AA:05:02:CD:6D:0F:CD:6B:52:57
Certificate issuer: /CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Certificate serial: 78EE9935BCE706C84B5F7192428C601B77FFEDA0
Authority key identifier: EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a33623a343a3a2f36342d3634203d3e20333939313538.roa
Signing time: Sat 10 Oct 2026 11:29:15 +0000
ROA not before: Sat 10 Oct 2026 11:24:15 +0000
ROA not after: Sat 09 Oct 2027 11:29:15 +0000
asID: 399158
IP address blocks: 2a00:dd80:3b:4::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.mft
rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 00:23:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:ee:99:35:bc:e7:06:c8:4b:5f:71:92:42:8c:60:1b:77:ff:ed:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Validity
Not Before: Oct 10 11:24:15 2026 GMT
Not After : Oct 9 11:29:15 2027 GMT
Subject: CN=6852B7FCB2A88DED0CB4AA0502CD6D0FCD6B5257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:14:84:bf:07:0a:24:ee:a1:55:3c:06:42:f2:
57:a1:69:0b:2c:3e:21:1e:98:dc:71:39:9a:a8:06:
73:0e:9d:95:b8:b0:3f:86:d0:46:88:9a:5f:ee:f2:
22:d3:7b:9d:7e:b9:fa:31:4a:a0:20:1f:23:e9:64:
2c:e1:70:5d:2c:e0:fb:de:9e:40:a8:51:e1:43:4e:
e6:c0:71:2e:10:5f:02:02:4e:27:f5:6e:2e:5a:e5:
7b:40:88:a8:42:e2:fe:8e:d0:bc:b0:87:2d:0f:35:
63:5e:fc:ad:8c:96:99:c3:6d:95:95:f5:04:cf:54:
d1:5f:92:0c:f5:0e:33:74:42:3f:c4:07:7d:fd:f5:
f3:10:b8:e2:b7:a1:a1:19:a1:1f:c8:7d:46:21:07:
09:9d:3a:cd:fa:78:fc:50:bb:5b:ee:d4:0c:85:c8:
a5:b6:fb:a8:4a:ed:3b:8c:0b:d0:0d:cf:b9:9f:c6:
da:7c:09:87:e9:98:d9:2c:fd:01:ca:48:4b:08:bb:
47:4e:77:31:c1:9a:38:d9:a6:72:f4:62:c9:4a:2f:
a3:ce:6d:41:cb:52:94:4e:9c:36:c1:4c:27:37:ed:
62:36:aa:aa:11:8d:7d:9c:82:0a:c3:2f:22:29:c9:
e8:50:f4:ce:e1:10:c2:32:a7:14:d2:80:88:6c:7f:
7c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:52:B7:FC:B2:A8:8D:ED:0C:B4:AA:05:02:CD:6D:0F:CD:6B:52:57
X509v3 Authority Key Identifier:
keyid:EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a33623a343a3a2f36342d3634203d3e20333939313538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:dd80:3b:4::/64
Signature Algorithm: sha256WithRSAEncryption
76:94:91:54:34:d6:81:d1:8e:df:5c:ac:57:fa:f0:79:68:67:
58:dc:2f:12:c6:a9:83:c8:f5:61:5d:23:ef:7c:ba:8f:6b:b3:
c7:51:2b:8a:23:b4:2a:a4:14:3c:40:da:d9:0a:40:60:0d:3b:
77:d8:2f:fc:db:51:25:3e:ca:2d:8c:d0:ac:59:23:d1:5c:63:
26:5a:36:3f:68:06:82:d0:0f:e5:71:98:dc:e8:e1:92:f1:8f:
c5:ae:10:93:08:f9:1b:8c:31:16:dc:c2:cb:8c:c2:78:e8:3b:
c2:54:b7:c0:5e:e3:6e:5b:9e:6c:4b:75:1f:63:75:fb:0b:b5:
d4:8c:d9:a0:cf:96:fc:76:d0:d1:c1:88:1c:89:db:b3:7a:82:
4f:f1:2c:58:8d:7f:04:47:a7:ef:fa:32:a3:ba:8a:6a:b0:78:
16:ae:01:fd:ec:24:ba:7f:50:c0:85:47:76:40:54:f8:64:2b:
4c:43:eb:f4:84:73:02:e5:c9:36:31:2a:4c:df:f9:85:03:61:
fd:96:a9:d5:61:d4:bd:3f:de:6a:d1:e8:b4:b6:37:3b:28:b5:
8d:cc:12:43:57:f5:58:8a:b0:ef:f0:72:76:b3:8e:73:bd:dc:
37:53:e7:c1:ac:ab:8e:2f:10:c6:cd:60:be:63:af:36:30:c1:
16:a4:d8:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 18:15:48 2026 by rpki-client