Route Origin Authorization
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a33623a353a3a2f36342d3634203d3e20333939313538.roa
File: 326130303a646438303a33623a353a3a2f36342d3634203d3e20333939313538.roa (raw, json)
Hash identifier: irqjBNz2CMSn0rL8DYYbyaSC5aSxOEmxQ9e389C2zsA=
Subject key identifier: DB:F9:1C:AA:B2:6B:37:3F:2D:C3:A7:B8:5E:B3:D0:95:21:90:DA:24
Certificate issuer: /CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Certificate serial: 02FC65BE3712DF035BE65BFCBB232FADC36CA68A
Authority key identifier: EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a33623a353a3a2f36342d3634203d3e20333939313538.roa
Signing time: Sat 10 Oct 2026 11:29:15 +0000
ROA not before: Sat 10 Oct 2026 11:24:15 +0000
ROA not after: Sat 09 Oct 2027 11:29:15 +0000
asID: 399158
IP address blocks: 2a00:dd80:3b:5::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.mft
rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:fc:65:be:37:12:df:03:5b:e6:5b:fc:bb:23:2f:ad:c3:6c:a6:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Validity
Not Before: Oct 10 11:24:15 2026 GMT
Not After : Oct 9 11:29:15 2027 GMT
Subject: CN=DBF91CAAB26B373F2DC3A7B85EB3D0952190DA24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:06:0c:cc:d3:4e:4d:47:77:47:05:06:4a:04:
9d:6d:7d:37:d4:2b:de:74:0a:70:9d:7d:45:45:e8:
59:c1:e5:93:86:df:f4:e5:ff:ba:1c:c8:5b:23:46:
a1:55:94:58:6d:64:78:71:f2:22:92:d6:5f:50:e1:
95:3b:e8:4d:54:51:a1:25:0a:50:93:1e:52:71:ca:
4b:d8:14:1b:4d:29:32:d5:7c:c5:48:1e:0f:24:c7:
d3:fd:b2:43:03:3b:3d:35:43:6a:fb:25:aa:d6:2a:
f0:89:01:1b:93:3c:22:8a:ee:77:34:2f:5b:36:aa:
65:6a:77:af:68:d2:3c:49:05:d9:85:0e:19:9b:6c:
61:7c:34:0a:1d:1e:80:e3:6a:8f:b3:17:ce:31:fe:
86:e1:29:09:42:a5:d4:3b:5a:fc:10:e7:37:09:84:
7c:75:00:80:11:60:eb:64:fd:92:a4:c9:fe:7d:6f:
fd:1b:11:95:1f:ad:5e:0f:60:e1:d4:3a:d3:27:23:
9c:e0:2e:b0:3a:fc:87:41:86:74:89:bf:70:b2:1b:
a8:fe:e8:fa:8a:07:94:35:37:90:a4:f4:8c:ae:1f:
ac:02:46:42:cb:d7:62:25:bd:ae:cb:ee:ea:2a:38:
8e:1a:16:1f:2c:13:dd:fb:4e:b4:b5:80:0c:d2:03:
5f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:F9:1C:AA:B2:6B:37:3F:2D:C3:A7:B8:5E:B3:D0:95:21:90:DA:24
X509v3 Authority Key Identifier:
keyid:EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a33623a353a3a2f36342d3634203d3e20333939313538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:dd80:3b:5::/64
Signature Algorithm: sha256WithRSAEncryption
62:a6:1d:79:1a:a7:56:46:3a:15:eb:ca:d9:a2:99:8b:7b:2f:
0b:8b:93:ee:49:b5:83:cc:de:0c:0a:96:4c:18:36:d5:3a:be:
46:1d:3b:3d:2f:49:8e:d2:d6:6e:c3:8f:5a:1e:81:f6:58:bf:
0f:94:70:16:84:fa:67:ed:14:68:ae:0d:5d:89:4d:07:51:ab:
9c:09:0f:63:1f:87:e9:57:98:e6:4f:62:c0:4e:2f:64:49:7e:
19:cb:f8:29:42:5e:3a:01:1d:a9:4e:96:af:04:96:57:b5:3a:
21:e7:fc:8f:be:61:01:1a:88:97:31:1c:d6:73:19:46:3b:0d:
db:66:c1:f9:38:ac:db:17:3a:86:70:e5:56:82:fd:60:48:20:
71:4a:1a:12:23:aa:3b:33:86:6d:8d:2e:5b:d8:b7:b6:d4:0b:
b1:d8:04:1a:97:02:3a:1e:71:9b:58:62:b2:b4:31:b0:e3:0e:
be:13:6f:f6:5f:b2:2a:62:98:ad:74:59:8d:d6:05:f2:4e:a0:
87:09:c1:74:24:55:8d:55:2a:5c:91:5d:ab:e0:df:be:1b:89:
38:46:34:4d:f3:e8:74:75:4f:84:f4:7c:45:a6:1b:89:9c:27:
c1:98:b3:21:d5:87:cf:e7:39:37:4d:bf:30:8f:0e:77:77:15:
b6:ec:55:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 02:58:48 2026 by rpki-client