Route Origin Authorization
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a33653a343a3a2f36342d3634203d3e20333939313630.roa
File: 326130303a646438303a33653a343a3a2f36342d3634203d3e20333939313630.roa (raw, json)
Hash identifier: J9tj0+PNQgbldWmQvJ3lNn4c48BOmMyzLdyMtju/8JE=
Subject key identifier: 55:64:1E:EC:64:F2:EB:51:35:4F:EB:A0:CB:D2:1E:64:5D:15:9C:4E
Certificate issuer: /CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Certificate serial: 383CC488BDA962259D84BA6C2A01D6FC78BE2B21
Authority key identifier: EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a33653a343a3a2f36342d3634203d3e20333939313630.roa
Signing time: Sat 10 Oct 2026 12:29:17 +0000
ROA not before: Sat 10 Oct 2026 12:24:17 +0000
ROA not after: Sat 09 Oct 2027 12:29:17 +0000
asID: 399160
IP address blocks: 2a00:dd80:3e:4::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.mft
rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 00:23:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:3c:c4:88:bd:a9:62:25:9d:84:ba:6c:2a:01:d6:fc:78:be:2b:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Validity
Not Before: Oct 10 12:24:17 2026 GMT
Not After : Oct 9 12:29:17 2027 GMT
Subject: CN=55641EEC64F2EB51354FEBA0CBD21E645D159C4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e1:bd:59:f9:7a:23:d9:a5:b5:7f:a5:2f:99:
a7:91:06:29:58:c6:d5:c2:1e:75:ab:4d:36:d3:ab:
57:6b:40:d8:93:d7:21:ea:eb:96:ad:ce:02:06:36:
09:79:85:f4:55:5d:55:5b:2c:a7:c0:74:3d:1e:2a:
0e:4f:2d:87:c7:27:e9:bd:82:62:84:33:96:0b:d4:
9f:f4:24:f0:75:48:a0:01:d3:d2:79:63:1a:11:01:
25:7f:a7:f6:f6:f1:9e:83:d6:8a:e2:78:a4:8f:76:
1e:f2:94:ba:a2:d6:56:4c:95:ef:f5:f2:2a:0c:b2:
ca:17:ed:9f:ad:3a:c1:6d:16:e8:f0:df:59:53:3a:
bd:1e:6d:6a:5b:57:6c:97:92:cc:2a:13:b3:23:a1:
33:7f:1d:d6:72:20:56:94:22:7d:fb:77:11:6a:8f:
5f:9d:c0:56:1c:88:ff:58:78:70:6d:a3:a5:ea:bb:
96:da:8a:cc:02:5a:e0:d6:cb:c1:20:90:40:55:8f:
91:66:43:53:c7:9b:73:54:83:6d:01:03:83:40:10:
92:4b:5f:a7:ef:e7:38:93:19:c4:8e:d8:40:e7:76:
92:05:f4:da:fc:80:3e:33:eb:ad:44:e7:5c:7c:22:
f5:ef:30:72:aa:e3:3b:85:71:5b:78:9b:73:11:f8:
8f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:64:1E:EC:64:F2:EB:51:35:4F:EB:A0:CB:D2:1E:64:5D:15:9C:4E
X509v3 Authority Key Identifier:
keyid:EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a33653a343a3a2f36342d3634203d3e20333939313630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:dd80:3e:4::/64
Signature Algorithm: sha256WithRSAEncryption
48:27:6d:70:fe:9d:2c:29:dc:27:96:bf:b3:5e:e5:84:eb:94:
04:61:31:42:58:a8:7d:87:8c:a3:56:1a:e0:8f:4f:77:2f:9c:
62:7a:38:32:df:2c:e3:f0:ff:1f:36:5e:47:b8:98:91:4d:f8:
22:e5:48:78:31:24:20:3d:97:97:76:db:cb:bb:45:ef:40:64:
2a:93:23:07:eb:53:60:91:a0:a7:e2:65:a6:ab:66:0b:8f:9c:
86:78:5f:35:6c:b7:63:81:61:0e:03:29:d5:37:62:e7:d3:d6:
36:76:38:60:7e:81:35:bb:7b:31:70:8c:4c:c7:11:fe:e8:bd:
b7:d1:88:f1:4f:b9:d3:bd:f5:4e:5d:8b:52:26:12:7a:8c:f7:
47:10:5e:e2:88:08:14:29:bd:1b:e2:58:9b:25:6b:58:eb:ff:
b5:ce:43:f7:09:d9:90:fb:7a:ae:4b:e1:31:fa:b8:4b:e2:98:
9c:54:6c:e9:93:51:b0:a3:59:f8:8c:9b:8d:c3:50:b9:e3:f6:
87:e8:13:08:64:59:09:58:4c:08:f0:e2:5a:e5:06:68:e5:96:
40:78:1b:fc:af:27:70:11:5e:cf:bc:4e:5b:82:1c:e8:0a:21:
b5:2f:7c:86:08:2d:67:00:a4:f3:3e:c5:ce:b5:d0:d9:bb:34:
ee:2f:99:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 16:03:19 2026 by rpki-client