Route Origin Authorization
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a33653a363a3a2f36342d3634203d3e20333939313630.roa
File: 326130303a646438303a33653a363a3a2f36342d3634203d3e20333939313630.roa (raw, json)
Hash identifier: KBW0Mxl1t45e9+zAKBv4bpLPUv10cI9qzf2sReOLmV0=
Subject key identifier: 8B:5D:00:8C:68:06:4C:8F:33:72:CF:20:F1:C2:04:55:1E:0C:AC:04
Certificate issuer: /CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Certificate serial: 32221FB7052BA94F3061774DD7747E666118FF78
Authority key identifier: EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a33653a363a3a2f36342d3634203d3e20333939313630.roa
Signing time: Sat 10 Oct 2026 12:29:17 +0000
ROA not before: Sat 10 Oct 2026 12:24:17 +0000
ROA not after: Sat 09 Oct 2027 12:29:17 +0000
asID: 399160
IP address blocks: 2a00:dd80:3e:6::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.mft
rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:22:1f:b7:05:2b:a9:4f:30:61:77:4d:d7:74:7e:66:61:18:ff:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Validity
Not Before: Oct 10 12:24:17 2026 GMT
Not After : Oct 9 12:29:17 2027 GMT
Subject: CN=8B5D008C68064C8F3372CF20F1C204551E0CAC04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ef:4b:a2:40:75:c0:ea:b2:1e:f9:be:22:8c:
a1:34:c4:ed:be:bb:1f:28:92:37:90:dc:e5:89:9b:
81:31:6e:11:93:38:e0:74:54:a1:1c:ee:d0:48:b1:
1f:6e:12:6c:7b:82:a6:28:78:f8:00:07:d1:f0:ac:
96:90:b3:61:df:f4:0d:78:d0:c2:6c:1f:2f:a8:d6:
6b:68:50:76:67:e3:3b:89:be:27:f6:e4:f1:8c:57:
6f:e9:ff:23:7d:89:73:7f:c0:a3:68:e1:00:47:11:
d2:9a:9c:b4:6d:46:c3:95:38:6c:a1:a3:fc:c8:3b:
fb:68:02:85:89:0a:8c:80:2f:6a:f9:d7:57:f7:ca:
4a:92:94:12:13:ac:6b:ba:46:1b:c1:07:af:37:c3:
a0:27:d4:7c:c3:d4:0c:a0:71:d6:66:1c:00:e8:16:
d9:67:4d:56:e0:fc:1b:66:f2:86:06:7c:fa:31:4b:
9e:29:22:50:14:5f:1d:66:88:8e:42:cd:01:cf:81:
0b:a7:68:e3:6e:2c:45:a5:41:a5:3b:bf:01:ec:ff:
bd:19:45:45:0c:af:56:e3:3a:20:e1:68:0b:e4:22:
46:97:29:56:f1:40:77:31:6d:ec:76:cb:11:a5:3e:
23:31:a0:c8:d4:18:7f:3f:99:b7:2a:b0:2b:58:4f:
62:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:5D:00:8C:68:06:4C:8F:33:72:CF:20:F1:C2:04:55:1E:0C:AC:04
X509v3 Authority Key Identifier:
keyid:EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a33653a363a3a2f36342d3634203d3e20333939313630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:dd80:3e:6::/64
Signature Algorithm: sha256WithRSAEncryption
0f:97:e3:bd:bc:ee:c0:95:0e:45:97:c2:c2:a9:5f:86:8f:4a:
5f:33:4a:ac:bb:35:82:c9:bd:c7:68:9f:50:fe:93:c3:b0:85:
5a:5c:89:6c:1b:76:04:f9:65:5a:1c:8f:cc:91:e9:4e:30:8a:
d2:79:15:97:42:99:51:38:3a:09:9e:95:ed:0c:6d:ab:db:b8:
2c:74:1e:1b:66:5b:85:7f:ae:8e:e4:94:d7:b0:b0:27:b4:a9:
12:c8:01:44:03:99:d4:62:2c:4a:91:5d:fe:f7:1a:ab:1a:e4:
7f:4e:a7:5e:91:a6:4a:e6:e0:a8:8a:b4:69:fa:1f:94:1c:dc:
54:f5:23:62:b5:16:eb:87:7c:ac:4b:ca:b9:9f:5b:e3:7e:56:
e8:c1:d9:35:3d:42:3b:02:e3:64:47:1a:57:ce:4a:e1:4a:09:
90:c8:f2:c7:dd:66:75:fc:62:54:df:00:bc:ed:d6:84:af:79:
6e:29:ea:ac:d0:4e:0f:28:ca:bf:af:19:b5:19:71:47:64:ab:
ca:aa:d1:39:2b:39:b3:b6:5a:ac:25:cf:24:5f:96:98:3c:5c:
15:42:bf:c0:bc:04:c2:91:99:62:0e:a7:20:b0:38:57:92:6b:
c1:46:fe:3b:42:a6:a8:fd:77:f8:41:73:f3:07:e5:6f:cc:22:
25:1f:5a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 09:08:22 2026 by rpki-client