Route Origin Authorization
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a33663a35393a3a2f36342d3634203d3e20333939313638.roa
File: 326130303a646438303a33663a35393a3a2f36342d3634203d3e20333939313638.roa (raw, json)
Hash identifier: mfTgYgAWhak7QQluQusuSip/Gqxj9+A75608llppqPg=
Subject key identifier: CD:4A:EF:DC:D7:01:C9:BD:95:78:3D:0D:78:29:8F:68:51:98:03:DB
Certificate issuer: /CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Certificate serial: 4E973F5ECDD59FF6E247F4E52DB1684CD7493F91
Authority key identifier: EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a33663a35393a3a2f36342d3634203d3e20333939313638.roa
Signing time: Sat 10 Oct 2026 13:29:18 +0000
ROA not before: Sat 10 Oct 2026 13:24:18 +0000
ROA not after: Sat 09 Oct 2027 13:29:18 +0000
asID: 399168
IP address blocks: 2a00:dd80:3f:59::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.mft
rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:97:3f:5e:cd:d5:9f:f6:e2:47:f4:e5:2d:b1:68:4c:d7:49:3f:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Validity
Not Before: Oct 10 13:24:18 2026 GMT
Not After : Oct 9 13:29:18 2027 GMT
Subject: CN=CD4AEFDCD701C9BD95783D0D78298F68519803DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5b:8c:c2:60:8a:27:b7:16:cd:96:99:8a:89:
6b:25:eb:02:6f:f0:50:4c:31:5b:d5:3c:15:0c:9d:
7d:c3:30:d1:e0:e6:ad:e0:7c:14:ac:53:91:14:3a:
5e:ea:22:8a:65:7f:ba:28:de:35:e6:43:bc:d1:47:
f8:a1:08:64:70:43:1e:7f:07:c3:70:eb:79:47:7a:
a6:68:e7:91:2f:bd:5b:1e:b8:5f:48:50:9e:c0:92:
ec:37:17:5d:00:48:e2:1f:96:07:de:35:9d:19:54:
17:74:0a:7d:8b:34:f3:ab:70:18:3c:cc:a0:55:f9:
2b:f8:e7:e2:4f:e6:50:70:62:fa:1d:83:4a:a6:29:
97:4a:3f:4c:79:82:d9:2e:41:f8:d4:9c:da:4e:dd:
f0:a5:c5:bc:d7:a9:c1:5f:90:4a:f9:ac:ac:62:c4:
f8:7f:52:1b:c4:8b:23:c5:0f:71:95:52:99:9e:65:
f9:b1:03:8f:01:23:29:0e:b1:0a:b3:a0:15:5a:f8:
3f:78:11:1b:44:c3:d7:99:42:7a:70:78:1f:89:3c:
6a:f1:cd:c9:26:f6:35:36:98:4c:fd:c1:fe:8a:f0:
e3:c6:0a:1b:d4:e5:9a:80:63:f0:ea:f7:48:f8:a1:
4b:83:80:6f:80:10:5d:a2:f2:0c:a0:2e:e0:d5:bf:
b3:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:4A:EF:DC:D7:01:C9:BD:95:78:3D:0D:78:29:8F:68:51:98:03:DB
X509v3 Authority Key Identifier:
keyid:EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a33663a35393a3a2f36342d3634203d3e20333939313638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:dd80:3f:59::/64
Signature Algorithm: sha256WithRSAEncryption
34:20:da:81:0a:bd:f4:4a:2f:59:49:e8:3e:a8:e5:28:af:ac:
13:2a:c8:20:6f:f9:01:94:fc:7f:c7:da:46:85:0f:e7:22:e2:
b4:3c:cc:20:bd:69:f3:8c:3c:3f:c6:bf:c6:75:a5:3d:3e:61:
3d:e1:0f:2b:e2:8f:1c:c3:0e:22:2b:50:5a:8b:65:a6:10:72:
49:06:60:a6:1c:ad:18:fa:33:7a:e4:13:e3:72:db:1d:19:0d:
d7:5e:60:7a:60:0b:ff:b1:7a:95:6e:e7:ae:4b:2e:9d:b9:d7:
c3:a5:d5:bd:71:61:3d:6a:0e:0a:e9:cc:d2:66:47:b6:f0:92:
93:9e:fa:e1:a0:31:6d:be:fe:80:d4:80:71:78:02:6d:d0:10:
4b:0b:33:b9:13:2f:1c:fe:69:2f:c1:48:48:4e:90:b1:19:44:
55:52:8a:19:1d:74:fb:8c:fa:d5:4b:5e:f8:d6:1d:75:b2:e2:
ec:67:f8:60:a0:eb:95:56:c2:dd:e3:b5:6a:eb:5e:fa:23:af:
55:86:58:16:89:08:b9:a5:f4:10:d9:ff:b4:2b:4b:31:ca:5d:
bd:04:6e:36:5a:d1:39:a4:33:90:98:0e:6b:ca:27:a3:3b:2e:
8b:34:dd:13:74:e0:ea:f6:5d:b2:31:28:89:7e:0d:98:0a:a4:
5b:60:0d:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 09:44:33 2026 by rpki-client