Route Origin Authorization
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a33663a36313a3a2f36342d3634203d3e20333939313638.roa
File: 326130303a646438303a33663a36313a3a2f36342d3634203d3e20333939313638.roa (raw, json)
Hash identifier: 3KhxJG1nzFTbkFG52B9RhlZo+ayzaET0O7uA/zIFovY=
Subject key identifier: C3:F2:A4:CC:B5:93:E0:A3:25:07:2E:10:EF:5E:F9:25:2F:31:35:A2
Certificate issuer: /CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Certificate serial: 199835CD52B101F2C525C484DCF21F50D4CDBD1D
Authority key identifier: EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a33663a36313a3a2f36342d3634203d3e20333939313638.roa
Signing time: Sat 10 Oct 2026 13:29:18 +0000
ROA not before: Sat 10 Oct 2026 13:24:18 +0000
ROA not after: Sat 09 Oct 2027 13:29:18 +0000
asID: 399168
IP address blocks: 2a00:dd80:3f:61::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.mft
rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 06:51:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:98:35:cd:52:b1:01:f2:c5:25:c4:84:dc:f2:1f:50:d4:cd:bd:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Validity
Not Before: Oct 10 13:24:18 2026 GMT
Not After : Oct 9 13:29:18 2027 GMT
Subject: CN=C3F2A4CCB593E0A325072E10EF5EF9252F3135A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4f:9f:a4:fc:2e:43:9c:c1:c0:ef:e8:a2:87:
ec:13:14:6f:01:73:92:cf:9e:74:58:13:e7:5a:a4:
37:3d:6d:17:b2:28:c3:77:8a:e3:7c:37:91:e0:63:
6c:50:1a:f1:39:2e:0f:df:65:ee:1a:a7:f6:58:4e:
bc:98:97:71:4a:85:4a:99:70:b8:a2:23:3a:55:d2:
a2:06:98:d2:4c:5d:5c:49:49:e6:93:68:10:82:5c:
16:3d:85:0b:d3:60:51:29:32:54:c1:41:12:5e:9f:
03:42:a7:94:ec:48:b4:2e:79:df:c5:f0:aa:fd:19:
62:a4:04:6f:e3:47:4f:94:fa:e9:94:15:7e:d1:73:
dd:84:df:1e:90:e1:3c:f7:7f:e9:5e:95:e6:48:6f:
33:f0:0e:16:d1:4e:cc:1a:af:b5:12:a8:60:6e:f8:
29:54:b2:f0:f9:a8:ea:b3:2d:0f:fb:fb:09:75:f8:
70:e1:cb:30:11:51:da:4f:82:db:9a:c6:cf:1b:3d:
5d:da:b2:de:b1:90:da:5d:98:30:f4:49:42:ab:ba:
af:c9:84:87:16:ad:a1:b0:ed:04:97:df:44:7a:ca:
e2:86:35:63:04:3c:5c:c1:72:6e:77:08:69:97:28:
23:19:7a:81:a5:0b:d5:cd:71:ff:85:98:59:20:91:
33:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:F2:A4:CC:B5:93:E0:A3:25:07:2E:10:EF:5E:F9:25:2F:31:35:A2
X509v3 Authority Key Identifier:
keyid:EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a33663a36313a3a2f36342d3634203d3e20333939313638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:dd80:3f:61::/64
Signature Algorithm: sha256WithRSAEncryption
05:82:58:00:4d:98:ef:7f:82:4a:c5:68:a1:36:01:e3:8e:1a:
50:d5:42:0f:b2:ab:d2:0f:2b:5c:b1:b6:7a:17:11:46:ab:69:
b1:87:61:eb:12:bd:b5:16:4d:3f:19:67:ff:32:94:62:f0:94:
a1:77:e9:88:f9:15:04:49:8c:18:67:16:96:1b:20:89:bb:1e:
ee:f5:69:0e:81:9d:a8:b5:4e:f1:59:21:38:20:5e:eb:93:6b:
64:73:8a:1c:52:c8:4c:e2:65:ab:93:45:1a:7f:a8:57:5a:1b:
c0:de:72:b2:dc:e7:61:e7:48:aa:77:62:e6:98:f1:24:c0:17:
af:4f:69:b3:d0:41:d0:ea:fe:1d:fd:d6:b0:40:cf:81:ad:0c:
f5:32:0c:37:2b:b9:74:f9:f9:55:f4:61:19:9d:80:99:14:76:
fa:3f:8c:16:29:8f:61:6d:a6:4b:dc:80:c0:ab:e8:7b:b0:13:
45:91:67:05:07:aa:3e:14:dd:63:50:e0:46:5f:77:20:1f:eb:
cd:f7:1e:c2:a4:8d:9e:49:03:48:3b:c7:2f:b5:ce:ac:1f:65:
1c:41:66:a4:a2:cb:fd:ca:c4:eb:ae:bd:78:cc:de:75:47:cf:
f5:ff:4f:dc:0b:36:39:df:4b:49:b4:01:7c:6e:4f:7e:12:32:
dc:2b:fe:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 18:26:51 2026 by rpki-client