Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/2/326131343a373538313a393931373a3a2f34382d3438203d3e20323134333434.roa
File: 326131343a373538313a393931373a3a2f34382d3438203d3e20323134333434.roa (raw, json)
Hash identifier: UPzuLnf571isvJV/nrQujg4sA3mChQ2bTzUAA7IQBEs=
Subject key identifier: F7:02:91:1D:DE:10:18:7B:03:B6:D4:94:39:D8:D5:EF:30:1C:B8:32
Certificate issuer: /CN=62D29A0648EE6D89D9E9A6A9AC15B4A692B22536
Certificate serial: 09125858551BF87FD1D5C7A329E9BAB10438EEE6
Authority key identifier: 62:D2:9A:06:48:EE:6D:89:D9:E9:A6:A9:AC:15:B4:A6:92:B2:25:36
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/62D29A0648EE6D89D9E9A6A9AC15B4A692B22536.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/2/326131343a373538313a393931373a3a2f34382d3438203d3e20323134333434.roa
Signing time: Wed 05 Aug 2026 11:59:39 +0000
ROA not before: Wed 05 Aug 2026 11:54:39 +0000
ROA not after: Wed 04 Aug 2027 11:59:39 +0000
asID: 214344
IP address blocks: 2a14:7581:9917::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:12:58:58:55:1b:f8:7f:d1:d5:c7:a3:29:e9:ba:b1:04:38:ee:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62D29A0648EE6D89D9E9A6A9AC15B4A692B22536
Validity
Not Before: Aug 5 11:54:39 2026 GMT
Not After : Aug 4 11:59:39 2027 GMT
Subject: CN=F702911DDE10187B03B6D49439D8D5EF301CB832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:38:0f:fa:42:06:eb:4d:5d:70:80:b2:f9:95:
f3:86:d0:b2:0f:24:55:91:85:b5:b7:57:bb:67:57:
76:ff:55:5b:c0:e5:a1:5b:12:ee:91:d5:9d:8c:99:
bc:68:1a:e4:fa:0a:70:5f:47:67:e4:b1:db:51:cc:
7c:af:07:76:3d:9d:24:93:f6:18:f3:92:71:70:4f:
ac:56:1b:60:4d:e5:42:41:7a:38:dc:47:b7:4d:c7:
9e:c8:15:47:e1:a3:eb:73:b2:64:38:4e:69:59:03:
23:d3:f2:31:4d:38:87:02:91:4b:e4:6f:08:28:49:
00:72:9d:2c:83:a0:cc:95:2f:39:2a:d5:38:0a:15:
15:96:bc:93:95:06:a9:2b:73:d4:1d:7b:f3:23:37:
50:70:36:b0:1e:d5:b2:3d:6e:c6:13:90:08:06:79:
c5:8e:3a:b3:9b:d8:77:e6:36:9d:c7:16:72:af:34:
6f:63:b9:e0:13:38:9a:72:d2:6f:62:50:4a:0c:30:
7b:4e:22:e7:6a:50:c3:80:6f:c9:c3:b7:9d:9e:ff:
9c:2e:82:e9:68:88:8b:cc:45:d5:75:d0:53:19:f8:
9f:24:56:2e:57:da:c8:6f:b2:92:c1:09:e4:cb:b5:
e1:8d:bb:82:21:60:bb:2d:42:2a:2d:b4:3a:32:d7:
80:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:02:91:1D:DE:10:18:7B:03:B6:D4:94:39:D8:D5:EF:30:1C:B8:32
X509v3 Authority Key Identifier:
keyid:62:D2:9A:06:48:EE:6D:89:D9:E9:A6:A9:AC:15:B4:A6:92:B2:25:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/2/62D29A0648EE6D89D9E9A6A9AC15B4A692B22536.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/62D29A0648EE6D89D9E9A6A9AC15B4A692B22536.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b96b6113-85ea-4fc2-aed4-1f865d0ad444/2/326131343a373538313a393931373a3a2f34382d3438203d3e20323134333434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:9917::/48
Signature Algorithm: sha256WithRSAEncryption
60:f3:63:45:ee:f6:bd:74:ab:71:b9:52:98:38:37:f0:ac:80:
0a:59:44:63:c3:31:05:48:a4:21:67:f4:7c:91:a5:a1:74:1f:
6f:87:e8:b8:c6:c5:39:b9:fa:b8:27:aa:11:ac:1e:e1:3f:3a:
92:1f:30:c7:75:c7:6f:ab:9d:66:62:75:a9:e9:29:cf:9c:20:
70:85:bc:a0:52:21:2a:95:d2:61:c2:2b:9d:2c:0d:af:41:39:
24:7e:87:ac:df:ba:c5:4d:c9:bf:3d:a0:1c:7f:cd:aa:ee:92:
31:63:29:a0:ca:55:11:7e:4d:51:84:68:c5:77:76:d5:c0:ae:
b0:da:6b:92:94:46:68:59:79:67:1a:5f:38:d0:87:01:1c:23:
4b:17:b1:d2:27:cb:ed:2d:67:0e:90:53:7a:5a:08:79:50:f9:
e9:16:41:6e:45:8a:54:9d:59:c8:ef:5b:ba:c5:5a:90:ef:dd:
50:51:66:82:23:0c:df:2a:4f:7f:41:b4:fc:f9:9c:61:8f:83:
49:45:1d:de:bc:e4:ad:c6:93:10:2a:bc:3e:dd:ae:b0:d2:cf:
6e:a1:bb:6b:43:16:10:79:d3:09:34:40:b4:c7:f8:c6:b0:c6:
64:1e:a0:aa:18:ea:34:a5:2f:5b:83:d6:20:30:36:93:41:83:
47:30:98:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 07:51:41 2026 by rpki-client