Route Origin Authorization
$ rpki-client -vvf repo.rpki.space/repo/Pfcloud/2/326131343a383030303a3a2f32392d3239203d3e203531333936.roa
File: 326131343a383030303a3a2f32392d3239203d3e203531333936.roa (raw, json)
Hash identifier: 954ovZyNTCdFRHquG/fM/KMahRQBOehVwNmvvADjdxQ=
Subject key identifier: 60:E8:9A:6E:E6:B7:44:02:08:7D:44:55:AC:5C:6C:18:8F:B7:EB:93
Certificate issuer: /CN=cae8150e9595dbe9a74a289bfd0e8d2b1ce6b38d
Certificate serial: 70B8870D807662259D4DF3B5A4E080714455DC21
Authority key identifier: CA:E8:15:0E:95:95:DB:E9:A7:4A:28:9B:FD:0E:8D:2B:1C:E6:B3:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yugVDpWV2-mnSiib_Q6NKxzms40.cer
Subject info access: rsync://repo.rpki.space/repo/Pfcloud/2/326131343a383030303a3a2f32392d3239203d3e203531333936.roa
Signing time: Sat 21 Mar 2026 12:35:33 +0000
ROA not before: Sat 21 Mar 2026 12:30:33 +0000
ROA not after: Sat 20 Mar 2027 12:35:33 +0000
asID: 51396
IP address blocks: 2a14:8000::/29 maxlen: 29
Validation: OK
Signature path: rsync://repo.rpki.space/repo/Pfcloud/2/CAE8150E9595DBE9A74A289BFD0E8D2B1CE6B38D.crl
rsync://repo.rpki.space/repo/Pfcloud/2/CAE8150E9595DBE9A74A289BFD0E8D2B1CE6B38D.mft
rsync://rpki.ripe.net/repository/DEFAULT/yugVDpWV2-mnSiib_Q6NKxzms40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 07:25:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:b8:87:0d:80:76:62:25:9d:4d:f3:b5:a4:e0:80:71:44:55:dc:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cae8150e9595dbe9a74a289bfd0e8d2b1ce6b38d
Validity
Not Before: Mar 21 12:30:33 2026 GMT
Not After : Mar 20 12:35:33 2027 GMT
Subject: CN=60E89A6EE6B74402087D4455AC5C6C188FB7EB93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3b:6a:26:5b:d7:e0:df:11:2a:10:e6:76:2c:
2d:be:8c:41:81:03:cd:bf:3f:62:81:b6:12:49:ea:
0c:26:fc:f4:d8:09:ae:8c:d0:15:9c:31:32:7c:5d:
eb:84:c6:3d:e7:33:b2:74:c1:97:7f:5f:e2:18:37:
9b:70:db:c6:73:4e:b5:1b:40:0c:5e:33:c9:54:90:
3a:a9:bb:03:27:27:5e:55:79:25:44:90:cf:b0:de:
79:22:4f:60:c9:36:a7:0c:b3:9e:23:db:ab:d5:ad:
a2:ea:c0:db:e6:22:8b:d1:08:ec:ba:4e:27:b9:8e:
a2:3c:04:ab:0f:47:b4:73:fc:84:c1:49:b1:c5:d5:
5e:16:f2:16:37:68:28:b0:02:07:d4:1c:fa:07:b0:
fb:e3:04:ff:02:40:4b:fd:cc:da:d0:de:ae:50:5a:
ea:32:36:27:6c:65:b8:9e:c4:b7:67:a7:d8:34:92:
10:ab:70:83:f4:48:f3:28:f5:03:84:ab:89:43:b6:
1c:94:4e:8d:d8:f0:67:ac:99:12:0b:f2:df:4a:e6:
56:f3:e6:5e:61:64:e8:5d:65:ca:ad:68:22:0b:cc:
54:6d:8a:02:e6:07:5a:63:96:b5:ab:83:0b:32:55:
2b:d8:d9:50:17:88:17:ec:3e:9d:41:b6:fd:d8:08:
05:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:E8:9A:6E:E6:B7:44:02:08:7D:44:55:AC:5C:6C:18:8F:B7:EB:93
X509v3 Authority Key Identifier:
keyid:CA:E8:15:0E:95:95:DB:E9:A7:4A:28:9B:FD:0E:8D:2B:1C:E6:B3:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.rpki.space/repo/Pfcloud/2/CAE8150E9595DBE9A74A289BFD0E8D2B1CE6B38D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yugVDpWV2-mnSiib_Q6NKxzms40.cer
Subject Information Access:
Signed Object - URI:rsync://repo.rpki.space/repo/Pfcloud/2/326131343a383030303a3a2f32392d3239203d3e203531333936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:8000::/29
Signature Algorithm: sha256WithRSAEncryption
0b:98:b0:b9:02:01:fa:5f:c0:7f:5b:ab:d7:bd:6c:72:ae:bd:
27:e2:1f:3e:40:44:4f:7e:25:71:bb:11:15:d2:48:bc:6c:c9:
a4:d3:39:54:49:9b:04:4b:22:88:17:55:3a:99:23:56:0f:1f:
81:0c:f8:07:34:f6:c0:7b:70:43:0a:3c:c7:31:70:96:a4:11:
0f:ba:59:d8:c4:25:b9:61:f0:ad:28:c8:6f:15:1e:4f:3a:5b:
1a:92:59:3e:dc:e6:a6:f1:40:b8:d5:47:ac:5d:02:21:66:53:
e1:1c:32:18:1c:45:42:d9:6e:1c:a2:2f:7f:90:dc:72:15:ab:
49:2d:52:a6:03:ef:a7:73:f2:97:99:af:59:55:14:d3:52:e7:
e6:64:6c:9b:da:87:cc:0f:d4:12:bd:bd:08:89:79:6c:04:4d:
35:b0:1d:60:f3:45:95:9f:96:38:38:ba:e2:4c:ba:fb:34:cf:
5b:48:c6:f5:7a:18:28:2d:4a:f0:a7:08:da:03:a6:c5:62:84:
d5:e6:99:e9:95:5d:14:3c:55:3d:23:01:37:ae:43:f5:17:fc:
16:e7:58:dd:9e:15:be:09:7d:1f:55:59:7a:31:99:0d:74:df:
35:0f:cb:0e:93:de:91:11:d2:e8:e4:82:80:e3:19:5c:a9:cd:
83:ca:d6:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:55:12 2026 by rpki-client