Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a31343a3a2f34382d3438203d3e203336323336.roa
File: 326130303a646438303a31343a3a2f34382d3438203d3e203336323336.roa (raw, json)
Hash identifier: 9JJQaGzmHBZLOLp+8UV8lqIQXwv9izy6UCcYXJ9jbBk=
Subject key identifier: DD:B6:A6:44:B7:B3:BA:0D:D3:34:B2:D5:C3:FB:44:4F:F7:70:9E:48
Certificate issuer: /CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Certificate serial: 4FB0DD3578ADF7A603EEE71DA371A18291D34A81
Authority key identifier: EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a31343a3a2f34382d3438203d3e203336323336.roa
Signing time: Mon 06 Jul 2026 20:29:07 +0000
ROA not before: Mon 06 Jul 2026 20:24:07 +0000
ROA not after: Mon 05 Jul 2027 20:29:07 +0000
asID: 36236
IP address blocks: 2a00:dd80:14::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.mft
rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:27:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:b0:dd:35:78:ad:f7:a6:03:ee:e7:1d:a3:71:a1:82:91:d3:4a:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Validity
Not Before: Jul 6 20:24:07 2026 GMT
Not After : Jul 5 20:29:07 2027 GMT
Subject: CN=DDB6A644B7B3BA0DD334B2D5C3FB444FF7709E48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:53:62:01:53:3d:37:04:52:a0:51:01:f0:f1:
c5:2a:11:02:1e:b0:2d:9d:4c:77:90:82:63:b2:00:
ac:4c:69:7f:ac:40:bf:e2:55:87:72:9c:22:10:37:
9d:ef:69:46:cc:ab:80:75:6d:87:14:ab:f1:17:49:
74:b8:57:99:26:d6:9f:08:7c:ff:9b:1b:34:13:b7:
69:e4:79:71:3c:cc:33:60:dc:9d:93:bf:85:02:e6:
57:07:98:84:9c:e0:c7:17:17:67:06:ad:83:3d:e2:
5b:48:d8:61:8a:ba:98:ae:f7:12:38:17:0c:27:eb:
1f:9c:98:af:8b:a0:81:42:64:11:da:9a:4e:1a:14:
5b:25:2a:30:d8:0e:e4:33:57:29:51:5a:82:31:6f:
be:25:c9:83:34:1a:1a:dc:b2:2a:ee:fa:3e:da:93:
c8:87:77:35:73:da:03:73:eb:37:33:b9:79:cf:a5:
c5:ca:82:6b:ab:ed:4b:b8:da:ae:a1:43:34:ab:43:
35:67:6d:de:30:f7:4b:25:6e:cb:c8:c0:ed:82:a0:
6d:c7:ae:60:3d:96:34:9a:96:68:b4:1e:5d:8e:01:
82:e1:c9:38:6a:9e:69:3d:1c:ec:a9:06:26:17:b7:
cf:6f:cc:a1:80:3c:72:1b:57:68:23:ee:11:d9:17:
4a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:B6:A6:44:B7:B3:BA:0D:D3:34:B2:D5:C3:FB:44:4F:F7:70:9E:48
X509v3 Authority Key Identifier:
keyid:EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a31343a3a2f34382d3438203d3e203336323336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:dd80:14::/48
Signature Algorithm: sha256WithRSAEncryption
3b:d1:38:00:e3:66:db:9a:89:e5:15:e1:4d:2a:2f:ba:0d:39:
3c:c0:13:86:16:02:b8:a2:59:32:44:0b:ab:d2:d0:24:51:9b:
b7:e8:44:59:c9:34:a2:ba:5a:db:e2:44:51:c0:21:8a:84:73:
a8:ee:2d:70:26:9e:47:25:fe:3b:7c:a0:25:2b:51:8d:15:0f:
26:95:00:99:75:28:8e:cd:0a:fe:fa:b0:c9:08:7c:85:6b:bf:
7e:ac:92:15:a2:d4:f7:20:ae:90:1d:9a:ef:08:29:09:6a:b4:
b6:c3:ac:b0:5f:78:71:b8:ab:4c:82:46:ff:cd:39:02:32:b2:
66:c4:4e:9b:3e:48:9e:10:15:15:79:16:45:ba:16:7b:77:4d:
b0:be:3b:9a:93:71:84:cf:9c:8e:1b:b6:d0:8d:bc:ea:33:65:
a9:0a:80:2a:f3:59:57:da:8e:df:3a:71:36:82:8d:13:7f:50:
5b:f0:f7:52:65:75:01:03:76:ff:df:b5:41:f0:df:2c:15:54:
9e:cb:52:02:00:83:ef:63:86:7b:74:3b:a0:c2:93:e8:8b:c1:
42:ce:e1:02:d5:dd:1a:07:71:15:65:d7:2c:68:14:73:b1:3f:
1c:00:78:9a:02:5e:ec:cd:3f:ad:45:00:b0:68:84:4c:26:2e:
1e:f3:e6:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:59:02 2026 by rpki-client