Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a33613a3a2f34382d3438203d3e203336323336.roa
File: 326130303a646438303a33613a3a2f34382d3438203d3e203336323336.roa (raw, json)
Hash identifier: +7RLn7PaXXhMCnXuU0ecIg8YkD/eIVyWDNcjFLofNZo=
Subject key identifier: 70:7E:C0:55:BE:C7:8B:3E:5C:A7:EB:82:27:25:BA:34:22:5A:BF:07
Certificate issuer: /CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Certificate serial: 60515995518F62466E684193BC8AFC186E491708
Authority key identifier: EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a33613a3a2f34382d3438203d3e203336323336.roa
Signing time: Mon 06 Jul 2026 20:29:06 +0000
ROA not before: Mon 06 Jul 2026 20:24:06 +0000
ROA not after: Mon 05 Jul 2027 20:29:06 +0000
asID: 36236
IP address blocks: 2a00:dd80:3a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.mft
rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:27:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:51:59:95:51:8f:62:46:6e:68:41:93:bc:8a:fc:18:6e:49:17:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Validity
Not Before: Jul 6 20:24:06 2026 GMT
Not After : Jul 5 20:29:06 2027 GMT
Subject: CN=707EC055BEC78B3E5CA7EB822725BA34225ABF07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ea:dd:12:b1:b7:3f:35:ee:cd:93:5a:c8:35:
eb:70:ca:22:4f:35:41:59:3f:df:04:a7:5f:87:6e:
51:e6:ac:07:a6:aa:1d:fb:dd:38:59:0d:07:a2:a3:
35:a1:3d:14:4a:2c:c4:70:b2:62:d2:77:32:f2:04:
c7:d0:97:2b:42:bf:fd:7a:e6:8e:ee:ac:21:2c:4e:
61:bf:9a:c4:57:ba:3b:1a:32:9c:51:c6:21:69:5c:
6c:e4:81:52:61:81:e5:e2:40:16:76:0e:88:fc:3b:
ac:b2:82:43:a0:ca:49:f7:e4:fd:1a:12:ae:3a:d8:
18:71:cd:2e:10:45:85:9b:d8:77:57:05:18:eb:38:
95:f7:14:a2:6f:f8:96:e5:85:a5:c9:cd:f7:43:d4:
5c:21:52:a8:b1:47:84:c6:6e:a0:bc:86:63:93:b1:
c7:a2:54:18:eb:0d:49:6c:aa:1e:bb:65:a7:92:6c:
23:27:2c:54:e8:52:6f:5e:e6:6b:c9:ea:b6:6d:8b:
8a:3f:31:24:54:37:93:c3:41:6c:8b:42:b3:e5:18:
79:03:09:61:8a:f4:c9:ff:54:e3:3b:ea:d6:eb:1f:
51:0a:7f:a0:2a:a1:b2:81:58:09:f5:7d:ab:03:d8:
9c:56:d3:af:51:d9:9f:01:6c:7f:09:95:71:e5:25:
18:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:7E:C0:55:BE:C7:8B:3E:5C:A7:EB:82:27:25:BA:34:22:5A:BF:07
X509v3 Authority Key Identifier:
keyid:EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a33613a3a2f34382d3438203d3e203336323336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:dd80:3a::/48
Signature Algorithm: sha256WithRSAEncryption
3b:52:f7:c7:86:ed:a0:38:86:08:da:f8:79:f8:2a:11:eb:ac:
9b:9b:23:87:9d:77:2a:f2:84:e9:74:d6:bd:a3:db:5d:c0:ae:
85:b6:2e:75:b2:c5:00:25:60:ab:ad:85:57:7c:c6:8e:8f:74:
19:25:c4:4c:22:7b:ac:3d:8d:55:87:b5:bd:0a:62:06:71:84:
57:89:33:34:80:5b:af:ec:f6:8f:2f:db:b0:ae:89:88:9c:8b:
ec:0b:48:78:32:ef:7c:cb:ed:98:63:30:f2:92:02:25:42:84:
f8:66:82:c4:df:cf:3d:a3:93:e5:e2:fa:1f:fa:ea:f6:47:80:
f4:83:c7:18:87:1e:17:21:b1:21:c9:df:52:0e:33:d7:35:07:
7f:16:ce:75:c6:65:08:dd:4b:c3:45:3e:c3:7c:79:a8:1e:0b:
9a:5c:69:7c:3d:fe:ed:df:86:88:bb:26:d1:19:86:f4:32:c3:
57:22:33:eb:df:0f:53:78:c8:a3:26:ea:8b:c1:45:79:5b:1e:
0b:08:c9:d3:6f:44:92:e3:54:b8:78:c1:98:65:ee:5a:02:09:
52:1d:e3:13:b7:02:5c:ef:35:c1:ea:70:fc:fa:a8:ec:95:91:
30:ff:c8:49:d1:43:b1:42:08:00:2e:c3:e5:db:b9:eb:95:60:
99:13:93:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:03:05 2026 by rpki-client