Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a33623a3a2f34382d3438203d3e203336323336.roa
File: 326130303a646438303a33623a3a2f34382d3438203d3e203336323336.roa (raw, json)
Hash identifier: QCUbgFRW1sXbqMAGnulRc0/O1j1YAO3vdc+lGTAsRJg=
Subject key identifier: D5:31:B3:BE:C6:33:0F:42:03:2C:7E:88:E0:86:99:13:38:FC:39:13
Certificate issuer: /CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Certificate serial: 3F38206B271020AF854FAB2A3B0E928D5DD49129
Authority key identifier: EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a33623a3a2f34382d3438203d3e203336323336.roa
Signing time: Mon 06 Jul 2026 20:29:06 +0000
ROA not before: Mon 06 Jul 2026 20:24:06 +0000
ROA not after: Mon 05 Jul 2027 20:29:06 +0000
asID: 36236
IP address blocks: 2a00:dd80:3b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.mft
rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:27:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:38:20:6b:27:10:20:af:85:4f:ab:2a:3b:0e:92:8d:5d:d4:91:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Validity
Not Before: Jul 6 20:24:06 2026 GMT
Not After : Jul 5 20:29:06 2027 GMT
Subject: CN=D531B3BEC6330F42032C7E88E086991338FC3913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:43:1e:38:cc:0d:c3:66:60:37:dd:04:c4:6d:
c1:90:0e:89:11:23:ba:59:ad:87:62:13:53:55:7c:
20:d9:13:e5:24:08:71:61:e2:9e:9b:07:1c:11:f2:
75:dd:37:a2:b1:48:b3:a8:1e:6b:7b:05:4e:5b:19:
47:f2:31:c8:5e:a7:02:e2:70:77:2f:d8:4a:4d:75:
e1:74:01:66:43:87:3f:f7:dc:cb:b4:b5:70:0d:a8:
59:dd:f4:97:e4:f7:d5:25:9a:12:1a:50:a4:8c:6c:
9a:cf:75:c4:fd:ca:ba:0a:89:59:d2:5f:f2:69:a6:
b3:b9:a2:b4:53:91:84:c2:ef:d8:c8:eb:22:af:81:
c0:78:a6:eb:cb:c2:06:4c:bf:e2:d1:c2:23:6f:3a:
8e:f2:ef:22:e7:aa:f0:30:32:3e:02:82:4e:27:23:
a2:57:f9:9b:1a:c7:e7:11:7b:d1:b7:ed:c6:e5:f3:
eb:49:c7:ba:60:6e:48:df:74:57:b5:e2:5f:83:65:
de:c2:61:0b:da:67:13:fa:50:14:88:4a:c9:df:e4:
36:6d:56:ad:3e:21:9d:99:4a:a9:4f:a1:f2:0a:01:
12:ec:ae:83:86:0b:4b:90:bd:29:11:60:86:e2:f9:
2c:fe:4e:c6:6a:df:70:46:fd:91:62:da:8b:56:41:
61:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:31:B3:BE:C6:33:0F:42:03:2C:7E:88:E0:86:99:13:38:FC:39:13
X509v3 Authority Key Identifier:
keyid:EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a33623a3a2f34382d3438203d3e203336323336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:dd80:3b::/48
Signature Algorithm: sha256WithRSAEncryption
08:d9:b1:9b:cd:8a:6b:ff:e4:54:27:1e:5e:c8:d9:73:8d:26:
13:8b:b1:49:d2:e7:39:a3:33:68:4a:38:38:03:a9:de:e6:84:
dc:8c:5b:a4:f1:4a:35:8b:8c:7c:b4:07:e4:7c:ea:9d:7e:a2:
f7:46:ea:33:bf:df:0e:6f:9e:80:ef:85:ca:65:e1:2a:8a:f7:
db:c5:8a:5e:56:88:8f:cb:1a:1b:c9:c6:8d:de:fa:54:6b:c1:
fc:af:02:23:ec:9a:8b:5a:71:97:7b:a1:ba:24:b4:a1:c4:05:
a3:23:87:e4:27:24:7c:a2:68:40:ae:fd:39:b1:b6:71:31:d9:
88:c4:8f:a8:b0:9f:58:6c:43:cd:dd:87:e3:75:f8:d9:8b:d6:
87:8d:48:91:b2:57:16:63:00:79:45:b7:4e:0e:7c:15:bb:a6:
61:f7:2f:85:f8:ce:58:96:b6:85:14:c4:82:37:a0:84:eb:35:
77:72:4a:30:93:75:6e:6b:37:f0:1c:a7:80:dc:af:3d:ee:5e:
79:25:61:05:3e:f3:9b:06:47:cd:bc:ab:9a:0d:76:f4:25:97:
ea:4b:f3:ec:21:c5:f1:c6:c5:ac:20:b2:be:b2:f5:56:19:d9:
7e:33:48:c6:e4:be:f1:8e:23:b9:d3:31:13:52:f2:6b:bb:71:
11:04:5a:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:04:45 2026 by rpki-client