Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a33633a3a2f34382d3438203d3e203336323336.roa
File: 326130303a646438303a33633a3a2f34382d3438203d3e203336323336.roa (raw, json)
Hash identifier: ZW6bNLlzyJTBSK1M5oDQ9cuDxRga3raMSoijlqYfQ7Q=
Subject key identifier: 88:2F:DE:35:36:CF:83:74:80:B6:2B:5E:85:18:5D:3C:B0:A2:4C:C1
Certificate issuer: /CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Certificate serial: 5DC17799CBB624E419BC3C7B15B672F1F42BB155
Authority key identifier: EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a33633a3a2f34382d3438203d3e203336323336.roa
Signing time: Mon 06 Jul 2026 20:29:07 +0000
ROA not before: Mon 06 Jul 2026 20:24:07 +0000
ROA not after: Mon 05 Jul 2027 20:29:07 +0000
asID: 36236
IP address blocks: 2a00:dd80:3c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.mft
rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:58:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:c1:77:99:cb:b6:24:e4:19:bc:3c:7b:15:b6:72:f1:f4:2b:b1:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Validity
Not Before: Jul 6 20:24:07 2026 GMT
Not After : Jul 5 20:29:07 2027 GMT
Subject: CN=882FDE3536CF837480B62B5E85185D3CB0A24CC1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:70:bd:9b:a4:86:03:91:c4:e3:a9:ce:00:03:
75:85:64:4b:13:58:69:70:e3:16:fe:da:c4:a1:d1:
a4:dd:17:36:74:7e:b8:da:01:2c:88:51:8a:46:53:
ed:cf:ac:21:ba:41:04:33:35:1b:ed:d3:82:4e:37:
c4:07:ec:73:81:7f:da:cc:1e:ad:d9:56:b3:d3:a8:
62:a9:6b:d9:d9:82:c0:0b:af:9f:f6:93:66:30:5f:
f4:f8:d1:47:38:da:d6:a9:17:f3:7a:83:23:33:9c:
6b:2f:d1:68:cd:dc:27:ab:68:dd:00:65:6a:f6:5e:
7f:64:cd:de:e0:1b:19:be:42:91:b0:7d:4d:7e:f6:
ab:b3:b1:5d:f1:f1:1f:c2:5c:65:80:b7:eb:3b:a4:
c6:c8:33:8b:94:47:4c:b7:59:99:dd:4a:b0:22:1f:
36:10:bf:73:cf:b5:9e:55:ae:aa:00:11:b2:e5:c6:
ce:c3:dd:8e:7a:12:26:88:31:0e:94:ca:94:e9:92:
06:1c:8f:ea:74:8a:30:cd:c6:32:3a:d3:35:b6:fe:
e9:e6:fd:ba:6f:bb:35:58:3d:b4:40:75:a6:5e:39:
79:30:17:70:b0:e5:ed:31:79:87:0f:d7:cf:03:ca:
0e:a6:8e:c1:2b:88:da:b5:fe:2f:b0:6e:11:76:cf:
64:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:2F:DE:35:36:CF:83:74:80:B6:2B:5E:85:18:5D:3C:B0:A2:4C:C1
X509v3 Authority Key Identifier:
keyid:EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a33633a3a2f34382d3438203d3e203336323336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:dd80:3c::/48
Signature Algorithm: sha256WithRSAEncryption
36:95:04:bf:0d:83:00:31:98:6f:46:3b:6d:73:86:69:60:9f:
13:e0:51:f5:e8:97:b6:c7:9c:ba:3a:f5:e4:3b:12:0b:f2:49:
7a:fa:75:bb:ef:4d:a8:7b:45:7d:50:09:a4:ae:14:ff:f0:29:
29:d5:26:ce:53:4b:9e:02:bc:57:7d:70:38:bd:f1:b6:20:e1:
92:84:6a:04:74:40:79:82:eb:5d:a0:5d:a9:bd:a2:69:be:f9:
9f:9b:16:97:96:95:78:4c:6b:4a:15:da:17:bc:01:5c:5f:79:
31:ca:85:80:2f:65:fb:d4:2d:ef:1e:03:72:65:35:ea:59:17:
bc:eb:6f:54:b2:14:55:48:69:0c:99:e4:9c:6a:fe:ed:b4:06:
61:d6:43:1b:b3:39:d0:b9:61:43:4d:58:aa:37:03:b5:8b:01:
bd:67:aa:7f:cf:ab:4c:09:17:a7:30:42:a0:9e:ee:ee:75:6d:
58:71:a0:9a:12:1d:1b:54:81:aa:9f:13:9d:09:ef:99:17:fd:
de:90:f8:36:e1:91:2f:c9:24:0f:85:b7:9b:bf:bc:38:98:14:
36:82:25:8f:9a:17:99:d6:db:fc:99:6a:dd:2e:9f:98:a2:ad:
15:36:29:3f:8e:f8:31:74:15:55:e5:d6:93:ec:6d:50:c7:e5:
a0:80:98:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:45:21 2026 by rpki-client