Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a34313a3a2f34382d3438203d3e203336323336.roa
File: 326130303a646438303a34313a3a2f34382d3438203d3e203336323336.roa (raw, json)
Hash identifier: 49izN8ak07R3DIoPdYg/QvDhG8qU9NOLxQ4QXlsXCz4=
Subject key identifier: 6E:FC:C6:EC:DA:B9:A8:EB:C7:97:D6:1C:E8:36:1F:86:CA:D2:4F:4B
Certificate issuer: /CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Certificate serial: 20F0BC167184FE7D58877CD6783AFF6BA6D49D44
Authority key identifier: EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a34313a3a2f34382d3438203d3e203336323336.roa
Signing time: Mon 06 Jul 2026 20:29:06 +0000
ROA not before: Mon 06 Jul 2026 20:24:06 +0000
ROA not after: Mon 05 Jul 2027 20:29:06 +0000
asID: 36236
IP address blocks: 2a00:dd80:41::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.mft
rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:f0:bc:16:71:84:fe:7d:58:87:7c:d6:78:3a:ff:6b:a6:d4:9d:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Validity
Not Before: Jul 6 20:24:06 2026 GMT
Not After : Jul 5 20:29:06 2027 GMT
Subject: CN=6EFCC6ECDAB9A8EBC797D61CE8361F86CAD24F4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6e:d8:ed:5c:93:95:c4:cd:56:93:d2:a5:a8:
02:fa:bf:f1:96:3a:76:4b:a0:4b:b0:04:97:d2:7f:
1e:3c:a3:db:10:1f:21:cb:60:58:7e:61:1b:d0:44:
50:55:3e:d0:f2:85:bd:94:4b:78:61:36:b9:1a:dc:
54:ac:21:2f:19:1a:79:27:10:68:7c:1b:56:f2:63:
d4:38:43:8c:5c:b3:0c:e1:37:5d:9b:80:6c:2a:f6:
c1:85:44:2f:9a:71:0b:d9:ec:7f:ae:19:b4:10:a5:
ff:6e:44:8d:20:de:bb:2f:59:cd:4b:28:d9:53:52:
b4:cd:9b:6e:d2:df:6f:4d:27:74:26:1b:77:14:ab:
aa:b3:df:f4:7b:44:4d:cb:51:48:cc:6b:d7:00:57:
38:63:c5:33:4a:8e:cc:31:95:85:8c:dd:cc:0c:06:
1e:95:bc:37:b8:73:39:fd:1e:d6:48:f7:7b:cd:8f:
a0:24:eb:52:05:fb:fa:db:3c:ac:32:ce:a0:e3:af:
4a:3f:17:4e:4f:94:c6:7d:9b:0d:c8:c7:c4:b3:95:
77:44:83:87:ab:50:9f:67:1c:8b:41:89:cf:e3:02:
3f:2f:94:55:04:21:92:ea:27:3f:72:47:79:b5:50:
4e:9d:ec:5d:be:e4:04:91:7b:4d:f2:32:49:35:be:
a2:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:FC:C6:EC:DA:B9:A8:EB:C7:97:D6:1C:E8:36:1F:86:CA:D2:4F:4B
X509v3 Authority Key Identifier:
keyid:EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a34313a3a2f34382d3438203d3e203336323336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:dd80:41::/48
Signature Algorithm: sha256WithRSAEncryption
0a:95:9d:dc:0f:8e:ca:96:ac:8c:72:9e:02:8a:77:aa:04:a3:
c1:c6:03:5e:75:f1:94:c3:62:3d:bf:3e:42:98:bd:07:18:d1:
50:ca:5b:fd:ba:7c:60:40:25:3f:ae:b1:5c:e4:2a:3e:4f:3a:
bd:cc:79:a3:48:bb:5b:9a:9d:f8:59:55:19:a4:99:26:37:5a:
1d:c8:73:5e:fd:dd:3b:67:a8:fd:80:96:97:43:1d:e1:55:ef:
bd:98:cf:83:77:ea:1b:89:60:af:c0:78:60:b6:c6:c5:b0:62:
07:57:d2:c3:4b:76:a3:db:ae:de:ef:93:ab:42:0f:e3:d2:2d:
78:cc:bf:b8:fa:a7:1b:a6:e3:d7:85:55:a6:53:7f:30:d5:f4:
f3:11:77:7e:2d:c6:1f:43:8f:68:68:98:c3:68:87:c0:ba:b6:
83:49:c3:4c:4a:1e:bd:f8:c9:3f:f1:e2:0a:0c:38:7a:fa:fe:
83:47:56:d3:f8:cc:94:67:bf:1b:11:87:a2:ee:ca:a4:43:39:
4e:54:a3:6e:1d:7c:3b:64:6e:a8:c3:b7:6c:45:f6:c7:fc:32:
07:02:0b:23:9a:0f:22:79:80:27:66:8b:76:bc:76:36:c3:8d:
f1:ed:69:e8:42:2f:49:16:8a:f1:8a:d4:68:4a:a0:cc:0f:b1:
05:d5:ea:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:02:42 2026 by rpki-client