Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a393a3a2f34382d3438203d3e203336323336.roa
File: 326130303a646438303a393a3a2f34382d3438203d3e203336323336.roa (raw, json)
Hash identifier: bgfjaliMk8G+l9bvzcCE8gUBtz2T8V31yNbtBPdXOXE=
Subject key identifier: 09:7E:FC:87:2F:F7:8D:66:E6:BD:C2:FB:11:33:EA:70:C1:89:CC:FE
Certificate issuer: /CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Certificate serial: 083B49728CD1E31BD2A6B96449CBD3A760537334
Authority key identifier: EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a393a3a2f34382d3438203d3e203336323336.roa
Signing time: Mon 06 Jul 2026 20:29:06 +0000
ROA not before: Mon 06 Jul 2026 20:24:06 +0000
ROA not after: Mon 05 Jul 2027 20:29:06 +0000
asID: 36236
IP address blocks: 2a00:dd80:9::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.mft
rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:27:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:3b:49:72:8c:d1:e3:1b:d2:a6:b9:64:49:cb:d3:a7:60:53:73:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Validity
Not Before: Jul 6 20:24:06 2026 GMT
Not After : Jul 5 20:29:06 2027 GMT
Subject: CN=097EFC872FF78D66E6BDC2FB1133EA70C189CCFE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7f:28:3a:b8:d8:2d:8d:f0:02:60:2b:9e:49:
e4:65:19:53:11:05:83:e7:0f:36:51:b6:64:51:d9:
25:2d:c7:9d:bc:fa:5e:7c:5d:64:a8:33:f7:66:ec:
74:71:2f:a0:85:c6:e2:94:bc:44:58:50:69:65:dd:
6a:c3:d7:6f:1d:7e:84:4e:1d:a6:7c:0b:6e:63:42:
8b:ea:56:d6:c2:e8:51:96:14:4a:a9:db:28:f2:6b:
96:1b:60:ff:1d:89:40:e6:a3:3a:18:de:a3:4e:95:
37:0b:3e:41:a1:03:ea:1c:9f:23:30:99:23:4c:52:
91:3d:0d:0b:c0:74:1f:83:75:4b:15:6b:1e:51:81:
78:63:2c:88:42:a2:dc:2f:30:a4:df:d7:f8:ce:93:
b9:eb:5d:58:8c:53:bd:c7:75:37:b6:6f:ec:29:c3:
c6:78:fb:22:50:91:7b:f2:b0:76:89:55:ef:6d:5c:
4b:85:3c:1e:f8:27:09:14:a9:6a:ff:d4:b5:14:eb:
98:20:69:b4:4d:d9:69:2d:5d:d7:4d:d3:ca:bb:f7:
21:bb:2e:46:e8:f3:2b:1c:83:e1:07:f2:d2:30:24:
ed:6f:55:26:f3:a9:5f:b0:01:a3:98:3e:9d:37:37:
0f:df:01:23:f8:07:c4:14:45:d4:d1:ad:3a:09:99:
37:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:7E:FC:87:2F:F7:8D:66:E6:BD:C2:FB:11:33:EA:70:C1:89:CC:FE
X509v3 Authority Key Identifier:
keyid:EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a393a3a2f34382d3438203d3e203336323336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:dd80:9::/48
Signature Algorithm: sha256WithRSAEncryption
0f:ce:01:5a:69:f0:5b:3c:ef:3c:5d:71:c0:ba:e3:ec:f7:42:
56:74:38:04:e5:88:84:d3:a2:5f:db:08:40:e0:60:b2:fc:0f:
1d:ff:55:68:4e:fd:a7:91:e9:30:03:b1:bb:13:9d:68:e7:78:
65:33:a5:5a:0e:a1:92:b7:72:bb:6d:e9:b0:29:41:45:14:bb:
b7:9c:98:07:92:aa:1c:3c:d2:ef:3a:f5:fc:3a:0e:57:9f:16:
b6:dd:33:28:8d:b2:11:27:32:49:e6:0e:df:72:ce:3e:ef:9d:
cd:36:2e:bc:7e:22:6c:30:48:b0:5e:26:03:77:6b:48:41:c2:
01:c9:e4:60:6f:45:30:b8:d6:c9:28:56:3d:5e:59:58:02:07:
f8:30:dc:e9:99:f0:99:7a:e5:a2:a3:5f:e9:ed:1d:54:fa:a1:
0d:08:7d:41:4f:68:33:56:2f:8e:10:9d:2f:0e:28:88:a0:8b:
14:c2:25:ef:45:15:e2:2b:9d:2e:65:76:04:50:eb:da:b8:1a:
53:77:1b:3f:ed:31:cd:e9:28:1c:a6:d7:5f:dd:ac:bf:a8:66:
5c:a2:eb:f4:43:06:1b:ae:98:cc:07:9c:9b:95:fb:74:ac:b8:
ea:7f:c1:09:2a:ab:25:e5:e7:cd:b9:00:76:72:3d:3b:33:6c:
ec:f4:f1:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:52:41 2026 by rpki-client