Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a666238313a3a2f34382d3438203d3e20313939343338.roa
File: 326130303a646438303a666238313a3a2f34382d3438203d3e20313939343338.roa (raw, json)
Hash identifier: etbpHk+syXoQX0nG3DoiuYslEMUzxNNiMQ4Q9R/1pDg=
Subject key identifier: 19:B2:39:43:B0:BC:2A:BE:31:1D:B5:D4:0F:65:68:0E:4A:9C:E6:EC
Certificate issuer: /CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Certificate serial: 65F33AA262BF035D0F55934A5942960B92B4BEE2
Authority key identifier: EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a666238313a3a2f34382d3438203d3e20313939343338.roa
Signing time: Mon 06 Jul 2026 20:29:06 +0000
ROA not before: Mon 06 Jul 2026 20:24:06 +0000
ROA not after: Mon 05 Jul 2027 20:29:06 +0000
asID: 199438
IP address blocks: 2a00:dd80:fb81::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.mft
rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:58:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:f3:3a:a2:62:bf:03:5d:0f:55:93:4a:59:42:96:0b:92:b4:be:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Validity
Not Before: Jul 6 20:24:06 2026 GMT
Not After : Jul 5 20:29:06 2027 GMT
Subject: CN=19B23943B0BC2ABE311DB5D40F65680E4A9CE6EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8b:c5:59:fd:24:94:20:1f:56:a2:ff:0e:bf:
79:b8:3f:0c:04:0d:56:78:3b:bc:6b:ed:d4:e0:6e:
35:a8:88:63:16:90:31:32:1b:a2:a9:ea:a9:03:a9:
0a:23:64:24:ee:81:eb:59:6d:67:ce:75:d8:33:04:
15:57:22:37:75:fb:35:a3:e0:18:6a:23:ff:c5:01:
de:f4:a2:22:12:dc:37:06:41:98:1f:72:39:93:1b:
22:8c:ba:16:48:de:33:2e:01:77:f0:a1:71:a2:5a:
cf:dd:2e:cf:bc:14:d5:27:1c:6b:d1:59:9e:a0:bc:
61:8a:3b:c1:da:1e:66:95:63:47:05:73:8f:e4:da:
0c:6d:f0:3e:01:1c:8d:f9:93:31:60:ad:01:18:a2:
3f:42:c4:15:4e:10:98:df:d8:08:60:db:c5:ff:3f:
62:57:a3:33:5a:92:62:a2:c2:26:7f:87:d1:5e:99:
12:ee:85:92:5b:cc:03:09:73:95:d1:78:46:dc:2c:
2f:da:60:b6:95:10:2d:22:fc:25:df:8e:24:88:e0:
bd:3f:99:47:43:69:88:2b:6a:c4:e1:a0:e5:c0:7c:
b8:4e:07:f4:95:86:5b:f7:a1:bc:6a:e3:54:da:fb:
21:5a:89:47:51:d3:be:a5:81:97:9b:9c:9d:59:cf:
b4:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:B2:39:43:B0:BC:2A:BE:31:1D:B5:D4:0F:65:68:0E:4A:9C:E6:EC
X509v3 Authority Key Identifier:
keyid:EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a666238313a3a2f34382d3438203d3e20313939343338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:dd80:fb81::/48
Signature Algorithm: sha256WithRSAEncryption
7e:90:90:01:4d:01:f3:1f:df:9b:c2:06:8a:f9:bf:77:9c:51:
58:66:41:24:35:3a:81:5d:9c:f4:a5:bd:06:2d:83:7a:ca:5a:
6c:6a:2e:14:20:b3:f7:0e:7b:90:75:93:eb:68:32:a3:97:65:
6b:eb:97:8b:0a:be:81:1c:6b:3f:ed:17:94:fa:c5:48:c1:ca:
b1:29:79:ad:51:16:ee:e5:90:eb:9f:df:28:6f:4e:83:96:90:
34:f3:8a:e3:a9:06:ea:59:e5:9a:0b:b1:b4:f3:e0:34:ac:a5:
27:8a:be:27:e5:7c:b1:8f:cf:93:0f:23:5b:b6:80:7c:71:b1:
d7:a6:38:1a:f9:0e:35:8b:1c:7d:f9:d8:78:de:8c:69:57:83:
24:8c:4f:67:84:d3:e3:d0:70:14:ed:e4:81:83:38:c2:8b:5b:
d8:40:cc:77:64:e9:c9:e5:52:7b:ad:2e:24:d0:37:de:a8:17:
ad:e4:3e:d1:08:51:4c:73:8a:6d:d2:b1:ee:46:10:5b:2a:19:
a3:c9:e6:62:89:f5:45:92:94:4b:20:69:03:0c:c8:7b:17:77:
07:ab:58:05:09:45:e2:2a:7b:25:f0:dd:03:b2:68:90:eb:8a:
04:a3:21:1f:7d:43:76:cf:8e:40:8f:52:fe:85:77:af:8d:fa:
35:b7:e5:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:50:03 2026 by rpki-client