Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/3138352e3137382e3230302e302f32342d3234203d3e203336323336.roa
File: 3138352e3137382e3230302e302f32342d3234203d3e203336323336.roa (raw, json)
Hash identifier: y36qLuWS6UXnE3p3Yx+FAIUBi8VInoH4GDH5G/tpE/k=
Subject key identifier: 44:04:3A:E2:61:EF:FB:A9:7D:F4:F3:19:15:09:81:76:D6:0E:E7:7C
Certificate issuer: /CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Certificate serial: 2D167E3571E42E5EDA973A993135AFB8822588D3
Authority key identifier: EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/3138352e3137382e3230302e302f32342d3234203d3e203336323336.roa
Signing time: Thu 24 Jul 2025 20:13:49 +0000
ROA not before: Thu 24 Jul 2025 20:08:49 +0000
ROA not after: Thu 23 Jul 2026 20:13:49 +0000
asID: 36236
IP address blocks: 185.178.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.mft
rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 18:18:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:16:7e:35:71:e4:2e:5e:da:97:3a:99:31:35:af:b8:82:25:88:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Validity
Not Before: Jul 24 20:08:49 2025 GMT
Not After : Jul 23 20:13:49 2026 GMT
Subject: CN=44043AE261EFFBA97DF4F31915098176D60EE77C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c4:cf:e2:89:c6:da:cb:8d:15:11:eb:28:19:
1c:22:21:d4:44:51:7c:bf:f5:be:23:1b:47:40:29:
f1:2b:15:ba:84:d0:90:a4:d9:3a:8b:ed:8c:c2:a8:
97:b0:6a:59:84:c3:76:60:45:23:22:b3:13:1f:80:
37:3f:28:64:5b:06:3f:1d:10:ae:29:72:ae:b8:e6:
26:f2:23:b9:d7:3f:53:4d:60:45:c1:7a:77:90:8b:
39:5d:b5:1d:0e:01:33:1b:4a:a2:e4:b6:a9:dc:c3:
9d:38:9a:e1:b6:0a:2c:6a:2d:4a:b5:8d:67:81:5c:
4c:54:66:e1:a4:6f:81:48:71:f3:62:d0:6d:9f:9e:
72:c3:ed:84:b9:25:43:b9:3e:dc:d7:32:95:ef:cd:
d7:2d:83:12:e7:48:a3:72:ce:b6:1e:f7:21:bf:bb:
ed:dd:11:6f:78:a8:18:bd:de:c4:6b:02:11:34:e8:
2d:bb:7f:c0:b2:3f:9e:f0:11:e1:1e:9f:78:e8:aa:
11:99:53:6f:2e:7a:ed:1a:8e:a1:d0:2b:54:1e:6b:
1a:e9:6e:7d:2d:bb:d1:7e:bd:99:5b:87:d2:80:17:
70:03:08:f5:7b:d4:ac:8a:1f:87:2d:26:c6:f8:23:
4d:4d:9b:88:29:b6:cf:d7:08:ec:8f:98:f8:89:fb:
ab:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:04:3A:E2:61:EF:FB:A9:7D:F4:F3:19:15:09:81:76:D6:0E:E7:7C
X509v3 Authority Key Identifier:
keyid:EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/3138352e3137382e3230302e302f32342d3234203d3e203336323336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.178.200.0/24
Signature Algorithm: sha256WithRSAEncryption
56:11:df:4d:77:01:6f:89:33:0f:ec:e2:d5:e1:84:4b:41:ca:
35:e3:00:67:cb:5a:71:c8:4d:6c:cd:be:f4:0f:ba:2b:e1:40:
a7:74:59:f3:14:97:10:ee:db:5f:e9:75:b4:a3:42:0c:42:7a:
b2:16:5f:6a:0a:a5:50:14:fe:ee:51:62:55:04:d7:41:1f:4d:
ce:62:b9:45:b4:fd:50:cb:a8:1b:2e:31:80:e6:e4:6a:e0:e9:
62:54:90:5c:ab:f6:58:d4:c2:22:67:e3:e5:51:c2:f0:5b:4a:
e7:79:59:c5:e4:c4:e1:a0:04:b9:08:0f:ed:e3:ec:6c:65:64:
a4:a0:2f:74:cd:4b:4d:51:b2:52:98:42:de:e9:47:31:8e:cf:
f9:b1:be:f5:54:5c:20:28:38:00:ee:d7:ad:c0:90:7c:23:18:
9c:04:85:56:a7:49:a9:de:5b:99:98:10:4e:99:a3:c0:9b:71:
7d:8c:ce:f6:57:99:12:08:53:25:ca:b6:b4:b2:97:8f:cf:0d:
f3:f0:82:2d:5a:22:58:ed:62:b3:68:f1:39:a4:eb:83:7b:30:
5e:84:d7:31:e0:05:13:b5:dc:e8:48:92:54:2e:32:b2:60:fc:
a4:e4:a6:50:17:49:07:1e:2d:3d:6b:a3:67:bd:80:a2:81:e1:
0b:af:e3:1a
-----BEGIN CERTIFICATE-----
MIIFGjCCBAKgAwIBAgIULRZ+NXHkLl7alzqZMTWvuIIliNMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZWIyYzdlNjI1MDNiMDYzNGViNGFiNTNmODhjMDY5NTBh
Yzc2ZGNkMTAeFw0yNTA3MjQyMDA4NDlaFw0yNjA3MjMyMDEzNDlaMDMxMTAvBgNV
BAMTKDQ0MDQzQUUyNjFFRkZCQTk3REY0RjMxOTE1MDk4MTc2RDYwRUU3N0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsxM/iicbay40VEesoGRwiIdRE
UXy/9b4jG0dAKfErFbqE0JCk2TqL7YzCqJewalmEw3ZgRSMisxMfgDc/KGRbBj8d
EK4pcq645ibyI7nXP1NNYEXBeneQizldtR0OATMbSqLktqncw504muG2CixqLUq1
jWeBXExUZuGkb4FIcfNi0G2fnnLD7YS5JUO5PtzXMpXvzdctgxLnSKNyzrYe9yG/
u+3dEW94qBi93sRrAhE06C27f8CyP57wEeEen3joqhGZU28ueu0ajqHQK1Qeaxrp
bn0tu9F+vZlbh9KAF3ADCPV71KyKH4ctJsb4I01Nm4gpts/XCOyPmPiJ+6trAgMB
AAGjggIkMIICIDAdBgNVHQ4EFgQURAQ64mHv+6l99PMZFQmBdtYO53wwHwYDVR0j
BBgwFoAU6yx+YlA7BjTrSrU/iMBpUKx23NEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODNmNjg2NjEwODRiODYvMS9FQjJDN0U2MjUw
M0IwNjM0RUI0QUI1M0Y4OEMwNjk1MEFDNzZEQ0QxLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNnl4LVlsQTdCalRyU3JVX2lNQnBVS3gyM05FLmNlcjCBpAYIKwYB
BQUHAQsEgZcwgZQwgZEGCCsGAQUFBzALhoGEcnN5bmM6Ly9ycGtpLXJwcy5hcmlu
Lm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzZjY4NjYxMDg0Yjg2
LzEvMzEzODM1MmUzMTM3MzgyZTMyMzAzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2Uy
MDMzMzYzMjMzMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYB
BQUHAQcBAf8EEDAOMAwEAgABMAYDBAC5ssgwDQYJKoZIhvcNAQELBQADggEBAFYR
3013AW+JMw/s4tXhhEtByjXjAGfLWnHITWzNvvQPuivhQKd0WfMUlxDu21/pdbSj
QgxCerIWX2oKpVAU/u5RYlUE10EfTc5iuUW0/VDLqBsuMYDm5Grg6WJUkFyr9ljU
wiJn4+VRwvBbSud5WcXkxOGgBLkID+3j7GxlZKSgL3TNS01RslKYQt7pRzGOz/mx
vvVUXCAoOADu163AkHwjGJwEhVanSaneW5mYEE6Zo8CbcX2MzvZXmRIIUyXKtrSy
l4/PDfPwgi1aIljtYrNo8Tmk64N7MF6E1zHgBRO13OhIklQuMrJg/KTkplAXSQce
LT1ro2e9gKKB4Quv4xo=
-----END CERTIFICATE-----
Generated at Sat Aug 9 02:48:37 2025 by rpki-client