Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/3138352e33342e302e302f32342d3234203d3e203336323336.roa
File: 3138352e33342e302e302f32342d3234203d3e203336323336.roa (raw, json)
Hash identifier: sDzc8WqkfKhl/2M7q6CjQRqhbmSkeVbplVVqbnv2p84=
Subject key identifier: 12:D7:E0:22:EF:D8:8D:91:0A:A6:0B:0D:F6:3D:75:8C:7E:67:C6:82
Certificate issuer: /CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Certificate serial: 1BC6236698E83CE76A1BFCF607018B83412C5C68
Authority key identifier: EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/3138352e33342e302e302f32342d3234203d3e203336323336.roa
Signing time: Thu 02 Apr 2026 20:27:54 +0000
ROA not before: Thu 02 Apr 2026 20:22:54 +0000
ROA not after: Thu 01 Apr 2027 20:27:54 +0000
asID: 36236
IP address blocks: 185.34.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.mft
rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 20:52:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:c6:23:66:98:e8:3c:e7:6a:1b:fc:f6:07:01:8b:83:41:2c:5c:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Validity
Not Before: Apr 2 20:22:54 2026 GMT
Not After : Apr 1 20:27:54 2027 GMT
Subject: CN=12D7E022EFD88D910AA60B0DF63D758C7E67C682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ad:bc:21:e7:35:a8:c3:9f:7c:e0:37:9a:83:
29:9b:b9:93:23:9d:1d:34:3e:02:75:c6:21:6f:25:
1d:1b:70:b3:01:b0:06:2e:05:a5:b3:01:d3:7b:a9:
10:f9:50:16:64:d8:a5:b6:c2:cf:27:ed:99:1b:37:
c6:f5:ad:4c:8b:03:be:4b:af:f6:14:c5:d8:18:5f:
f4:1d:f8:01:2a:6e:de:64:bd:4e:80:59:df:dd:a2:
31:9e:4d:3a:13:0e:c9:03:0c:7a:52:ca:33:ae:4e:
8f:02:56:f3:15:05:29:c3:ce:43:70:b0:e4:2d:b3:
6d:d0:ae:f7:f8:42:ba:8e:0b:a8:0d:1e:6d:37:13:
36:66:a1:06:6e:46:50:b3:3d:f4:0b:6c:32:d1:1d:
de:f6:bd:a9:69:5b:60:0c:d2:6a:a3:ad:14:06:5a:
f5:2f:7d:4e:c2:ab:b8:1e:08:01:8c:b9:91:40:b4:
d1:90:56:fd:58:a3:5d:0c:d0:67:6f:07:a3:20:4a:
ec:6c:60:6a:fb:4e:88:2d:1c:fd:47:80:6b:d4:59:
90:a8:6a:8f:6f:df:05:34:cb:ff:eb:c4:d6:7f:37:
86:25:67:c3:7a:00:54:c1:03:7c:1d:b9:9c:8d:f8:
e4:d3:2b:79:93:c7:f4:d7:de:56:40:61:65:3b:ba:
3a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:D7:E0:22:EF:D8:8D:91:0A:A6:0B:0D:F6:3D:75:8C:7E:67:C6:82
X509v3 Authority Key Identifier:
keyid:EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/3138352e33342e302e302f32342d3234203d3e203336323336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.34.0.0/24
Signature Algorithm: sha256WithRSAEncryption
22:ba:bd:cb:64:16:7e:b8:ee:46:f2:50:50:96:da:42:5a:64:
57:9b:f5:e5:fb:1e:be:56:fb:22:f8:70:bb:35:cc:95:cc:05:
12:c1:8c:8d:a2:a8:23:ec:34:0c:bf:6e:db:e9:69:8c:bc:8a:
22:e6:55:76:1d:f6:86:55:4c:7c:27:3d:20:76:44:65:61:cc:
8a:13:96:70:f3:75:8a:8c:87:3c:16:a1:5a:ad:11:ee:1f:ba:
fd:3c:96:53:2b:bf:99:02:3f:54:84:2c:27:39:10:44:d9:4f:
e5:02:7e:9c:b9:17:ce:57:96:75:a5:40:ce:73:02:ee:05:aa:
04:cc:d9:4b:88:d0:4a:bd:44:b5:3c:96:23:80:a9:36:06:f8:
83:dc:c4:8b:02:d1:2f:bf:a2:39:3d:c8:4f:7e:b1:f0:55:3f:
90:da:ef:f6:bf:fb:58:2a:6a:79:7b:19:2b:2a:0c:a0:03:20:
1d:e0:16:51:8e:ff:90:17:3e:5f:04:e0:a9:6a:93:0b:0a:a9:
1d:63:90:6a:d7:5d:82:6e:60:7e:9b:40:bb:06:da:f5:f4:6d:
e1:b0:fb:fa:3d:3b:96:d0:3d:7b:8d:e5:80:b1:20:b2:01:71:
e1:9d:e3:de:63:46:e7:c7:d8:8b:fe:d8:b9:7e:4a:77:fa:fd:
c7:03:c9:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:21:47 2026 by rpki-client