Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS13335.roa
File: AS13335.roa (raw, json)
Hash identifier: ESs1JFByARaFQ+HUxId0ILyd55mR6wVNbBvfGrmqbl4=
Subject key identifier: 37:10:89:6B:DC:F5:0B:51:AF:81:66:96:65:33:12:A5:8C:96:86:55
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 06054DBEDB0078D911E18759E76DDA1697F83FFB
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS13335.roa
Signing time: Thu 04 Jun 2026 15:58:53 +0000
ROA not before: Thu 04 Jun 2026 15:53:53 +0000
ROA not after: Thu 03 Jun 2027 15:58:53 +0000
asID: 13335
IP address blocks: 81.31.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:05:4d:be:db:00:78:d9:11:e1:87:59:e7:6d:da:16:97:f8:3f:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jun 4 15:53:53 2026 GMT
Not After : Jun 3 15:58:53 2027 GMT
Subject: CN=3710896BDCF50B51AF816696653312A58C968655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:31:d9:64:a2:74:21:77:77:3e:37:9a:e9:ef:
61:df:ee:7b:06:15:22:38:05:c4:ff:7f:6d:b5:50:
b4:a1:5f:8c:04:73:24:63:d0:3c:4d:a8:f3:c5:a8:
a3:48:75:a9:be:ac:bd:32:cc:5e:8c:c4:f5:c3:ee:
fb:71:67:f6:4c:e4:02:13:d1:cc:cd:d0:22:6c:72:
87:53:3d:ec:e6:03:e2:d9:de:18:c3:84:79:fd:fa:
1a:c5:28:69:2e:27:12:07:15:ad:f6:3a:f5:e9:7c:
71:05:85:4a:bf:36:7f:e6:8c:40:c3:32:e8:61:ee:
70:c6:ae:32:8c:31:b8:31:da:b9:c3:f5:f3:1f:8d:
e0:fd:f4:80:10:d0:96:d7:14:4e:55:54:d1:49:ea:
17:cf:c7:c2:0d:9d:5f:5a:19:ce:f9:cf:71:5c:e0:
49:32:1d:d0:62:14:fe:0f:63:da:3f:bf:6b:99:aa:
82:b5:af:9f:54:7d:c6:77:71:88:76:ed:7b:8e:4c:
0f:89:52:87:93:7d:2f:64:2b:f7:c5:ec:5a:5c:11:
e5:d0:a8:51:8a:17:21:8c:ca:7a:c3:17:08:63:90:
f0:a7:2d:9d:a3:33:e9:63:5c:ed:30:ec:be:c4:1c:
28:b1:47:bf:a8:72:16:e4:b1:df:59:ba:c7:73:84:
20:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:10:89:6B:DC:F5:0B:51:AF:81:66:96:65:33:12:A5:8C:96:86:55
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS13335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.31.212.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:5f:fd:7f:c3:a2:09:da:d6:b1:32:1d:3b:67:ef:16:40:35:
ff:71:c3:8c:ac:dd:fd:55:53:9d:a5:f4:11:4b:cf:5f:45:96:
e0:28:26:0a:75:18:a1:2f:b7:78:dd:90:3b:5a:34:e9:80:30:
ff:1b:5e:86:3e:8c:b7:c5:f7:43:2a:99:49:4f:ae:b0:57:2e:
e5:dd:dd:ad:4d:53:6b:5d:85:b1:91:99:a6:54:be:2d:db:7c:
f9:c2:85:29:13:e8:7c:eb:6d:7c:a4:f0:47:79:8e:d8:d4:7e:
f2:dd:a9:5a:96:dc:23:33:4b:58:b1:0b:bd:b1:07:01:8f:8d:
c2:da:46:b3:5a:f3:ea:fa:2c:1f:d3:c7:20:f0:fe:04:0e:11:
b3:3b:ce:96:b4:ac:d0:e6:21:90:fa:40:04:b0:13:4d:08:cf:
ca:ae:69:8a:db:65:28:2b:df:08:9a:8a:20:b9:df:9d:17:25:
86:bf:da:f7:cf:14:e7:24:09:ea:66:7d:d4:69:63:45:ee:8e:
5e:00:10:ae:9d:e5:56:fe:df:39:08:2f:8e:e9:c6:b4:28:ec:
13:ec:d2:a7:b4:ba:a3:75:53:87:2f:9b:0c:ac:4a:31:ce:53:
19:27:ac:26:47:23:f6:19:ba:9e:45:77:64:a0:71:23:11:d3:
e2:ff:f0:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:24:46 2026 by rpki-client