Route Origin Authorization
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS133752.roa
File: AS133752.roa (raw, json)
Hash identifier: iDmi80CDWffUvVgbqZQaa1oe9k+Vg4eQUe7lb3S7jr4=
Subject key identifier: 33:C7:C9:E6:E4:D6:3A:16:79:FE:E3:61:CE:DF:1F:19:6D:48:CE:E1
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 7D852F568D62E0C76D1CAEEB3C8D1D76A12FD9AE
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS133752.roa
Signing time: Fri 23 Oct 2026 09:32:58 +0000
ROA not before: Fri 23 Oct 2026 09:27:58 +0000
ROA not after: Fri 22 Oct 2027 09:32:58 +0000
asID: 133752
IP address blocks: 27.0.232.0/24 maxlen: 24
85.155.97.0/24 maxlen: 24
2a05:dfc6::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Nov 2026 05:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:85:2f:56:8d:62:e0:c7:6d:1c:ae:eb:3c:8d:1d:76:a1:2f:d9:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Oct 23 09:27:58 2026 GMT
Not After : Oct 22 09:32:58 2027 GMT
Subject: CN=33C7C9E6E4D63A1679FEE361CEDF1F196D48CEE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:95:5f:c0:88:94:be:38:09:5e:ab:96:44:07:
a9:2a:19:62:3b:f4:78:b4:50:af:3d:e5:79:0b:5d:
35:fc:d2:f0:45:33:a5:d6:cf:88:91:ad:57:d6:0b:
d6:6c:60:f7:50:f9:61:9f:99:98:b7:da:b2:49:84:
78:2f:7b:7b:66:87:5a:a6:32:ae:3d:c1:85:a5:2f:
92:d6:01:d4:48:df:b6:37:d0:23:8f:c6:58:a3:38:
ee:29:78:b6:10:26:31:37:63:ce:5b:fe:de:4b:64:
7a:79:64:93:49:63:eb:df:c3:0b:03:35:f6:f0:64:
67:e4:22:af:b1:5a:8a:63:a5:c8:83:34:d3:69:a3:
de:7b:18:1a:d0:18:7d:5b:f4:81:46:64:a4:78:7f:
ea:59:df:df:1c:98:85:e8:05:cc:e5:ca:da:f2:60:
eb:e3:b3:af:bf:4e:bb:51:55:b2:c5:8b:38:40:d5:
e8:bd:37:ee:77:93:ae:6a:73:a8:8a:a1:d1:53:b4:
9e:a9:4a:29:f8:b5:3b:69:29:d1:3e:fa:15:99:43:
34:0d:4b:31:fd:57:29:da:91:2c:a7:ae:c1:c6:4b:
54:cd:cf:ed:f2:1b:ad:2e:7c:33:1a:3d:f7:63:1a:
b8:fd:7e:43:43:7c:f7:c2:9c:65:3a:02:55:f7:7e:
9b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:C7:C9:E6:E4:D6:3A:16:79:FE:E3:61:CE:DF:1F:19:6D:48:CE:E1
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS133752.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.0.232.0/24
85.155.97.0/24
IPv6:
2a05:dfc6::/32
Signature Algorithm: sha256WithRSAEncryption
2f:97:a8:28:29:37:61:c7:0c:b9:5f:c6:39:ef:7d:ee:92:f1:
a1:5b:ab:73:c6:29:3f:9f:89:41:df:16:f9:5b:2b:fc:bb:1e:
eb:1c:ac:38:5d:dc:6c:09:88:92:10:9e:14:ec:bf:09:ff:f3:
87:7e:ee:26:1f:51:a8:78:2d:f4:97:b0:c8:44:01:b3:ad:e3:
bc:93:3d:d3:9b:b6:9d:f4:cd:41:23:d1:2f:98:2c:8a:03:0b:
ef:c9:d2:a6:4c:e2:90:0f:59:60:ea:e1:2d:f7:39:2a:b1:9a:
26:36:e1:c9:04:1f:f4:9f:16:b4:72:f7:f0:18:ad:be:63:f9:
19:cf:7b:84:f8:f2:28:57:d9:ee:72:7d:73:a7:94:3e:be:5d:
83:9c:fe:78:87:d7:f2:ec:2e:a5:f5:fe:95:b5:f8:4c:e0:8a:
ec:56:17:1e:98:b2:97:87:82:9c:91:45:bd:cf:96:8f:7c:4e:
95:df:46:69:9a:0e:96:66:df:df:9b:c0:a4:18:02:10:05:3a:
dc:08:d3:af:91:d5:ea:e6:1c:08:18:dc:45:22:cd:9c:08:0e:
60:62:78:9b:bb:99:b9:94:e4:b8:4c:ff:c9:ce:de:74:62:84:
f2:c5:42:90:d0:c9:b4:b5:b9:66:37:af:cd:87:2e:f8:a7:6b:
b4:f0:73:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 7 15:06:04 2026 by rpki-client