Route Origin Authorization
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS135103.roa
File: AS135103.roa (raw, json)
Hash identifier: KNLufiOES6J2OFJo5BVqVHKpYiiRO1f/G+mfTiNmVSE=
Subject key identifier: 88:3A:47:BE:8B:D6:20:04:A2:A0:BF:7A:BC:B7:4F:57:D5:72:2C:25
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 6A582D9C377121D425ED73EBBFE371FC7DF171FB
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS135103.roa
Signing time: Sun 01 Nov 2026 19:59:12 +0000
ROA not before: Sun 01 Nov 2026 19:54:12 +0000
ROA not after: Sun 31 Oct 2027 19:59:12 +0000
asID: 135103
IP address blocks: 2a06:9f45::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 03:44:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:58:2d:9c:37:71:21:d4:25:ed:73:eb:bf:e3:71:fc:7d:f1:71:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Nov 1 19:54:12 2026 GMT
Not After : Oct 31 19:59:12 2027 GMT
Subject: CN=883A47BE8BD62004A2A0BF7ABCB74F57D5722C25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b7:28:33:e5:37:3f:83:87:b5:ec:ce:d0:42:
8c:27:eb:2c:37:ad:d1:68:f4:ca:59:49:ab:68:68:
54:aa:0c:52:06:62:c4:8a:90:63:7f:d4:b1:ed:9e:
6d:cf:11:1f:ec:da:31:a3:c5:5e:0d:e4:0e:ac:a5:
26:49:42:14:c6:79:53:25:9e:d8:d6:e7:10:93:2d:
2d:ae:ae:69:14:ac:58:cb:57:ad:d6:ee:55:db:79:
4d:bf:95:08:2b:2a:00:82:29:ce:2e:c9:a7:22:75:
5f:ae:51:cf:3b:d4:54:0a:4b:1b:60:08:52:9d:a0:
fa:68:46:7f:ee:6b:6d:a1:0a:00:99:a0:65:17:af:
83:06:e9:5a:bf:15:73:c2:27:d1:46:45:7b:c7:39:
af:15:d1:ee:11:d3:c3:71:ee:a2:9a:fe:0b:f2:16:
50:4e:c5:c8:ca:b1:f9:cd:53:c9:e5:e7:1e:1f:a9:
51:5c:de:5e:59:2c:6b:60:3c:36:a3:db:54:fd:a5:
fc:6b:a8:0b:dc:9e:e1:0e:e9:e3:f5:6f:bf:7a:84:
5e:aa:f4:eb:50:40:19:2e:5a:60:52:c3:34:2d:ea:
01:21:a3:61:b9:bb:2b:21:c5:9e:44:0f:e9:62:e6:
03:d7:d0:4c:84:ac:a8:10:89:35:65:19:18:31:c3:
40:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:3A:47:BE:8B:D6:20:04:A2:A0:BF:7A:BC:B7:4F:57:D5:72:2C:25
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS135103.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9f45::/32
Signature Algorithm: sha256WithRSAEncryption
86:30:11:a7:c9:ee:92:4e:cf:01:49:03:1f:a2:60:18:c1:d4:
fb:ed:59:da:ce:de:d0:bc:7e:18:9c:36:16:12:45:62:66:8a:
0d:ee:58:f7:f8:6f:0f:c8:64:e2:68:2d:f1:ef:b6:6d:da:10:
5d:37:84:6f:ad:67:56:56:99:83:53:c1:e1:9b:fe:29:2d:da:
28:75:96:ee:ea:7b:bb:b8:af:c6:7f:af:97:f8:97:6b:7b:92:
82:8a:c0:9f:03:3d:e4:d6:c5:b8:60:25:56:68:0f:01:cd:57:
4d:d6:f5:ba:cf:9e:9a:a4:03:cc:08:e4:40:45:c1:59:ea:b2:
6c:75:ab:27:32:5f:3f:41:04:af:1d:64:fa:a1:21:83:0f:13:
ff:30:7a:26:01:11:a8:3f:18:42:0a:9b:4d:c9:f4:59:ed:28:
69:9c:c0:95:6f:a8:59:52:08:99:5d:94:23:7c:6d:b6:45:2d:
34:da:03:f4:86:6c:e8:c9:98:83:1f:45:01:a3:45:8e:83:1b:
a0:63:b5:f2:8f:ac:2b:c2:9e:f5:1b:4e:28:b3:33:b0:13:9f:
79:be:7c:fe:23:3c:c3:e6:05:af:34:cf:e0:aa:42:3e:89:d0:
b0:6e:39:04:2d:3b:42:86:9c:f4:96:80:e4:c7:27:3e:ac:9a:
43:24:1d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 09:32:16 2026 by rpki-client