Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS139311.roa
File: AS139311.roa (raw, json)
Hash identifier: hUkRLEruBDm0OgdT7PYZaSJSi0KUjYI7uCwI3E+BKqE=
Subject key identifier: FD:B6:82:19:28:A9:DF:52:59:A8:77:23:ED:40:64:D9:6A:D3:BE:6D
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 6CFBEBAA5C4346F26193069738D788A175D88F1A
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS139311.roa
Signing time: Thu 04 Jun 2026 15:58:47 +0000
ROA not before: Thu 04 Jun 2026 15:53:47 +0000
ROA not after: Thu 03 Jun 2027 15:58:47 +0000
asID: 139311
IP address blocks: 2a06:a005:10b0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:fb:eb:aa:5c:43:46:f2:61:93:06:97:38:d7:88:a1:75:d8:8f:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jun 4 15:53:47 2026 GMT
Not After : Jun 3 15:58:47 2027 GMT
Subject: CN=FDB6821928A9DF5259A87723ED4064D96AD3BE6D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:37:b2:85:fd:38:38:2a:9c:f5:da:73:33:d1:
e1:3d:69:d6:a1:c5:f4:6b:1a:9c:35:39:aa:4d:3b:
36:65:42:b5:b9:9b:a8:6f:a7:b3:b8:19:14:23:a7:
8f:14:b5:42:ca:05:d4:b4:eb:25:c7:2d:f9:e9:7e:
c1:34:c0:6d:06:c8:53:4f:fe:92:1a:00:be:c2:83:
ef:28:9d:10:34:21:e5:49:f3:72:87:c4:65:22:ea:
e1:13:7e:61:59:a7:51:13:57:1d:9e:77:22:29:2c:
ed:c9:05:92:b9:20:c3:b5:5d:a5:90:12:20:3b:e8:
4b:88:84:b3:0e:9e:ec:18:59:eb:a1:6a:2b:2b:74:
a2:f0:7a:9c:f1:37:f2:80:a5:26:ef:55:c2:c5:5b:
d3:ec:28:8a:6c:c8:18:69:71:a4:11:84:ad:e0:9c:
9a:27:0c:e3:08:2f:4b:d9:e3:24:62:96:b3:1c:69:
30:f5:5a:a5:f2:60:9b:84:6f:33:ee:b4:4a:8c:ea:
c3:57:f4:c4:eb:19:7b:a0:26:ef:cd:63:ea:2e:54:
3a:88:6d:fe:9b:03:86:4e:70:e0:e8:34:98:77:ee:
7c:fe:ae:55:16:fe:43:2c:2d:26:35:e9:d9:5c:68:
48:45:5a:04:11:07:25:0a:b7:a8:30:61:82:71:bc:
f9:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:B6:82:19:28:A9:DF:52:59:A8:77:23:ED:40:64:D9:6A:D3:BE:6D
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS139311.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:10b0::/44
Signature Algorithm: sha256WithRSAEncryption
1f:da:dc:1f:0a:4b:d3:80:c7:01:92:dc:4e:0a:61:41:89:28:
72:c4:27:c5:69:7e:75:ef:01:d9:03:e6:60:0f:e5:02:ea:b2:
cd:69:5b:cd:94:51:59:8c:b5:7e:56:d5:fb:00:eb:89:19:e2:
0a:80:76:84:37:67:5f:01:ac:64:f4:8c:b8:c4:19:0a:e2:88:
f2:b2:3a:94:b0:2b:b0:76:0d:e3:a6:55:7a:66:70:c3:54:34:
4e:c6:d3:2a:aa:df:9e:c9:c2:63:01:10:52:8b:05:10:00:3e:
ad:44:36:13:4b:d0:2b:c8:f6:4e:89:6a:19:b9:e1:60:b6:a6:
5b:9b:01:63:d5:75:0f:76:1d:87:f6:90:02:54:86:61:e2:87:
de:9d:d5:f6:ba:af:43:c3:be:24:c4:ee:54:b1:44:54:8c:87:
c9:af:d7:3e:95:90:7f:95:4a:17:04:0b:e6:b0:0c:cf:6b:85:
99:7c:06:bb:66:b9:6a:0e:16:fe:7a:0a:01:4d:7e:00:fa:09:
6d:9a:70:81:92:03:96:06:b0:ed:96:1b:65:9c:6b:3b:63:08:
b0:47:1e:38:4b:2e:df:72:73:bc:cb:32:ab:23:2d:79:be:20:
a3:22:96:bc:f8:19:c5:b0:74:db:03:4a:bd:e9:59:ca:af:01:
16:f3:a2:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:25:42 2026 by rpki-client