Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS198016.roa
File: AS198016.roa (raw, json)
Hash identifier: go0lQDJdhgN7U/pjm7dn1T/8acOO5wjhGBe5ku1Ta08=
Subject key identifier: 14:4F:94:4E:22:2C:78:49:3E:50:61:58:88:77:29:20:46:8B:FB:07
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 2F6D8BF73EEA0E4BBE5460008FE55769BCF4D7F3
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS198016.roa
Signing time: Thu 04 Jun 2026 15:58:54 +0000
ROA not before: Thu 04 Jun 2026 15:53:54 +0000
ROA not after: Thu 03 Jun 2027 15:58:54 +0000
asID: 198016
IP address blocks: 81.31.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:6d:8b:f7:3e:ea:0e:4b:be:54:60:00:8f:e5:57:69:bc:f4:d7:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jun 4 15:53:54 2026 GMT
Not After : Jun 3 15:58:54 2027 GMT
Subject: CN=144F944E222C78493E50615888772920468BFB07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:11:4a:27:95:95:b9:4d:11:47:48:79:7d:c4:
f3:7e:12:f9:d8:8f:1e:ad:8b:f0:56:21:b6:a3:1e:
54:e8:9e:b2:0e:3c:d0:82:41:ec:44:a1:41:6c:b7:
db:01:31:53:cb:d9:6a:e7:41:95:8e:10:ec:71:5e:
f5:55:94:c4:83:c6:94:9f:c6:ae:3c:68:d2:88:e6:
2d:77:fd:22:1e:d0:11:51:6b:cc:89:18:38:39:3e:
e6:f3:d7:ce:08:53:ae:62:b4:1c:5e:da:7d:ef:b6:
d4:36:9f:88:21:fe:34:da:09:f4:3b:32:23:de:ba:
39:57:88:f8:cb:72:7f:ed:e9:27:e4:5e:a4:6c:ee:
37:74:93:d0:f3:dd:49:4c:9b:9e:ff:b5:61:02:bf:
7f:af:84:ec:88:21:16:6f:9b:35:3c:ea:61:a7:7d:
48:e9:fa:2f:22:b8:be:36:50:50:26:5e:16:b0:58:
3d:8a:4c:79:f4:d4:d2:7a:41:21:2d:ee:9e:a7:0d:
06:fa:97:18:9e:9b:7c:7a:6c:30:ea:e2:6b:34:55:
40:b3:23:a3:47:20:a1:b6:9c:bf:b3:fe:f8:3f:55:
f6:a8:d6:0b:6d:82:8f:4b:88:ad:15:77:1b:d2:83:
34:21:03:8a:6c:0b:ee:20:a5:d5:db:6f:a5:1a:3e:
50:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:4F:94:4E:22:2C:78:49:3E:50:61:58:88:77:29:20:46:8B:FB:07
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS198016.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.31.214.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:d3:2d:68:29:9c:b4:76:81:1e:b0:65:43:ee:ad:b7:0e:1f:
df:ae:fb:f1:60:b3:9e:f6:f3:00:5c:05:d6:3c:88:18:4d:a7:
30:8a:ea:59:ca:76:92:0d:e1:0c:1b:10:98:ef:3c:32:6b:1d:
44:c7:a8:24:1f:4b:44:15:d3:4a:72:03:2c:1c:51:2a:d5:54:
c0:79:66:71:08:c9:12:45:f1:3f:31:ed:71:3b:1e:37:c3:56:
cf:cd:d7:9e:8a:52:73:f1:1f:fe:3d:0e:b9:0a:3e:2a:e4:a7:
14:c9:90:74:31:b9:c3:e9:4d:f8:e0:fd:51:b5:7b:5b:1f:0d:
6a:ef:90:c5:3d:2c:1d:d9:14:f7:cc:5c:90:29:31:69:36:71:
b1:55:91:0b:74:b5:4d:86:ee:3b:a1:4d:1d:1a:f9:5e:a2:47:
d3:b2:31:ab:91:5b:aa:13:49:be:18:e8:b2:69:95:a0:b5:20:
c6:17:84:5c:b3:64:9d:b6:53:0d:40:eb:50:4d:a8:d2:db:b3:
9e:51:aa:ba:0a:b0:00:ab:ff:37:98:07:89:90:dd:3f:ca:3b:
21:25:ca:07:31:5c:be:e6:48:4c:7c:ee:9c:43:4e:d0:22:a3:
1b:b5:60:5e:02:63:8b:b5:94:e5:fa:51:e8:b4:0f:ae:e5:3e:
2f:91:5e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:10:12 2026 by rpki-client