Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS198125.roa
File: AS198125.roa (raw, json)
Hash identifier: LUM9reWALuHQEiHQ9W0v0ngy7k1bhs0KiZ+PvDOU+C0=
Subject key identifier: 92:3B:52:C9:27:81:D1:F4:E8:90:04:CB:92:17:C1:90:D8:37:18:2E
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 59D16387D69AC403AC792E5A68DA228FA142AD15
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS198125.roa
Signing time: Fri 24 Jul 2026 09:50:43 +0000
ROA not before: Fri 24 Jul 2026 09:45:43 +0000
ROA not after: Fri 23 Jul 2027 09:50:43 +0000
asID: 198125
IP address blocks: 27.0.233.0/24 maxlen: 24
85.155.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:d1:63:87:d6:9a:c4:03:ac:79:2e:5a:68:da:22:8f:a1:42:ad:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jul 24 09:45:43 2026 GMT
Not After : Jul 23 09:50:43 2027 GMT
Subject: CN=923B52C92781D1F4E89004CB9217C190D837182E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:27:de:57:05:94:4b:e9:97:7a:9a:2a:2a:13:
30:f6:8f:36:ef:61:ff:78:5b:01:c9:57:b2:eb:ad:
ae:26:8a:8a:89:1f:ff:83:4d:06:ae:e7:45:34:d2:
5d:6e:bb:d9:4f:2d:c7:3f:e8:7b:fb:bd:29:6b:a4:
c7:2d:e4:d7:d1:f1:ac:d2:98:8e:02:9d:27:74:9e:
7b:0c:6c:e2:b9:05:80:db:3f:09:ac:7b:9b:48:d3:
0e:1a:d0:b1:64:c1:14:e2:af:8a:9b:79:95:ed:f9:
50:26:c7:d3:ff:32:f2:17:98:2c:a0:54:e9:a0:52:
59:f0:82:4d:12:5a:b4:e7:2f:96:34:eb:3f:2e:70:
86:8b:88:09:3e:72:59:98:73:d8:ed:2c:ee:fd:62:
7d:f5:c9:a4:22:d8:14:09:00:f1:19:b0:9f:81:40:
92:d8:95:2b:5e:64:45:1f:6f:1f:b9:ff:60:01:d0:
e5:25:5a:30:c5:9e:d1:e5:67:15:7d:f0:63:9b:51:
72:a1:88:a5:bd:93:1a:24:09:68:45:05:ff:27:aa:
6f:2b:94:f0:24:9d:ad:8c:12:5e:2a:c5:89:f6:69:
a9:a6:7d:0a:13:f7:5d:51:d9:74:d1:cc:5a:b0:6f:
ef:72:30:ed:90:9a:e1:f4:46:03:80:ff:0f:7e:14:
0c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:3B:52:C9:27:81:D1:F4:E8:90:04:CB:92:17:C1:90:D8:37:18:2E
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS198125.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.0.233.0/24
85.155.150.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:e7:75:0c:c1:df:9d:dc:4d:c7:48:81:a6:27:ff:7f:72:fd:
a0:2b:af:af:2b:c5:50:f0:35:85:4e:84:71:0b:81:cb:02:2e:
84:7c:85:90:54:a7:3d:f0:cc:d7:a2:8d:15:0b:74:26:e5:f1:
21:e2:94:7b:c7:08:1f:35:e5:9c:66:27:f2:2f:b1:5b:7b:5d:
6c:84:33:88:a1:09:38:d7:bc:20:04:40:1a:6c:32:a3:bc:35:
5e:47:ff:c6:94:7a:48:4b:81:0c:72:28:03:ed:5c:8c:bb:6a:
75:28:6a:f8:03:d2:dd:ef:08:91:fa:e1:b4:29:f5:04:44:c2:
42:dd:66:dc:90:08:4a:e0:44:27:52:a5:8b:b8:86:83:de:c1:
49:2c:dd:07:92:26:35:cc:37:39:b6:f8:db:77:db:70:90:19:
3a:6e:04:54:a9:f7:3d:d0:19:be:fd:e3:7b:e2:50:46:13:c0:
60:73:f7:48:89:d2:75:5d:24:74:92:15:3d:12:cb:4b:2d:4e:
88:ce:58:76:59:1c:f7:91:08:2e:eb:20:b7:1b:d5:c1:82:d2:
b4:05:12:ee:ee:10:12:67:ba:e8:6f:57:04:44:e5:59:1a:18:
93:35:9c:4c:7c:55:ff:af:64:00:d4:4a:21:a1:51:06:db:81:
bd:48:3c:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:18:13 2026 by rpki-client