Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS199676.roa
File: AS199676.roa (raw, json)
Hash identifier: yewZn9CmLYqx0psuu/g51ad/ZxYSyZrtoMhKa3PpJ/E=
Subject key identifier: 76:30:AB:B9:D4:F5:2D:73:41:F9:DB:8E:70:16:53:C7:FF:F3:BF:FE
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 6BA7573844CF2C1CBB26B26A676BC3ED6633C784
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS199676.roa
Signing time: Thu 04 Jun 2026 15:58:48 +0000
ROA not before: Thu 04 Jun 2026 15:53:48 +0000
ROA not after: Thu 03 Jun 2027 15:58:48 +0000
asID: 199676
IP address blocks: 2a06:a005:1877::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:a7:57:38:44:cf:2c:1c:bb:26:b2:6a:67:6b:c3:ed:66:33:c7:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jun 4 15:53:48 2026 GMT
Not After : Jun 3 15:58:48 2027 GMT
Subject: CN=7630ABB9D4F52D7341F9DB8E701653C7FFF3BFFE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:89:b0:fe:65:cc:cb:dc:f6:fd:09:8f:97:7b:
95:9f:6f:5d:8e:e7:58:b6:a4:f9:f9:bb:84:5c:c8:
c6:50:16:e3:ac:ea:d2:3a:ce:12:b3:2c:4e:73:38:
52:f6:47:64:6f:fc:72:3b:be:3f:10:df:56:0b:42:
ee:49:47:dc:53:72:2e:b4:3e:92:2e:3c:e6:c6:62:
be:12:24:e6:54:80:a8:ad:66:c6:89:04:19:4d:78:
2e:b1:0f:26:27:07:06:c2:0f:49:fc:ae:cb:ff:85:
99:12:13:3b:2d:f2:99:8b:6c:37:5f:34:32:d8:40:
47:b7:a0:31:47:54:f7:f1:63:6f:0b:7c:b3:15:e6:
06:f4:04:a6:2d:52:f0:61:10:ad:51:5b:1c:d0:f2:
78:d7:11:81:5a:67:6c:e9:48:43:9a:ec:3e:7a:90:
87:e1:d1:48:43:91:62:ab:2e:79:77:9a:7c:12:d0:
a5:9b:3e:59:e8:10:6d:31:3a:48:71:0c:15:a9:a7:
53:8c:f9:4b:c4:b7:d4:e9:4a:c9:87:c6:4c:0f:d9:
64:7a:83:15:99:d6:31:d3:61:2e:80:3f:5f:f4:22:
72:cc:e1:6c:b2:99:6a:6b:59:30:87:c4:88:38:c0:
3e:fc:73:97:a9:3d:28:b7:df:82:b7:99:d3:72:fa:
0c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:30:AB:B9:D4:F5:2D:73:41:F9:DB:8E:70:16:53:C7:FF:F3:BF:FE
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS199676.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1877::/48
Signature Algorithm: sha256WithRSAEncryption
7c:9c:8b:24:f7:76:5f:b9:2e:67:4b:7d:c3:ef:5a:41:80:ed:
10:70:e5:b4:c7:f4:db:af:c4:83:2d:38:a3:f8:71:e3:7f:1b:
61:1c:14:59:5b:ac:73:ae:72:4b:fd:61:fe:7a:00:6a:ee:71:
d5:2f:7d:a2:16:cd:94:5a:fb:4b:62:db:71:17:24:f7:27:49:
e4:f6:35:4f:34:0b:94:44:ad:13:16:50:91:69:4a:1d:35:3c:
59:cc:32:aa:e1:e4:07:6c:13:55:d2:ae:e1:dd:1e:7b:d1:e5:
64:a1:7a:a5:a3:c8:83:b9:d7:b9:ae:a0:d3:d5:cb:90:14:33:
77:07:f6:5e:60:9b:d1:0f:43:e9:09:59:37:f6:c5:16:48:49:
4d:32:18:4a:7d:9c:22:48:51:53:c1:e8:fa:59:90:b8:a5:a2:
0a:4c:3a:8f:bd:80:6a:72:c2:ee:16:89:0e:b1:5b:7d:2a:e8:
ab:5a:bf:15:b9:b3:cd:27:24:7c:67:8d:a6:29:13:32:6e:64:
fb:52:22:01:98:b6:64:16:b5:42:dc:67:12:df:c0:56:ee:04:
5c:94:93:94:b9:7c:05:76:d0:1e:30:61:2b:55:e4:25:65:24:
84:9f:27:1c:a5:d3:d7:90:f0:36:08:89:15:a4:58:83:0f:23:
bb:5c:07:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:58:04 2026 by rpki-client