Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS200879.roa
File: AS200879.roa (raw, json)
Hash identifier: u4M7R8yotpLHetDdptj8fn6w49lGiYS4XwHT06aRTgk=
Subject key identifier: F0:20:6B:DD:78:48:D1:2D:C3:C4:08:E7:41:DD:EB:30:54:B0:47:F9
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 38F290C9A587E8D558855B1FC5BEE1130892EED3
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS200879.roa
Signing time: Thu 04 Jun 2026 15:58:48 +0000
ROA not before: Thu 04 Jun 2026 15:53:48 +0000
ROA not after: Thu 03 Jun 2027 15:58:48 +0000
asID: 200879
IP address blocks: 2a06:a005:1d51::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:f2:90:c9:a5:87:e8:d5:58:85:5b:1f:c5:be:e1:13:08:92:ee:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jun 4 15:53:48 2026 GMT
Not After : Jun 3 15:58:48 2027 GMT
Subject: CN=F0206BDD7848D12DC3C408E741DDEB3054B047F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:81:ad:54:ee:20:e5:2e:89:37:6a:ca:60:3c:
f8:f8:a7:83:0c:55:89:1c:66:6b:db:4b:f6:5a:e3:
b0:44:39:4a:6c:dc:6b:09:5b:32:79:a4:d6:e5:c5:
db:ee:77:b9:4f:f8:c1:b9:8e:ef:84:ab:04:6f:9f:
76:b0:be:e5:56:52:6d:de:8f:6c:2e:dc:86:6f:ca:
a9:4d:92:e0:c4:53:4d:f3:80:02:5b:ed:ea:d1:ae:
30:42:12:5d:84:55:0f:e6:1c:ea:31:4d:14:5e:a6:
dd:02:de:00:8d:b9:43:96:6b:22:4e:40:a7:df:03:
f7:87:77:3d:7d:0d:c3:12:a7:93:fd:4f:c5:7f:f9:
c0:f0:58:f4:e5:fd:01:53:8f:67:7b:fa:1b:b7:d3:
8e:83:63:79:b2:50:5b:33:97:67:d9:21:b8:f8:7f:
7a:2f:98:60:df:2f:4d:d4:bb:d0:c0:04:f7:0c:e9:
75:19:c4:e2:b1:8e:4c:ee:bc:b8:33:1b:8d:2f:65:
c3:74:75:5e:60:32:92:56:93:c1:48:2b:93:7f:9e:
11:d8:f8:7a:e2:f6:95:5f:a1:2f:a8:21:97:87:5c:
7a:ad:bf:15:66:5d:7c:50:66:89:f6:4c:f5:9f:f6:
23:14:53:63:88:5e:8e:92:13:b4:03:d6:57:00:93:
6d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:20:6B:DD:78:48:D1:2D:C3:C4:08:E7:41:DD:EB:30:54:B0:47:F9
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS200879.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1d51::/48
Signature Algorithm: sha256WithRSAEncryption
7c:22:47:18:99:8a:1a:5c:38:d5:dc:8a:2f:c0:b4:eb:72:e8:
77:5c:04:2d:39:58:39:1a:89:15:d6:db:b7:06:2d:a8:10:37:
91:e6:84:ed:44:72:a1:19:ca:11:8b:a3:c7:0e:6d:85:3a:5f:
31:42:d8:8c:66:af:de:4e:e8:8d:4a:a6:f8:90:f2:d3:b0:e2:
55:5c:84:cb:84:17:ec:99:df:1b:90:3a:8e:00:52:27:35:cf:
9d:92:50:34:be:a7:18:73:c3:bd:b5:6f:20:70:6e:44:3f:df:
ea:c8:6b:c7:d9:0e:82:a6:e8:46:d8:54:a3:5b:26:c1:cb:c0:
9c:d5:77:e7:79:47:c1:63:3e:2e:1d:c4:72:5c:2b:85:56:18:
dc:ca:c2:7a:9d:0e:c9:b1:7b:1c:6a:a4:f8:2e:55:1c:09:e4:
da:fe:02:13:87:9a:63:27:ff:26:f4:e8:16:32:22:20:3a:bc:
42:d2:96:ed:40:a5:ae:e9:a3:0e:7c:ad:e1:3b:27:c8:81:53:
32:c4:9e:ab:72:52:3e:35:ae:27:8f:d4:3c:35:90:96:21:ae:
9f:50:06:26:e3:de:a8:e9:94:be:51:c2:9b:6b:8d:d9:16:02:
91:e5:8f:b8:28:3b:87:bc:31:02:86:4b:75:f5:1f:67:ca:a8:
b6:9c:79:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:58:11 2026 by rpki-client