Route Origin Authorization
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS204044.roa
File: AS204044.roa (raw, json)
Hash identifier: grzFHHbHSXaG0/Jv1VzLN8B3uqP4pM0r8SffLLLiJng=
Subject key identifier: C7:3F:A5:95:F4:19:82:B0:89:A1:E2:B3:84:55:6E:5A:D0:0A:61:E1
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 23A55FEB6BE15AB43A2D8957FF52EDF1D52B575F
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS204044.roa
Signing time: Wed 28 Oct 2026 20:59:12 +0000
ROA not before: Wed 28 Oct 2026 20:54:12 +0000
ROA not after: Wed 27 Oct 2027 20:59:12 +0000
asID: 204044
IP address blocks: 185.90.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Nov 2026 10:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:a5:5f:eb:6b:e1:5a:b4:3a:2d:89:57:ff:52:ed:f1:d5:2b:57:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Oct 28 20:54:12 2026 GMT
Not After : Oct 27 20:59:12 2027 GMT
Subject: CN=C73FA595F41982B089A1E2B384556E5AD00A61E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5e:2f:08:d7:e1:16:a0:2c:d9:f8:bd:0f:a4:
a2:dc:7d:94:68:9d:4c:45:c9:71:71:88:c8:86:74:
cb:56:e2:66:f3:d7:83:64:9c:58:cb:84:12:0e:84:
11:56:2a:d2:a4:e6:10:a2:d1:4b:bd:40:3c:6f:4d:
77:39:09:5f:e0:c8:20:d3:66:68:3d:7c:35:b2:5c:
17:7f:11:b4:3f:92:72:b2:a3:7b:8a:b3:b6:b3:a6:
36:36:3e:8f:d5:e7:ab:8a:f4:7a:03:d2:64:9e:38:
51:68:6e:a0:ea:e8:fa:e4:84:cd:1b:2e:ed:7f:35:
53:3b:a0:35:22:60:85:0e:5d:99:df:19:f8:1a:29:
ef:9e:d5:74:33:32:b5:ae:4e:96:e9:56:9c:4b:6f:
d6:61:75:09:9e:55:9c:e8:dd:d3:7d:a2:c1:58:5a:
a5:56:80:41:25:25:5b:0a:e9:19:20:e9:42:ec:15:
19:1c:a1:f3:68:9e:6e:2e:d5:83:79:cc:b3:f7:4c:
bd:0e:a3:f7:96:aa:2e:d9:1b:cd:1d:19:a5:9f:7f:
fd:67:69:60:18:ac:b4:6d:7f:09:4d:9d:2d:bc:ba:
9f:9e:8d:f3:6d:a1:af:a0:57:e9:66:f6:c5:61:43:
f7:50:f1:e8:b0:60:32:c1:41:e4:09:36:26:05:e4:
1b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:3F:A5:95:F4:19:82:B0:89:A1:E2:B3:84:55:6E:5A:D0:0A:61:E1
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS204044.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.90.62.0/24
Signature Algorithm: sha256WithRSAEncryption
90:9d:7c:74:fd:66:79:72:95:b6:79:e5:ec:75:d5:54:2a:ed:
5e:42:c2:6d:4f:1e:cb:11:94:9c:f4:5d:ca:82:85:71:27:6b:
93:a2:df:85:7a:3d:46:8c:8a:15:05:6b:60:6e:7b:df:31:67:
f9:73:c2:88:7d:eb:da:02:87:1d:29:e7:69:83:ad:2b:c6:80:
e3:35:a5:94:64:9c:2b:7d:31:d8:28:a4:2d:a6:cf:1a:74:57:
1b:73:09:83:08:59:61:25:13:8a:76:17:cb:3c:52:4e:fb:bf:
83:c8:aa:5f:d5:34:9f:ff:32:5f:41:a5:fe:4e:3f:52:4e:57:
f1:9c:2e:1d:89:f4:7b:a8:5e:ab:8b:f4:65:ba:4e:27:13:a5:
2d:24:5a:0a:20:b4:91:a8:d6:3e:55:af:2e:c6:31:d4:29:40:
fc:ab:9d:48:3e:8f:c4:a7:1c:b2:a2:3e:51:32:3f:9a:eb:17:
09:20:09:ee:b6:f5:f9:16:1f:17:1d:cf:1a:d8:b6:79:bc:92:
d8:38:23:9f:e3:a1:d0:4d:fc:a3:e3:19:ee:4b:c4:8c:f3:e6:
e7:1a:01:52:07:d9:1a:d4:5e:0e:57:ee:6c:eb:24:e8:96:a2:
2d:f0:e5:8a:a8:75:90:3c:47:5a:cd:01:a5:35:79:11:7d:d5:
8b:0a:0c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 7 17:37:55 2026 by rpki-client