Route Origin Authorization
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS204464.roa
File: AS204464.roa (raw, json)
Hash identifier: qmm1L6DophZXzcu3yKTesW57y/CDfoR1RP7Iu7lhkG8=
Subject key identifier: E1:30:D9:87:FC:58:74:52:09:21:1E:9C:50:A8:E5:49:19:12:D9:6E
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 2790F6F0D9B19670F4A209ABA40CDA1D8EFB5ADF
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS204464.roa
Signing time: Wed 02 Sep 2026 18:54:28 +0000
ROA not before: Wed 02 Sep 2026 18:49:28 +0000
ROA not after: Wed 01 Sep 2027 18:54:28 +0000
asID: 204464
IP address blocks: 85.155.226.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:90:f6:f0:d9:b1:96:70:f4:a2:09:ab:a4:0c:da:1d:8e:fb:5a:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Sep 2 18:49:28 2026 GMT
Not After : Sep 1 18:54:28 2027 GMT
Subject: CN=E130D987FC58745209211E9C50A8E5491912D96E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:72:ba:e2:18:67:8a:73:05:a0:a0:19:74:8f:
23:55:8a:53:b2:7b:0a:f1:fd:4c:3d:5b:67:0b:30:
8f:98:1e:57:ee:d7:9c:d7:48:6f:0e:58:dd:4d:e8:
cc:7c:50:42:a1:4c:fa:41:78:4c:24:39:51:b8:24:
69:23:34:f5:c0:09:2c:8b:01:63:04:14:2d:7d:c4:
ba:97:10:36:2c:96:80:6e:97:fe:fe:b6:5a:99:e9:
64:8b:07:cf:d0:0d:a1:a0:9e:c5:6f:a4:93:87:d3:
d8:98:ce:83:1a:00:d8:9e:b3:9c:36:dc:9e:47:35:
46:17:c4:a2:cf:16:a0:35:37:bd:97:97:f6:5a:ac:
6d:39:2c:2d:1d:f5:ab:77:74:b2:22:ae:ef:5b:ba:
e5:a4:98:95:ed:59:70:54:af:22:e7:a4:d6:23:dd:
0f:77:65:16:ae:7b:a8:13:4d:2d:18:a5:c1:eb:b4:
09:df:5a:bc:1e:03:ce:01:69:1e:63:9f:83:66:b9:
a7:58:d3:33:9b:7d:67:54:fa:be:03:03:fe:f6:54:
79:4a:98:c7:6b:ab:85:ff:1c:34:08:3b:11:f2:08:
c8:8b:60:36:3b:4d:25:41:98:0b:3e:9c:b4:a4:d6:
c3:d8:ab:22:d5:2c:5c:6a:b4:9d:5e:cc:7c:5d:d2:
c8:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:30:D9:87:FC:58:74:52:09:21:1E:9C:50:A8:E5:49:19:12:D9:6E
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS204464.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.155.226.0/23
Signature Algorithm: sha256WithRSAEncryption
3f:9d:01:24:c3:fb:85:52:7b:80:24:e4:c8:1c:33:e9:f5:30:
3e:28:1e:60:78:9f:df:3c:eb:ac:a6:4a:3e:bb:97:7a:1f:00:
fd:35:4f:64:ea:d3:5b:2a:11:e4:8f:b0:45:3e:f1:34:4d:c4:
9e:3f:7f:12:b8:68:b7:8d:f7:67:8f:ac:34:c4:f4:dd:f3:ef:
79:4c:a6:57:3a:ff:db:20:93:42:81:94:53:23:36:2d:3f:6c:
fb:bb:f8:b6:69:5d:ed:68:c8:bf:86:42:06:31:c6:b0:0c:27:
90:c9:91:88:be:00:e6:34:29:39:f2:fd:7e:74:09:38:f1:10:
40:f5:77:8d:b3:7d:f9:74:ab:77:bd:28:31:89:66:92:49:67:
72:0b:a1:77:80:26:10:98:ad:ce:0e:ca:94:8d:cd:36:0c:1a:
21:e0:e1:87:c7:99:ec:13:29:44:05:d9:40:4e:a8:76:b5:d1:
55:e2:59:27:b6:16:b2:5b:89:10:5a:b3:50:40:1b:06:d6:61:
02:40:4f:1f:03:93:f1:a2:f2:27:90:77:20:1b:ac:bc:f1:cb:
16:7a:c7:2a:32:50:9d:2e:03:88:e7:b4:8d:5e:59:ba:92:e7:
19:57:89:89:76:60:9c:a8:7a:7d:92:a4:23:bb:79:f4:04:c8:
cf:02:48:b8
-----BEGIN CERTIFICATE-----
MIIE5TCCA82gAwIBAgIUJ5D28NmxlnD0ogmrpAzaHY77Wt8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDE0YjZmY2YyYjJjNjliZTA4NWU5Zjk1OTg3MmRjYmU4
ZWE1NDE3NzAeFw0yNjA5MDIxODQ5MjhaFw0yNzA5MDExODU0MjhaMDMxMTAvBgNV
BAMTKEUxMzBEOTg3RkM1ODc0NTIwOTIxMUU5QzUwQThFNTQ5MTkxMkQ5NkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCacrriGGeKcwWgoBl0jyNVilOy
ewrx/Uw9W2cLMI+YHlfu15zXSG8OWN1N6Mx8UEKhTPpBeEwkOVG4JGkjNPXACSyL
AWMEFC19xLqXEDYsloBul/7+tlqZ6WSLB8/QDaGgnsVvpJOH09iYzoMaANies5w2
3J5HNUYXxKLPFqA1N72Xl/ZarG05LC0d9at3dLIiru9buuWkmJXtWXBUryLnpNYj
3Q93ZRaue6gTTS0YpcHrtAnfWrweA84BaR5jn4NmuadY0zObfWdU+r4DA/72VHlK
mMdrq4X/HDQIOxHyCMiLYDY7TSVBmAs+nLSk1sPYqyLVLFxqtJ1ezHxd0shLAgMB
AAGjggHvMIIB6zAdBgNVHQ4EFgQU4TDZh/xYdFIJIR6cUKjlSRkS2W4wHwYDVR0j
BBgwFoAU0Utvzyssab4IXp+VmHLcvo6lQXcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNy9EMTRCNkZDRjJC
MkM2OUJFMDg1RTlGOTU5ODcyRENCRThFQTU0MTc3LmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMFV0dnp5c3NhYjRJWHAtVm1ITGN2bzZsUVhjLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC83L0FT
MjA0NDY0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBVZviMA0GCSqGSIb3DQEBCwUAA4IBAQA/nQEkw/uF
UnuAJOTIHDPp9TA+KB5geJ/fPOuspko+u5d6HwD9NU9k6tNbKhHkj7BFPvE0TcSe
P38SuGi3jfdnj6w0xPTd8+95TKZXOv/bIJNCgZRTIzYtP2z7u/i2aV3taMi/hkIG
McawDCeQyZGIvgDmNCk58v1+dAk48RBA9XeNs335dKt3vSgxiWaSSWdyC6F3gCYQ
mK3ODsqUjc02DBoh4OGHx5nsEylEBdlATqh2tdFV4lknthayW4kQWrNQQBsG1mEC
QE8fA5PxovInkHcgG6y88csWescqMlCdLgOI57SNXlm6kucZV4mJdmCcqHp9kqQj
u3n0BMjPAki4
-----END CERTIFICATE-----
Generated at Mon Sep 21 03:44:23 2026 by rpki-client