Route Origin Authorization
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS207491.roa
File: AS207491.roa (raw, json)
Hash identifier: 4zrgA+4HkUJDfJ4IFJnyQI1UJ8xw8+lW10BlInrhDhU=
Subject key identifier: A6:CF:CB:8C:9D:3C:73:D8:7F:E0:4E:90:A5:82:6E:DB:E3:0D:15:E4
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 2388AD7F383E7A01D0060A594C095AF5A71249AD
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS207491.roa
Signing time: Wed 14 Oct 2026 09:59:11 +0000
ROA not before: Wed 14 Oct 2026 09:54:11 +0000
ROA not after: Wed 13 Oct 2027 09:59:11 +0000
asID: 207491
IP address blocks: 185.121.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 09:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:88:ad:7f:38:3e:7a:01:d0:06:0a:59:4c:09:5a:f5:a7:12:49:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Oct 14 09:54:11 2026 GMT
Not After : Oct 13 09:59:11 2027 GMT
Subject: CN=A6CFCB8C9D3C73D87FE04E90A5826EDBE30D15E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:99:94:9c:1c:26:fe:71:74:45:e6:30:33:6f:
9f:74:67:a4:e6:64:c8:fc:dc:78:64:7b:5b:ed:fa:
eb:6d:95:31:f7:11:d9:a6:58:c6:1e:8e:23:92:7f:
e1:9b:4a:10:65:62:86:24:63:83:0f:8b:66:db:85:
c7:b6:2b:a1:f5:07:31:2b:32:89:64:55:40:4b:55:
db:33:4f:e9:41:00:cf:91:ed:07:2f:8d:3f:fc:fe:
6b:18:08:86:e5:22:f6:23:17:3a:9f:43:ab:76:08:
02:3a:08:82:71:a4:79:64:dd:3a:f0:03:db:b1:a7:
01:06:97:36:99:4f:2a:e9:7a:1b:98:4d:a5:8c:82:
b9:cd:03:5b:93:fa:4c:f0:50:cf:da:62:d3:13:cc:
a3:e2:e0:b1:73:c0:df:cd:19:40:63:89:89:9a:6e:
99:5a:bb:49:50:2c:2a:1d:1b:51:09:db:5c:a0:b9:
65:14:91:2b:5b:de:d8:48:9c:c1:e0:d8:f2:4b:2c:
90:80:90:e2:3f:2a:55:ba:e1:08:0d:20:30:65:69:
96:28:8a:bb:ae:c9:ce:eb:83:e9:5a:57:f0:c8:e5:
d2:52:d6:9f:a6:b1:23:61:56:4d:78:c4:7c:4d:01:
21:11:d1:4e:e1:01:03:e1:bd:f3:66:5f:43:b9:57:
34:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:CF:CB:8C:9D:3C:73:D8:7F:E0:4E:90:A5:82:6E:DB:E3:0D:15:E4
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS207491.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.163.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:49:f9:b1:26:f5:af:e8:d9:aa:e1:7b:b9:5b:69:04:5a:ec:
90:62:1f:97:c0:d4:d4:63:d9:1f:c5:3a:49:58:13:d5:07:a6:
ed:78:25:6e:85:df:e6:c6:af:9e:75:c8:5d:c4:52:f1:2a:d1:
a1:f9:0a:45:ce:e7:e4:68:35:5f:aa:2a:9d:ba:81:da:39:98:
70:63:f0:2a:45:f9:64:ec:53:04:04:4f:5b:c7:1c:2d:fb:ee:
a6:f8:c9:3e:7d:fe:98:d2:32:ac:60:bb:2e:79:87:4c:7c:8f:
fb:02:b5:1d:16:7f:82:2f:a9:c8:8a:a9:93:00:e3:c1:e1:0e:
4f:79:11:f0:1e:f3:6d:12:1c:5f:ee:ef:ee:09:07:d8:41:09:
7e:48:24:1d:23:fc:df:b7:e2:f1:80:64:2e:6d:cd:2a:4c:01:
48:bd:e4:4a:2e:3a:79:ab:35:cd:8a:75:25:20:17:1b:c9:4b:
cc:dc:f0:f3:ec:b5:e1:35:c1:4a:27:62:49:cf:d7:2d:54:7d:
4d:3d:74:73:6b:58:16:bf:e4:a7:da:fc:ef:24:cf:42:7f:36:
b7:88:8e:a5:07:54:b4:68:3d:96:59:d1:a2:2b:ea:d9:5a:89:
62:2b:ca:0b:23:42:ab:7e:c7:20:bc:34:af:7c:ad:6c:27:6f:
4d:09:b2:ef
-----BEGIN CERTIFICATE-----
MIIE5TCCA82gAwIBAgIUI4itfzg+egHQBgpZTAla9acSSa0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDE0YjZmY2YyYjJjNjliZTA4NWU5Zjk1OTg3MmRjYmU4
ZWE1NDE3NzAeFw0yNjEwMTQwOTU0MTFaFw0yNzEwMTMwOTU5MTFaMDMxMTAvBgNV
BAMTKEE2Q0ZDQjhDOUQzQzczRDg3RkUwNEU5MEE1ODI2RURCRTMwRDE1RTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCmZScHCb+cXRF5jAzb590Z6Tm
ZMj83Hhke1vt+uttlTH3EdmmWMYejiOSf+GbShBlYoYkY4MPi2bbhce2K6H1BzEr
MolkVUBLVdszT+lBAM+R7QcvjT/8/msYCIblIvYjFzqfQ6t2CAI6CIJxpHlk3Trw
A9uxpwEGlzaZTyrpehuYTaWMgrnNA1uT+kzwUM/aYtMTzKPi4LFzwN/NGUBjiYma
bplau0lQLCodG1EJ21yguWUUkStb3thInMHg2PJLLJCAkOI/KlW64QgNIDBlaZYo
iruuyc7rg+laV/DI5dJS1p+msSNhVk14xHxNASER0U7hAQPhvfNmX0O5VzQxAgMB
AAGjggHvMIIB6zAdBgNVHQ4EFgQUps/LjJ08c9h/4E6QpYJu2+MNFeQwHwYDVR0j
BBgwFoAU0Utvzyssab4IXp+VmHLcvo6lQXcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNy9EMTRCNkZDRjJC
MkM2OUJFMDg1RTlGOTU5ODcyRENCRThFQTU0MTc3LmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMFV0dnp5c3NhYjRJWHAtVm1ITGN2bzZsUVhjLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC83L0FT
MjA3NDkxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAuXmjMA0GCSqGSIb3DQEBCwUAA4IBAQCzSfmxJvWv
6Nmq4Xu5W2kEWuyQYh+XwNTUY9kfxTpJWBPVB6bteCVuhd/mxq+edchdxFLxKtGh
+QpFzufkaDVfqiqduoHaOZhwY/AqRflk7FMEBE9bxxwt++6m+Mk+ff6Y0jKsYLsu
eYdMfI/7ArUdFn+CL6nIiqmTAOPB4Q5PeRHwHvNtEhxf7u/uCQfYQQl+SCQdI/zf
t+LxgGQubc0qTAFIveRKLjp5qzXNinUlIBcbyUvM3PDz7LXhNcFKJ2JJz9ctVH1N
PXRza1gWv+Sn2vzvJM9Cfza3iI6lB1S0aD2WWdGiK+rZWoliK8oLI0KrfscgvDSv
fK1sJ29NCbLv
-----END CERTIFICATE-----
Generated at Tue Nov 10 18:26:34 2026 by rpki-client