Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS208328.roa
File: AS208328.roa (raw, json)
Hash identifier: dGEjXStbP42eGKZ7TRAV62W7F02bT2JRQcE0rbCXMUY=
Subject key identifier: 1B:68:8A:CD:4D:D4:0E:AC:39:51:23:19:FE:3A:09:84:E8:51:3C:6D
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 7F07AEF6FD8141AA0648FCF4F0B63E595B72F52F
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS208328.roa
Signing time: Sun 08 Feb 2026 18:42:38 +0000
ROA not before: Sun 08 Feb 2026 18:37:38 +0000
ROA not after: Sun 07 Feb 2027 18:42:38 +0000
asID: 208328
IP address blocks: 85.155.148.0/24 maxlen: 24
85.155.149.0/24 maxlen: 24
85.155.151.0/24 maxlen: 24
2a06:9f42::/32 maxlen: 48
2a0a:6046::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:07:ae:f6:fd:81:41:aa:06:48:fc:f4:f0:b6:3e:59:5b:72:f5:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Feb 8 18:37:38 2026 GMT
Not After : Feb 7 18:42:38 2027 GMT
Subject: CN=1B688ACD4DD40EAC39512319FE3A0984E8513C6D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:42:20:ae:86:b2:e7:6c:d4:03:08:ab:2b:00:
f7:df:10:78:43:30:eb:05:29:ea:d7:7c:96:2b:52:
66:b4:78:1e:23:24:28:05:e5:c2:77:67:a9:38:61:
01:c6:5c:8d:11:20:a7:b6:a3:32:f4:ad:17:f6:99:
53:13:2e:8f:c1:75:51:26:80:1c:85:d0:3b:07:11:
85:61:d0:14:31:41:df:ab:23:70:d4:25:6f:0b:17:
32:42:08:46:81:d6:87:2c:ea:f0:85:d2:8d:60:f0:
24:62:b7:aa:fd:8a:38:1e:46:e4:2f:a9:22:af:68:
ff:cb:f9:5c:17:d8:d3:4c:a6:8c:14:4f:a3:f5:df:
2d:6b:97:93:9e:34:58:00:d1:04:03:5c:10:df:e2:
f0:09:de:6f:7e:41:e0:be:4f:c8:0f:e9:2d:19:01:
04:e8:8b:eb:21:db:dc:1d:fb:0e:9a:79:0c:74:00:
4a:dc:e1:47:27:21:46:01:c5:1c:fe:d0:a0:3a:1b:
49:82:6a:ba:77:5d:37:5d:06:be:6e:46:be:13:7f:
58:8a:f7:90:0b:61:66:dc:d3:ee:34:11:6a:58:a1:
d2:3b:34:7b:a9:85:a7:13:af:49:d4:5b:c3:32:72:
6f:2b:c1:54:87:0c:2b:fa:15:5b:09:44:83:ba:32:
b0:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:68:8A:CD:4D:D4:0E:AC:39:51:23:19:FE:3A:09:84:E8:51:3C:6D
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS208328.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.155.148.0/23
85.155.151.0/24
IPv6:
2a06:9f42::/32
2a0a:6046::/32
Signature Algorithm: sha256WithRSAEncryption
bc:0f:c5:23:1a:b5:35:14:9b:e5:7a:a0:5e:7f:c3:c0:fc:9d:
0d:b0:fe:a1:75:df:6c:66:4e:c0:b6:97:79:65:ec:c1:54:fa:
12:1b:8c:a4:32:19:49:43:e0:be:83:d5:14:5c:de:f0:9c:a6:
ee:fc:b8:ed:bb:be:98:16:6b:0e:4a:8a:55:e4:3c:b0:d4:6e:
4a:fa:80:a2:d4:52:75:55:40:97:fe:12:4e:56:d6:b3:d6:71:
ff:8f:84:17:57:69:1a:ef:29:30:3a:88:23:18:61:e4:76:8d:
d0:87:6f:d8:51:8f:a6:2c:e6:b9:ab:b9:d8:b4:57:af:b1:25:
8d:e7:f4:96:86:b9:0d:c4:15:58:23:94:1d:87:dc:69:85:d5:
61:68:48:85:7d:f0:5a:21:53:83:3a:35:cd:d7:0e:b7:cd:ac:
03:28:7f:6f:0f:1a:85:75:25:b3:d7:79:87:9c:f5:65:89:95:
93:c3:aa:60:c4:73:8b:f9:2f:4a:2f:5a:e7:93:65:06:15:bf:
4c:99:dc:8e:db:cb:a1:fc:76:49:33:7a:c8:a2:96:7c:af:ab:
d0:1f:f7:62:b2:49:4a:2b:06:b4:8a:19:9a:72:53:1f:7d:11:
61:48:45:9a:0f:0a:35:bd:31:21:39:22:6e:08:21:8c:0b:e9:
93:4e:a3:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:22:26 2026 by rpki-client