Route Origin Authorization
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS208915.roa
File: AS208915.roa (raw, json)
Hash identifier: ynteYad0UqScPZAzRXB6C7DnRPPp59K5X4Y61cxGKVQ=
Subject key identifier: 5D:52:46:F4:23:22:EE:8E:7E:BC:F7:64:3C:59:92:17:87:85:60:C3
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 5BCAEC46693134F9D5F2CAC42247FC36D018D9AF
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS208915.roa
Signing time: Sun 06 Sep 2026 15:05:48 +0000
ROA not before: Sun 06 Sep 2026 15:00:48 +0000
ROA not after: Sun 05 Sep 2027 15:05:48 +0000
asID: 208915
IP address blocks: 136.148.75.0/24 maxlen: 24
206.53.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:ca:ec:46:69:31:34:f9:d5:f2:ca:c4:22:47:fc:36:d0:18:d9:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Sep 6 15:00:48 2026 GMT
Not After : Sep 5 15:05:48 2027 GMT
Subject: CN=5D5246F42322EE8E7EBCF7643C599217878560C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:87:73:df:c9:a2:a5:87:59:c6:98:ad:8b:91:
9f:3c:aa:53:c0:18:10:29:f3:ec:da:35:88:66:8a:
60:51:86:ef:b5:80:ff:ef:e7:2c:2e:c3:23:e9:b4:
64:7b:e6:ea:52:21:40:bc:5d:65:df:53:ed:3c:b2:
02:ae:e1:e7:ca:25:17:49:58:4d:ae:7e:19:03:73:
1a:a1:d2:f1:15:d1:46:cb:4d:d8:6c:d9:bb:d7:86:
4c:c6:f9:13:51:40:33:1a:81:40:b3:b0:d1:54:10:
fe:00:13:a3:cc:a6:9d:f0:4e:83:f3:a2:14:73:ed:
0d:dc:c6:c7:5e:00:c6:c2:5a:63:5f:f4:c3:59:1c:
5e:78:1c:12:a1:0f:c7:d5:27:ad:c0:eb:32:59:5c:
1d:ba:75:72:07:d7:f9:f4:db:5d:2e:98:2d:3e:60:
ee:88:0f:70:13:2c:d5:f9:73:98:98:13:5a:1b:7d:
1d:ca:c2:c5:90:eb:ef:09:e4:b2:f0:55:88:b4:0a:
7c:43:8d:2c:2b:54:11:1a:32:f5:ef:ac:83:f9:19:
af:ae:91:d4:ff:08:2f:7c:80:b8:32:89:45:f4:e7:
56:51:0b:b2:95:aa:f9:4b:fa:1e:55:e5:b7:7d:0c:
f1:9e:b6:94:ed:88:9e:0e:56:4e:48:81:01:94:f0:
09:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:52:46:F4:23:22:EE:8E:7E:BC:F7:64:3C:59:92:17:87:85:60:C3
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS208915.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
136.148.75.0/24
206.53.0.0/24
Signature Algorithm: sha256WithRSAEncryption
30:19:b1:9e:dd:d2:fb:a7:d6:90:42:03:e2:db:9f:56:04:82:
d8:3f:2e:50:74:32:1e:c3:85:19:b0:ad:bc:70:bb:ea:c7:4c:
7f:05:b5:42:ff:d2:a9:3c:24:c7:1a:8b:20:f1:c3:47:f4:c5:
39:05:fb:8a:30:e8:c4:29:20:cb:a5:f3:41:a5:15:5c:4f:a9:
99:42:d4:5e:19:78:b0:44:eb:07:26:0e:3d:08:ec:f5:c9:51:
d3:2a:70:3c:8e:b5:8a:2d:64:b3:b2:fd:a9:dd:38:67:d6:03:
04:be:5a:87:0a:03:25:d9:27:82:0d:1d:90:d1:2a:0d:d2:5e:
38:b6:a4:aa:ff:8f:74:47:5a:38:e1:2a:1b:7f:57:ec:48:b8:
3f:bb:89:c6:c3:05:e5:97:1b:59:5c:54:b0:d4:4b:84:64:42:
ae:32:77:18:eb:da:8d:b6:b2:13:f0:60:07:41:83:3c:e1:a7:
20:89:d0:d4:ba:91:75:a9:bb:6d:33:7d:36:5b:1f:97:82:9a:
68:5b:7e:7b:bd:cc:b3:ea:69:48:31:99:14:6b:5f:6c:06:2c:
14:6d:d8:50:64:dd:a3:b9:7e:c2:b3:fb:fa:5c:62:a9:cd:0a:
17:9d:7b:90:e1:c5:04:2b:24:d5:9e:a1:c6:13:81:15:20:1e:
72:7a:b0:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 04:19:43 2026 by rpki-client