Route Origin Authorization
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS208972.roa
File: AS208972.roa (raw, json)
Hash identifier: qqk5zyTQdueuBvpPDWp4kQGkfGiNHE9e8mpd/eZjZvg=
Subject key identifier: 61:D4:8E:D3:8F:0B:0A:C2:28:56:88:7A:4E:40:41:2B:9F:09:0D:FD
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 460C2A3A5F20CA0322AD3BBA228D008E2948AAA3
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS208972.roa
Signing time: Sun 08 Nov 2026 21:41:33 +0000
ROA not before: Sun 08 Nov 2026 21:36:33 +0000
ROA not after: Sun 07 Nov 2027 21:41:33 +0000
asID: 208972
IP address blocks: 111.235.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 22:05:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:0c:2a:3a:5f:20:ca:03:22:ad:3b:ba:22:8d:00:8e:29:48:aa:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Nov 8 21:36:33 2026 GMT
Not After : Nov 7 21:41:33 2027 GMT
Subject: CN=61D48ED38F0B0AC22856887A4E40412B9F090DFD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b9:ce:b8:50:93:c9:b6:82:31:f9:90:e7:78:
d1:a1:69:cf:50:b3:c2:b6:19:3d:dd:76:3b:6b:43:
09:3a:b4:01:8c:9d:d1:1b:d0:ee:33:0b:dc:ec:cd:
c1:db:b5:4c:b6:04:1b:33:9a:1c:9a:39:fa:c8:55:
c8:c0:25:e0:38:65:d0:99:25:d8:b7:80:92:f9:da:
b3:07:99:04:42:4f:fd:0c:45:23:bb:d6:cc:6c:45:
7b:aa:3e:35:94:1a:84:b5:49:17:92:49:be:43:3c:
45:18:a5:96:62:0c:71:ef:26:eb:b7:74:f2:3b:14:
cb:69:2c:9e:38:0d:df:78:15:83:ac:dc:a5:83:f7:
1b:48:8c:0c:c5:a5:a8:23:57:ec:7d:04:3c:77:7c:
41:ea:a9:5d:26:d4:a8:80:7f:4a:41:ff:0a:1a:2e:
fd:3d:b4:d8:60:24:01:7d:ed:47:1e:68:dd:b3:3e:
1f:c9:ca:51:cd:6c:c7:46:72:86:9b:08:99:77:cd:
e0:6a:9a:7b:37:be:39:9e:5f:3f:72:3e:f0:40:73:
74:72:a2:f8:b0:3f:c6:1f:58:d3:69:63:c8:44:51:
03:8e:fc:d7:df:c3:36:3d:0e:a6:74:cd:14:21:a6:
e3:47:dd:5e:a5:e2:98:c3:d2:38:7f:af:dd:70:57:
49:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:D4:8E:D3:8F:0B:0A:C2:28:56:88:7A:4E:40:41:2B:9F:09:0D:FD
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS208972.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
111.235.150.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:58:47:8b:d1:7b:2e:52:c9:3d:96:82:05:4a:b9:29:52:d7:
5e:ff:a8:67:1c:81:e9:ea:b6:c0:02:de:a3:e3:87:3a:a2:65:
3d:a7:d1:1d:83:3b:7e:d6:37:bb:47:79:3f:1f:ad:9c:1b:f3:
6e:39:9a:31:7f:66:af:13:f4:cb:24:b1:e4:43:09:23:cf:41:
56:49:7c:30:ef:a6:b9:04:4c:64:11:d6:89:84:b6:f5:01:60:
58:07:20:9b:4a:83:10:be:57:f3:2b:53:19:a5:73:44:30:e9:
a2:2f:6d:98:7d:57:da:d9:7d:ec:22:9b:0f:26:08:68:44:30:
9a:5e:58:2b:ce:89:08:9c:0b:09:65:89:69:77:43:99:62:f5:
88:e8:92:ac:ff:84:bc:6b:1f:be:fc:f5:4b:26:ce:9c:ab:9a:
37:13:fa:28:6b:50:df:14:ee:b4:1f:23:45:e5:65:87:5b:b9:
67:b0:ab:f6:e1:c2:e7:c9:9f:ff:20:90:75:f4:30:b2:ea:8e:
6a:f8:4a:28:a0:cb:fa:11:2a:f5:42:b6:9e:8f:2d:40:4b:9d:
91:ea:1e:47:27:71:e0:43:b3:8a:9b:97:60:58:e6:d7:cc:b5:
97:a8:06:c9:72:53:7a:a6:b4:81:1f:36:36:0a:31:5b:1b:0f:
2e:7b:ff:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 09:09:47 2026 by rpki-client