Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS210384.roa
File: AS210384.roa (raw, json)
Hash identifier: GDRtMamejVuwgZJVGa7BCpGj8M+3UfFCIm4s5Hg4mhI=
Subject key identifier: BB:47:9C:70:85:60:F7:78:9C:56:79:1B:BB:C4:81:E2:7F:AE:E3:02
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 1C514AD9BCAE53310F4D38090FD751BD9BF53E65
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS210384.roa
Signing time: Thu 04 Jun 2026 15:58:53 +0000
ROA not before: Thu 04 Jun 2026 15:53:53 +0000
ROA not after: Thu 03 Jun 2027 15:58:53 +0000
asID: 210384
IP address blocks: 2a06:a001:a100::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:51:4a:d9:bc:ae:53:31:0f:4d:38:09:0f:d7:51:bd:9b:f5:3e:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jun 4 15:53:53 2026 GMT
Not After : Jun 3 15:58:53 2027 GMT
Subject: CN=BB479C708560F7789C56791BBBC481E27FAEE302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:9a:15:ec:2c:6c:d6:cc:7e:b0:ca:7d:fa:29:
1d:30:84:9d:55:c1:8a:92:0b:f0:7c:ee:b7:14:91:
6f:97:ed:f6:97:fc:e0:b1:76:27:b6:ba:34:07:fd:
40:2e:81:62:a6:47:10:36:47:6c:8e:8d:f3:41:35:
2e:d2:32:27:aa:df:2c:42:b5:c9:73:ad:ac:a6:17:
33:a2:86:b6:ee:9a:a7:24:1d:63:b0:31:49:00:4c:
af:e5:ae:56:a1:dc:88:76:11:96:f5:68:42:0a:a8:
dd:2b:97:fc:85:65:ad:bc:a6:91:45:73:e3:1b:31:
a5:45:97:ad:1f:aa:ed:29:a5:60:c2:a9:84:66:e7:
f1:66:f6:82:6c:b4:8b:82:bd:0a:ed:72:84:99:55:
f1:c2:b9:26:8a:1d:da:dd:d5:77:65:15:d3:71:67:
f4:d5:1a:b5:06:29:b8:7b:d8:bc:4a:6b:4e:c9:4c:
c7:10:45:6f:90:cd:d0:be:46:89:35:16:05:71:63:
e1:6c:8d:c0:27:7f:7c:17:56:bb:b9:d0:45:a1:73:
8c:eb:4b:01:45:a2:23:fe:bd:f5:28:84:5b:a3:7d:
14:25:50:c5:cc:c3:25:ef:73:fc:4e:e4:df:42:8b:
70:4e:f0:86:5f:2f:a1:3b:62:7b:48:00:2b:1d:14:
1e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:47:9C:70:85:60:F7:78:9C:56:79:1B:BB:C4:81:E2:7F:AE:E3:02
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS210384.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a001:a100::/44
Signature Algorithm: sha256WithRSAEncryption
0d:87:4a:76:f3:72:64:6c:52:05:c4:18:00:34:21:c6:dc:f1:
17:76:6d:53:25:27:cc:06:b8:6d:4f:9e:4e:3e:b1:98:b2:20:
34:53:f4:52:95:02:d5:f8:e6:cc:02:4f:43:70:b0:4a:ca:92:
56:58:58:6b:bc:5f:a6:04:b5:1d:bc:0a:0f:f9:50:2a:d8:45:
d7:85:f4:68:15:99:8c:b4:e2:70:a4:67:2b:8d:d3:81:68:30:
f9:d5:7e:a9:8d:60:a4:40:44:5a:7b:35:bd:0e:1d:7f:92:e1:
2d:f4:b9:ad:77:e9:f2:36:2d:9e:d2:c2:e4:c7:0c:ee:71:d9:
ea:43:d1:c8:20:8e:67:4a:22:cb:26:50:5f:62:96:c7:34:f4:
59:24:ab:b3:5c:da:be:49:40:e1:a5:80:43:2f:e4:52:0e:4b:
92:31:06:5a:8e:77:e9:20:f2:a4:06:60:e3:e3:7b:76:f7:cc:
73:26:a3:52:92:88:29:b6:51:90:99:49:a1:98:54:a4:9f:6f:
83:25:3a:7b:cd:8d:e4:17:46:38:93:ed:fe:79:58:d9:f8:62:
1d:99:c8:77:83:38:1e:15:4d:be:92:a0:9a:6d:92:98:fa:6f:
40:1e:3f:18:d4:02:45:97:4b:1f:8e:2e:79:8f:e4:ca:e5:b2:
68:6b:0e:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:58:09 2026 by rpki-client