Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS211151.roa
File: AS211151.roa (raw, json)
Hash identifier: iLWurY+gRxa7+VY9dXoTtBpmIMjpZ4xC4byeg+aBW+s=
Subject key identifier: FF:80:2E:FB:BB:DF:AB:B4:A8:00:E7:01:5D:F6:40:CD:03:D0:55:49
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 690F661730E0594888B70991B3B4E8111A0B68FA
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS211151.roa
Signing time: Thu 04 Jun 2026 15:58:47 +0000
ROA not before: Thu 04 Jun 2026 15:53:47 +0000
ROA not after: Thu 03 Jun 2027 15:58:47 +0000
asID: 211151
IP address blocks: 2a06:a005:1d53::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:0f:66:17:30:e0:59:48:88:b7:09:91:b3:b4:e8:11:1a:0b:68:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jun 4 15:53:47 2026 GMT
Not After : Jun 3 15:58:47 2027 GMT
Subject: CN=FF802EFBBBDFABB4A800E7015DF640CD03D05549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2d:1a:4d:9a:0a:e8:8d:db:8d:97:5b:53:f8:
a0:f9:33:c5:f9:cf:bf:89:20:d9:17:20:26:67:9f:
d4:f7:63:e1:55:7a:c7:c7:f8:cb:72:c4:6a:83:bb:
b6:bd:40:9f:c3:1b:3f:4e:6d:4f:6b:c2:84:ca:ad:
7d:3f:cb:a5:74:74:7a:f5:dd:68:fc:bc:17:a2:b7:
68:23:ae:2b:5d:4a:08:c7:c9:c3:0a:e3:52:aa:ae:
8b:30:a1:11:e3:fa:aa:04:06:5a:91:26:33:a1:73:
5d:d7:fb:2e:e0:7e:a0:f2:9d:a3:9f:62:b3:23:9d:
46:9e:e3:5a:2a:46:00:93:43:2a:84:90:5f:ae:00:
52:f3:36:88:0c:d6:e6:b5:32:1f:7b:02:e1:55:1f:
f0:a1:e1:0d:c2:2b:f6:27:94:f0:aa:ae:3e:37:b5:
4a:19:d1:67:86:04:da:0f:cf:e8:8e:9c:31:20:5c:
17:69:e2:d5:62:b1:56:b4:3e:ce:ae:bd:53:ca:92:
20:f5:6e:82:8a:93:5c:21:73:49:19:a4:a7:98:92:
a7:e4:6b:f1:50:ec:5c:89:fa:96:52:11:4f:bb:80:
b7:9c:ff:38:3d:c0:68:7d:30:f0:7c:6f:4b:70:57:
e2:ae:8e:52:de:b9:7b:be:03:f9:42:94:6b:56:fc:
08:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:80:2E:FB:BB:DF:AB:B4:A8:00:E7:01:5D:F6:40:CD:03:D0:55:49
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS211151.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1d53::/48
Signature Algorithm: sha256WithRSAEncryption
16:1f:79:1c:f0:29:d8:6d:90:29:81:14:4b:54:7e:ca:89:36:
fb:74:99:54:da:c7:10:95:a5:78:3e:79:9a:6f:86:da:33:1e:
13:24:00:86:cb:31:4c:5c:7e:56:0d:27:12:e2:bd:4d:f6:7f:
fc:d6:3d:01:9e:42:f0:6c:d3:ba:7e:d6:0e:3e:ad:75:bc:2b:
20:12:1e:c6:91:0e:b3:4a:22:7c:cb:fc:90:d7:84:77:ff:8f:
61:49:e9:eb:96:b6:a3:eb:c4:ff:5d:75:74:91:9f:11:4f:9c:
a9:21:e5:02:b2:6d:34:05:f4:54:4b:c3:0b:db:f8:a4:79:c3:
de:d7:75:a8:cb:80:6d:55:f1:46:b8:db:da:bb:bd:63:6b:a6:
f4:a0:62:a6:bd:99:31:a7:49:b5:5a:91:d8:0a:76:aa:6f:bc:
1f:cf:44:e5:c1:e7:7e:20:9d:37:1d:6b:f5:82:9e:ce:ac:93:
06:5c:7c:2d:2e:b4:41:4a:7f:39:a7:9d:8e:c2:c1:23:9e:8c:
0b:77:bd:c5:55:50:28:ab:db:24:e8:bc:b4:7d:7c:78:4e:88:
57:54:14:40:40:0e:e9:34:00:8e:b7:de:d0:8f:5f:7e:a3:6a:
3e:7f:05:68:cd:98:53:35:3c:6f:4e:d5:b3:69:97:99:33:3e:
79:1b:01:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:58:13 2026 by rpki-client