Route Origin Authorization
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS211305.roa
File: AS211305.roa (raw, json)
Hash identifier: lyBMpVLxXbQU4bmpBJl8umTka5zS7/GEkVTTr/2yAMw=
Subject key identifier: C6:FD:81:D8:1D:78:A3:DA:5B:AA:0B:B0:3E:10:ED:22:BB:EF:13:0C
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 5B17ECB559590DD56A8AEDE236E85A580218C148
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS211305.roa
Signing time: Mon 02 Nov 2026 23:59:12 +0000
ROA not before: Mon 02 Nov 2026 23:54:12 +0000
ROA not after: Mon 01 Nov 2027 23:59:12 +0000
asID: 211305
IP address blocks: 85.155.127.0/24 maxlen: 24
103.204.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Nov 2026 05:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:17:ec:b5:59:59:0d:d5:6a:8a:ed:e2:36:e8:5a:58:02:18:c1:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Nov 2 23:54:12 2026 GMT
Not After : Nov 1 23:59:12 2027 GMT
Subject: CN=C6FD81D81D78A3DA5BAA0BB03E10ED22BBEF130C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b5:53:01:6e:f0:07:de:e9:47:dd:d4:2b:90:
d4:99:c6:66:92:59:28:75:39:09:85:cc:57:bf:e5:
3e:6a:30:2c:8f:1d:96:c1:31:fb:0f:33:1c:92:50:
61:fe:d6:7e:3c:fc:23:00:84:1c:c3:59:ab:32:5d:
38:de:b7:0b:92:41:67:ea:64:73:7a:4a:97:b1:80:
ea:fc:e2:4d:8d:33:b5:53:00:e4:51:e1:25:0d:99:
fe:6e:39:c2:6a:84:7d:f5:8f:af:b6:de:c8:9a:fe:
4b:da:3d:29:8b:73:56:58:3f:e3:62:11:8b:a3:07:
10:fe:ab:5b:5b:d1:d3:9c:b3:8e:b7:4d:11:da:07:
bd:96:4f:fb:b3:09:18:93:92:62:b2:3c:10:dd:34:
da:03:ef:1b:38:ee:46:c3:9a:e2:7c:29:f8:87:d9:
89:ea:4b:a5:55:93:23:55:16:b8:cd:7a:9a:40:a6:
17:83:06:f9:53:38:91:77:ec:9d:17:91:bf:63:ad:
89:06:73:77:2e:33:10:0e:c8:ef:8f:d0:f3:76:4c:
cc:ab:14:47:f1:77:0e:12:88:9f:ec:d3:99:0e:d1:
e3:fc:85:7b:8d:f5:db:da:a6:ea:44:3d:81:1d:fd:
49:ba:26:0e:83:c6:58:0c:a9:a9:4b:65:48:ad:98:
73:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:FD:81:D8:1D:78:A3:DA:5B:AA:0B:B0:3E:10:ED:22:BB:EF:13:0C
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS211305.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.155.127.0/24
103.204.193.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:8a:fc:91:7a:37:d8:5f:cd:8d:f4:99:5e:5b:1f:25:bc:ce:
db:a7:31:0d:5e:89:43:de:bb:62:af:e4:f7:b0:c3:88:25:53:
c0:e4:11:26:11:5a:19:45:c3:e6:97:25:d9:24:25:8a:a7:3c:
e0:29:30:79:ec:88:a1:10:a3:95:3c:f1:38:44:7c:34:84:1c:
58:ca:6b:42:5b:17:f6:3b:34:e0:55:b9:41:8a:12:84:b8:4c:
5d:01:ea:b2:42:7e:39:64:0c:bf:b0:4d:d9:97:d6:e2:25:7c:
35:d5:20:b6:b2:63:9d:93:eb:23:d7:13:21:db:97:02:42:61:
d0:10:66:17:5e:5d:4c:be:84:4d:e5:df:b9:b0:2f:cd:12:84:
14:1d:f4:92:81:fc:48:f7:6e:da:d6:7c:88:e6:93:e7:9b:28:
b9:e7:dc:d1:ed:d4:b1:31:7d:97:69:0b:ea:fb:56:9a:58:62:
0c:e0:2e:81:21:eb:9b:0c:55:5e:fb:ec:84:e0:ea:4b:b0:62:
53:3a:86:0a:f6:9a:68:69:7f:e6:c4:4a:8d:62:c6:02:0e:4d:
45:f6:1f:ae:94:c8:d2:4e:f9:be:c3:1e:37:a3:eb:b3:9c:55:
86:e7:5a:fc:f2:23:47:da:11:d2:75:67:6b:d7:55:f4:f0:2b:
83:d3:dc:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 7 16:14:11 2026 by rpki-client