Route Origin Authorization
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS212085.roa
File: AS212085.roa (raw, json)
Hash identifier: nWzYM3HgVM6Wj6PQX461/su6BxcXs/OvT0YjukmWNUY=
Subject key identifier: 2A:24:36:7D:91:18:65:06:64:0E:FA:92:E2:A6:E8:4C:75:5B:44:EA
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 124C970ADA1841E862983D4EFDFD6C8329C49C5F
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS212085.roa
Signing time: Sat 31 Oct 2026 10:59:12 +0000
ROA not before: Sat 31 Oct 2026 10:54:12 +0000
ROA not after: Sat 30 Oct 2027 10:59:12 +0000
asID: 212085
IP address blocks: 185.121.162.0/24 maxlen: 24
2a06:a001:a070::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Nov 2026 10:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:4c:97:0a:da:18:41:e8:62:98:3d:4e:fd:fd:6c:83:29:c4:9c:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Oct 31 10:54:12 2026 GMT
Not After : Oct 30 10:59:12 2027 GMT
Subject: CN=2A24367D91186506640EFA92E2A6E84C755B44EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1c:84:3f:dd:94:b8:90:bb:02:c2:63:2d:70:
89:0d:2e:2d:f9:71:1f:90:53:73:d0:fe:e0:00:ee:
d7:c9:28:1f:c8:38:55:7f:14:13:db:be:e0:dc:b7:
e5:08:5c:c4:46:4d:a5:c8:48:14:ef:dd:6a:68:5c:
76:df:6f:ef:77:da:a3:91:51:ef:ce:30:a4:2b:aa:
5a:44:70:a8:07:48:ee:f1:a4:d7:59:bb:b1:a7:3c:
97:9d:1d:27:eb:ae:a7:8d:22:66:7f:64:4d:d6:46:
7f:d1:97:17:ed:4c:b9:4b:fe:55:91:cd:43:e8:1a:
26:e6:ad:0b:6f:2f:af:bc:03:5e:52:25:22:51:31:
41:f6:fe:3d:c7:de:e9:c7:e2:74:2b:bb:e7:56:d3:
41:49:8c:4b:c2:1e:5b:dd:b8:5e:6a:9d:ab:4c:12:
bf:a7:ad:eb:6a:a7:84:23:c4:70:ba:40:56:24:38:
ce:6b:2d:ac:14:0a:15:f8:e1:54:43:3f:7f:5e:6f:
3f:f9:4d:76:d3:b4:fb:65:a3:3b:3a:07:aa:c5:6e:
ce:9e:78:05:69:fb:d9:19:ec:28:bb:e8:6b:5b:0a:
1c:bb:2f:29:7a:92:f6:5c:1c:19:9e:07:ff:fa:e8:
4b:b3:4d:a2:f1:eb:42:fb:e0:6e:77:de:eb:18:9f:
53:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:24:36:7D:91:18:65:06:64:0E:FA:92:E2:A6:E8:4C:75:5B:44:EA
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS212085.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.162.0/24
IPv6:
2a06:a001:a070::/44
Signature Algorithm: sha256WithRSAEncryption
39:6c:dc:58:5a:97:2c:ee:27:cc:f9:01:5c:dd:fc:79:63:97:
57:17:a7:04:c6:c4:26:03:c2:83:7d:db:39:1f:c5:4e:27:36:
3a:a8:39:4f:0c:e8:bc:56:b9:2c:f0:28:72:41:91:98:83:37:
89:eb:a2:35:4d:45:7e:51:8d:c9:95:80:c0:5e:07:7d:7b:3d:
d1:68:e8:53:2c:3c:13:fd:05:8c:50:8e:42:eb:13:78:68:24:
23:e8:7f:58:92:72:05:dc:3c:c5:0d:e8:5f:90:08:8b:a4:82:
13:6b:05:21:05:44:cd:52:9f:53:6c:66:54:53:9b:f7:d7:50:
cb:80:6c:8e:6e:a4:37:77:69:fa:69:1f:20:30:fe:bb:be:2a:
d6:3c:de:da:99:12:7d:98:75:a9:57:63:f6:5c:6f:96:1f:c8:
fe:27:7c:e2:01:fe:a5:cb:f0:6b:48:a1:3e:f4:8e:bb:d2:d3:
86:50:d3:ae:1c:2c:ba:62:82:90:fe:bf:14:cf:26:3d:ac:35:
0e:3e:28:2f:0f:ad:c4:5e:eb:d7:0b:65:cb:fc:e9:7d:f9:a7:
42:a3:4a:c6:ca:d0:70:a7:d6:bf:06:d2:31:0b:d4:b0:96:7f:
47:63:45:31:71:33:02:5e:56:29:80:1c:fd:25:b4:cb:21:48:
af:0c:7d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 7 20:43:18 2026 by rpki-client