Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS212196.roa
File: AS212196.roa (raw, json)
Hash identifier: /ZIMDGARnGhdHPJs6oX1BELZTNFgQdgJXqNCPcNFfVk=
Subject key identifier: 2E:84:93:1D:34:9C:4C:08:FB:0D:5F:B7:FB:D2:0C:A5:2F:4B:61:9B
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 37438F0FB1BCAB8371FBECDDE898A73D185A7977
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS212196.roa
Signing time: Thu 04 Jun 2026 15:58:47 +0000
ROA not before: Thu 04 Jun 2026 15:53:47 +0000
ROA not after: Thu 03 Jun 2027 15:58:47 +0000
asID: 212196
IP address blocks: 2a06:a005:2c10::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:43:8f:0f:b1:bc:ab:83:71:fb:ec:dd:e8:98:a7:3d:18:5a:79:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jun 4 15:53:47 2026 GMT
Not After : Jun 3 15:58:47 2027 GMT
Subject: CN=2E84931D349C4C08FB0D5FB7FBD20CA52F4B619B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:45:65:d9:7e:e4:85:76:57:bf:fc:49:e6:7c:
1d:f0:b6:b1:7a:94:d3:4a:ec:d9:ba:32:29:ab:0a:
0a:36:2a:32:be:2f:0d:a8:c4:1c:73:a5:ac:4e:75:
73:90:a2:7b:30:cb:3a:cb:c0:c9:b3:3a:bc:1f:f5:
7c:11:dd:a6:db:da:f4:fb:09:47:30:41:86:46:3a:
56:0e:f3:2d:b5:68:6f:1b:78:7c:89:c5:ae:e2:e6:
e3:13:2f:ff:34:7c:3c:2e:e5:dd:f9:5c:72:a1:7a:
f9:d3:2b:2c:dd:3f:3f:47:9f:07:e3:99:d1:a4:9b:
07:bb:0b:9f:f4:45:c3:c2:0a:4f:b4:46:30:a3:c4:
a6:97:fe:a9:56:51:5c:d7:a3:67:e9:8d:88:cd:c6:
05:17:b1:7b:de:6f:70:04:96:99:ed:26:51:4c:f1:
9c:c6:1f:eb:2d:59:23:4b:9b:5a:68:cb:81:24:12:
da:18:a5:09:cf:a8:95:02:bb:17:94:1e:29:f4:6e:
c7:71:58:42:8a:dd:13:54:81:f3:5f:a4:d6:6d:89:
e4:a0:b1:95:ca:8e:b9:d3:58:7b:7f:34:f2:66:e8:
1d:7c:f2:5c:cc:ff:d7:56:09:b6:6a:20:29:15:8f:
9e:37:0a:0c:9d:73:34:cc:5f:15:4b:5e:da:5d:14:
af:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:84:93:1D:34:9C:4C:08:FB:0D:5F:B7:FB:D2:0C:A5:2F:4B:61:9B
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS212196.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2c10::/44
Signature Algorithm: sha256WithRSAEncryption
75:4f:74:be:ff:38:a2:01:c9:28:81:c6:8b:d4:d2:e6:78:c9:
66:43:ac:d7:1e:1a:c5:ee:7f:16:55:a1:b6:b7:0e:ac:66:33:
db:7d:28:69:1e:e7:ff:41:db:4d:a9:00:cb:a2:3c:c4:44:74:
7b:b1:a3:91:b1:d9:7f:70:04:2c:f5:96:03:28:f8:8b:30:9c:
84:94:0e:4e:21:91:78:19:ca:27:19:ec:ed:a9:46:8e:cf:6a:
ed:16:72:bd:7d:61:27:ac:9e:5e:38:8e:eb:b1:18:e8:e8:cb:
c6:a2:8c:5b:64:a2:ec:6e:2e:b1:ea:29:bb:c1:32:f0:e4:18:
0b:8e:34:8d:56:1a:48:f6:3e:fc:7c:6a:fa:97:9a:f3:37:57:
a6:ef:a6:c3:af:5c:6e:ba:e7:cc:33:ef:38:cd:9c:2b:dc:29:
3a:13:07:8f:29:ba:6c:43:39:a6:6d:89:fa:2e:2a:a5:e8:71:
0b:68:00:44:a4:c3:da:ed:5d:11:ae:77:c5:88:07:af:43:3d:
a0:b6:f1:31:27:56:fc:9e:a3:61:5b:5b:74:9c:05:44:65:9a:
2d:a9:59:75:b8:72:a0:3f:88:d6:3c:48:00:26:6e:ff:6c:94:
f6:0f:32:41:15:12:f5:89:66:cf:04:a5:59:5d:06:55:00:32:
3d:85:49:b6
-----BEGIN CERTIFICATE-----
MIIE6DCCA9CgAwIBAgIUN0OPD7G8q4Nx++zd6JinPRhaeXcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDE0YjZmY2YyYjJjNjliZTA4NWU5Zjk1OTg3MmRjYmU4
ZWE1NDE3NzAeFw0yNjA2MDQxNTUzNDdaFw0yNzA2MDMxNTU4NDdaMDMxMTAvBgNV
BAMTKDJFODQ5MzFEMzQ5QzRDMDhGQjBENUZCN0ZCRDIwQ0E1MkY0QjYxOUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGRWXZfuSFdle//EnmfB3wtrF6
lNNK7Nm6MimrCgo2KjK+Lw2oxBxzpaxOdXOQonswyzrLwMmzOrwf9XwR3abb2vT7
CUcwQYZGOlYO8y21aG8beHyJxa7i5uMTL/80fDwu5d35XHKhevnTKyzdPz9Hnwfj
mdGkmwe7C5/0RcPCCk+0RjCjxKaX/qlWUVzXo2fpjYjNxgUXsXveb3AElpntJlFM
8ZzGH+stWSNLm1poy4EkEtoYpQnPqJUCuxeUHin0bsdxWEKK3RNUgfNfpNZtieSg
sZXKjrnTWHt/NPJm6B188lzM/9dWCbZqICkVj543CgydczTMXxVLXtpdFK9HAgMB
AAGjggHyMIIB7jAdBgNVHQ4EFgQULoSTHTScTAj7DV+3+9IMpS9LYZswHwYDVR0j
BBgwFoAU0Utvzyssab4IXp+VmHLcvo6lQXcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNy9EMTRCNkZDRjJC
MkM2OUJFMDg1RTlGOTU5ODcyRENCRThFQTU0MTc3LmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMFV0dnp5c3NhYjRJWHAtVm1ITGN2bzZsUVhjLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC83L0FT
MjEyMTk2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEH
AQH/BBMwETAPBAIAAjAJAwcEKgagBSwQMA0GCSqGSIb3DQEBCwUAA4IBAQB1T3S+
/ziiAckogcaL1NLmeMlmQ6zXHhrF7n8WVaG2tw6sZjPbfShpHuf/QdtNqQDLojzE
RHR7saORsdl/cAQs9ZYDKPiLMJyElA5OIZF4GconGeztqUaOz2rtFnK9fWEnrJ5e
OI7rsRjo6MvGooxbZKLsbi6x6im7wTLw5BgLjjSNVhpI9j78fGr6l5rzN1em76bD
r1xuuufMM+84zZwr3Ck6EwePKbpsQzmmbYn6Liql6HELaABEpMPa7V0RrnfFiAev
Qz2gtvExJ1b8nqNhW1t0nAVEZZotqVl1uHKgP4jWPEgAJm7/bJT2DzJBFRL1iWbP
BKVZXQZVADI9hUm2
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:10:12 2026 by rpki-client