Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS212900.roa
File: AS212900.roa (raw, json)
Hash identifier: tIOwYECXOop/IF8yRQsp1UIaxEY370m1xh7I1SK+q8s=
Subject key identifier: C9:65:E0:4A:26:EC:C4:82:56:C2:AA:E6:2D:9C:3B:D3:8D:5E:8F:01
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 1A183C495C9FDAB4AC38BF510F64D119DA0575A0
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS212900.roa
Signing time: Thu 04 Jun 2026 15:58:52 +0000
ROA not before: Thu 04 Jun 2026 15:53:52 +0000
ROA not after: Thu 03 Jun 2027 15:58:52 +0000
asID: 212900
IP address blocks: 2a06:a005:ba9::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:18:3c:49:5c:9f:da:b4:ac:38:bf:51:0f:64:d1:19:da:05:75:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jun 4 15:53:52 2026 GMT
Not After : Jun 3 15:58:52 2027 GMT
Subject: CN=C965E04A26ECC48256C2AAE62D9C3BD38D5E8F01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:52:c9:68:3f:89:50:2c:90:7b:d7:a4:9f:ec:
e1:59:85:4f:a0:1c:2f:62:ad:e0:b8:9f:01:c5:2b:
e1:54:d8:bf:3e:9d:1a:12:01:6c:80:37:02:a5:af:
b3:46:94:a8:6d:51:8b:28:7e:aa:e5:41:af:36:0d:
e4:92:12:51:a0:bc:84:15:a9:39:3d:9c:d6:d3:7b:
35:a6:22:75:33:bf:64:55:7b:c4:ac:14:88:7a:cb:
c6:8c:89:ca:f9:4a:b8:80:73:74:ed:96:5a:13:be:
e5:46:87:c1:65:17:e8:f0:f8:90:f1:b8:e6:f7:94:
ef:fd:f8:bf:7a:37:a2:21:9a:b2:14:b7:54:2d:e1:
40:b6:09:2b:4b:74:b9:fa:8e:8d:cd:b7:a3:1f:61:
e1:25:41:c9:a7:3b:b5:4e:90:dc:6b:0e:16:a2:4f:
0d:7f:5d:fc:4c:98:f9:92:19:3d:52:06:58:a2:7e:
fc:d0:83:9f:8a:5a:ac:bf:d0:b8:ce:2b:a9:79:07:
ec:ae:41:18:6c:c0:2a:ad:f1:53:e0:36:73:07:2a:
65:7d:69:54:df:64:cd:5c:83:6c:3e:25:f5:fa:f2:
62:50:12:8c:03:17:c6:fa:e6:6f:e8:87:b1:86:89:
1e:a7:0e:99:0c:6c:08:f0:99:60:c3:c4:58:2d:29:
6e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:65:E0:4A:26:EC:C4:82:56:C2:AA:E6:2D:9C:3B:D3:8D:5E:8F:01
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS212900.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:ba9::/48
Signature Algorithm: sha256WithRSAEncryption
6e:3c:4e:f3:50:40:4c:ea:d5:22:cd:f4:a8:52:67:84:b2:49:
10:ac:3b:04:99:ba:79:07:d5:7c:3b:4c:c6:14:6f:ec:48:f8:
f9:80:a3:89:bb:bf:97:2c:81:f6:3c:5f:73:44:fa:b9:1f:8b:
d4:a0:3f:0b:3d:8c:6b:d6:1f:0c:c5:1e:a6:ef:ef:b8:d7:41:
29:e8:88:2a:fe:fb:e6:21:1e:7c:67:85:6b:56:9e:09:a2:3b:
4c:73:40:0f:4e:4c:50:f4:26:18:c3:b8:c7:16:24:3f:ed:25:
f1:52:53:17:07:2f:78:d2:ba:89:06:bc:93:5b:a3:55:13:60:
8b:0c:a9:1a:b9:7a:2a:1c:30:8e:5e:de:78:e6:0f:9d:7e:f3:
16:50:cd:d9:d8:16:84:17:07:5a:60:fc:94:07:fc:12:c0:88:
d1:69:91:79:58:3d:0f:8f:b2:4a:65:8f:18:ea:3d:e4:8d:66:
7c:60:4e:0f:f0:0e:22:d1:d9:9c:4d:cb:7c:a3:6f:46:ec:06:
b1:ec:c4:b1:00:2b:b2:23:55:5d:34:70:90:32:27:8b:0d:fe:
93:99:cb:82:3f:28:5d:50:a3:2f:38:45:ec:07:9d:b5:59:7c:
e0:6b:f7:98:d4:fc:97:18:b9:f8:20:74:d3:d5:02:3e:d5:57:
96:b7:5d:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:11:13 2026 by rpki-client