Route Origin Authorization
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS213535.roa
File: AS213535.roa (raw, json)
Hash identifier: ad4KUAGMrWkcGxn9yQ49TcaIRzsSSP8YOtI9FyFhYJs=
Subject key identifier: 31:90:D2:E8:CA:8B:DF:30:9D:46:1C:41:FD:10:22:0D:D8:9F:D6:EC
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 3B3E2472E234CEDB0C7014EBC2089B25EF4B7E0C
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS213535.roa
Signing time: Tue 20 Oct 2026 22:15:59 +0000
ROA not before: Tue 20 Oct 2026 22:10:59 +0000
ROA not after: Tue 19 Oct 2027 22:15:59 +0000
asID: 213535
IP address blocks: 85.155.149.0/24 maxlen: 24
85.155.226.0/24 maxlen: 24
85.155.230.0/24 maxlen: 24
103.214.69.0/24 maxlen: 24
111.235.151.0/24 maxlen: 24
136.148.64.0/24 maxlen: 24
136.148.67.0/24 maxlen: 24
136.148.77.0/24 maxlen: 24
143.246.136.0/24 maxlen: 24
143.246.138.0/24 maxlen: 24
143.246.139.0/24 maxlen: 24
143.246.183.0/24 maxlen: 24
153.76.112.0/24 maxlen: 24
153.76.122.0/24 maxlen: 24
160.202.132.0/24 maxlen: 24
167.104.216.0/24 maxlen: 24
167.104.219.0/24 maxlen: 24
206.245.166.0/24 maxlen: 24
216.86.68.0/24 maxlen: 24
216.86.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Nov 2026 14:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:3e:24:72:e2:34:ce:db:0c:70:14:eb:c2:08:9b:25:ef:4b:7e:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Oct 20 22:10:59 2026 GMT
Not After : Oct 19 22:15:59 2027 GMT
Subject: CN=3190D2E8CA8BDF309D461C41FD10220DD89FD6EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f8:28:e8:9e:35:ba:85:63:ba:b1:41:5b:b1:
af:90:5c:eb:fa:72:9c:7c:76:16:54:15:38:02:e1:
36:6b:9a:89:9f:f9:4f:26:4d:cf:b4:bf:c1:cf:03:
95:72:f0:79:36:4c:27:e4:0f:bd:63:f3:1c:3c:89:
b3:7c:fa:97:3c:69:f6:71:db:43:36:e2:1c:21:c1:
6c:c6:5c:0a:db:b9:06:5e:df:c7:ca:e2:90:b1:a2:
7f:1b:54:fb:39:2e:9e:25:78:d4:b9:2b:09:67:80:
15:d7:84:87:fd:a5:6d:9f:72:e1:c8:bf:e6:da:a7:
73:32:82:d6:a4:50:96:b7:6c:20:a9:1f:55:44:41:
fb:cf:8f:fe:b6:6a:e9:e5:4b:f9:f8:20:ff:00:56:
7d:bc:14:1e:00:53:5e:19:2a:30:41:b7:41:83:23:
a5:6a:c2:bb:13:9f:88:ad:67:fa:83:13:96:bc:2b:
dc:48:84:2c:e6:55:55:c2:f0:cf:06:dc:84:9f:c3:
b3:4c:53:9e:cd:bf:1f:97:da:4c:13:7b:98:48:33:
22:bd:48:a4:6c:b3:1e:06:15:25:e1:7d:a8:0d:78:
b3:a2:0b:6b:ed:1e:47:e2:05:cc:3d:8f:df:ca:99:
f9:dd:94:c7:4f:17:b5:1c:2e:33:f9:0c:0b:7c:09:
d7:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:90:D2:E8:CA:8B:DF:30:9D:46:1C:41:FD:10:22:0D:D8:9F:D6:EC
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS213535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.155.149.0/24
85.155.226.0/24
85.155.230.0/24
103.214.69.0/24
111.235.151.0/24
136.148.64.0/24
136.148.67.0/24
136.148.77.0/24
143.246.136.0/24
143.246.138.0/23
143.246.183.0/24
153.76.112.0/24
153.76.122.0/24
160.202.132.0/24
167.104.216.0/24
167.104.219.0/24
206.245.166.0/24
216.86.68.0/24
216.86.71.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:02:6f:4b:27:a6:9e:60:de:1c:61:5f:18:2e:1f:d2:91:f9:
98:b6:48:88:1f:73:f9:10:a1:38:a4:6d:75:a6:94:6d:ff:0d:
35:51:e2:21:86:79:2c:be:27:e7:17:d8:f8:1b:61:6e:b7:78:
48:bf:db:49:3e:da:72:99:3f:73:8e:cd:f2:69:c8:02:4c:8c:
de:09:50:4f:2a:26:48:cb:b9:4f:df:36:c3:4b:f3:1e:d0:0e:
19:34:f2:e1:af:29:ef:b0:cd:96:fd:72:43:38:6a:6d:63:02:
de:3a:19:ff:16:32:85:4d:ef:f3:4d:cb:4e:af:83:ad:1c:13:
34:19:fc:85:ce:49:80:47:6e:76:01:ed:c6:ef:6a:7b:52:4d:
2e:37:41:62:dd:60:ad:36:0d:cd:43:74:f5:a4:47:d8:e2:b3:
1b:11:e7:f0:ea:9e:d4:70:ad:a5:94:7c:49:cb:87:9f:15:22:
56:cc:e3:33:af:4c:fa:5b:90:ff:fd:84:ce:b1:24:3e:9f:d9:
77:91:ef:c6:78:e7:65:b0:55:f6:3f:af:a2:55:ea:d5:a3:2a:
f2:47:c2:68:4d:8c:d4:a5:c4:2e:0a:77:c7:d2:53:06:0e:b8:
33:3b:5d:96:15:58:84:6b:00:40:e1:90:00:1d:b1:51:93:2c:
d1:b2:a2:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 7 23:25:30 2026 by rpki-client