Route Origin Authorization
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS213535.roa
File: AS213535.roa (raw, json)
Hash identifier: vO6FNJ2YExikE2kortZ2HO+SJFRevGw03X+ds//fxq8=
Subject key identifier: 5C:78:D2:7F:51:1D:CD:21:5D:42:7F:BC:F2:C4:D8:2F:B8:BC:14:C4
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 4C32A068C5DA1D2D67D8197F239767A28E6D4AD4
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS213535.roa
Signing time: Sun 13 Sep 2026 21:27:34 +0000
ROA not before: Sun 13 Sep 2026 21:22:34 +0000
ROA not after: Sun 12 Sep 2027 21:27:34 +0000
asID: 213535
IP address blocks: 85.155.230.0/24 maxlen: 24
103.214.69.0/24 maxlen: 24
111.235.151.0/24 maxlen: 24
136.148.64.0/24 maxlen: 24
136.148.67.0/24 maxlen: 24
136.148.77.0/24 maxlen: 24
143.246.136.0/24 maxlen: 24
143.246.138.0/24 maxlen: 24
143.246.139.0/24 maxlen: 24
143.246.183.0/24 maxlen: 24
153.76.112.0/24 maxlen: 24
153.76.122.0/24 maxlen: 24
160.202.132.0/24 maxlen: 24
167.104.216.0/24 maxlen: 24
167.104.219.0/24 maxlen: 24
206.245.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:32:a0:68:c5:da:1d:2d:67:d8:19:7f:23:97:67:a2:8e:6d:4a:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Sep 13 21:22:34 2026 GMT
Not After : Sep 12 21:27:34 2027 GMT
Subject: CN=5C78D27F511DCD215D427FBCF2C4D82FB8BC14C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:fd:9c:5e:39:4d:fe:37:0a:64:3a:0e:d0:a9:
cb:96:71:2e:83:63:43:b7:3d:c4:3a:af:a4:14:15:
31:cb:c6:c1:d9:37:18:c9:b7:fd:49:ae:c2:4c:29:
3e:ee:d0:03:8d:4d:bd:b2:a5:6b:ea:3e:31:4a:0c:
50:92:e1:93:0c:81:b0:3f:98:31:e8:52:9d:6e:07:
6e:c1:5d:0f:e6:48:aa:28:70:c6:da:f9:ba:7b:81:
1e:58:02:66:c9:bc:92:f9:55:e8:7d:62:4c:04:08:
4b:db:7a:f8:39:ba:75:9d:70:d5:53:0f:13:8c:7e:
6d:cc:86:8f:c8:06:cb:89:58:13:83:f7:98:0a:ee:
6f:9d:d0:07:8a:2d:f2:5b:4b:cc:75:4f:7b:64:4c:
b2:02:d8:cb:ba:53:6f:94:a5:3c:7a:fe:25:8a:23:
6b:b6:70:e4:b5:50:54:4d:89:db:19:c7:70:fc:3a:
fb:e2:85:67:71:82:56:7c:2a:b6:f7:82:53:13:6f:
b2:c9:ba:9d:f6:52:66:3a:84:5a:bc:90:44:13:c4:
97:9d:96:40:9d:67:e5:44:3b:d1:4e:03:df:5c:52:
6d:6d:41:23:45:15:c3:26:e6:cd:65:fd:39:c9:66:
b0:a5:2f:79:65:f7:e2:7e:54:96:22:1e:32:6e:8c:
77:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:78:D2:7F:51:1D:CD:21:5D:42:7F:BC:F2:C4:D8:2F:B8:BC:14:C4
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS213535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.155.230.0/24
103.214.69.0/24
111.235.151.0/24
136.148.64.0/24
136.148.67.0/24
136.148.77.0/24
143.246.136.0/24
143.246.138.0/23
143.246.183.0/24
153.76.112.0/24
153.76.122.0/24
160.202.132.0/24
167.104.216.0/24
167.104.219.0/24
206.245.166.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:f6:36:f9:26:28:fb:d6:61:ef:f4:19:33:98:34:50:26:0d:
b3:a2:05:43:7c:7f:af:ff:ec:ba:f0:b1:da:5a:6f:cf:d4:c8:
63:2c:f7:ec:26:89:fe:a0:b8:ec:60:7d:62:7b:c9:a5:6c:1f:
ab:a4:ef:c8:99:98:ce:a4:3b:75:ed:0e:a7:44:4f:2d:23:dc:
7e:87:2a:77:ce:d2:f2:56:c8:93:1e:11:76:07:40:db:eb:b2:
4a:41:1d:67:b7:e8:2b:7c:72:3f:c8:da:f0:3a:80:1d:b7:0e:
01:c4:f1:cf:95:c0:a0:23:0b:9b:bd:ac:21:b7:96:95:27:83:
c5:13:6c:89:e2:72:93:ad:d1:0f:c0:54:b5:e5:5f:71:29:4d:
cc:62:77:31:0e:31:ff:9a:68:26:92:0a:99:39:82:69:68:6a:
dd:fa:31:38:37:aa:3c:f7:82:cf:fc:23:56:23:7b:0f:0b:40:
d7:df:39:b2:bd:d8:ea:c6:34:a2:63:69:92:95:67:9f:f5:f1:
54:5c:04:2c:d6:b6:9c:d2:98:11:23:1f:c4:cf:1f:ce:24:b0:
59:49:73:6d:87:0f:d6:97:7a:ab:b2:74:64:fb:3c:c3:ad:1b:
67:57:f3:30:bd:46:5f:8c:6d:5b:29:03:d3:12:0c:59:12:b0:
0c:ba:15:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 01:07:41 2026 by rpki-client