Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS213798.roa
File: AS213798.roa (raw, json)
Hash identifier: WpB/b3ZSqLp+gEqniv2vBbHWVCWtoPQGfbqA+vDR9aE=
Subject key identifier: DD:F6:99:45:06:C4:AB:D8:D7:2B:BD:FF:C0:67:E3:51:F2:E4:AE:99
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 3B835FD7581E57E212612BB539A2D7460F3B7108
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS213798.roa
Signing time: Sat 13 Jun 2026 20:31:13 +0000
ROA not before: Sat 13 Jun 2026 20:26:13 +0000
ROA not after: Sat 12 Jun 2027 20:31:13 +0000
asID: 213798
IP address blocks: 2a09:54c7::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:83:5f:d7:58:1e:57:e2:12:61:2b:b5:39:a2:d7:46:0f:3b:71:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jun 13 20:26:13 2026 GMT
Not After : Jun 12 20:31:13 2027 GMT
Subject: CN=DDF6994506C4ABD8D72BBDFFC067E351F2E4AE99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:95:61:41:5b:82:52:ab:85:a4:6f:06:b1:b1:
ff:98:6e:91:5c:ad:9b:11:4f:65:6b:78:40:c5:6d:
6a:f5:45:4a:18:d7:02:8f:cf:59:18:92:a0:ef:f4:
57:ce:04:52:d4:9a:28:2f:3e:b2:84:14:e7:80:ec:
48:7d:80:a9:0f:26:9b:02:93:4a:e5:17:c9:69:46:
e7:df:f8:05:c8:e7:55:ed:e1:6c:24:9d:2d:70:39:
5b:21:5d:74:ca:e6:51:38:0e:c1:16:ab:a1:d5:27:
47:04:a0:07:2c:66:b2:e6:b7:3a:e4:8c:bb:05:f8:
df:4f:a6:0f:10:c5:e9:5a:d0:62:03:51:64:85:c4:
35:11:ec:f0:8b:08:df:f6:74:5c:75:ad:78:c1:e2:
0c:d9:83:4e:84:d6:df:7c:e1:88:4f:c0:40:dc:cb:
68:92:e9:90:67:f8:c7:c4:19:ed:ed:39:eb:fe:6f:
61:16:37:1e:da:4b:48:e3:e0:29:36:21:29:4a:e3:
2a:1d:60:e4:e2:33:2f:67:79:97:ca:ea:f1:1f:de:
db:ad:84:1a:04:1a:3d:39:2b:e4:c0:a4:da:60:e5:
12:0d:4f:75:ee:3f:07:f4:85:e5:50:76:d4:ea:88:
64:32:ea:78:07:0a:4a:84:50:64:d2:65:78:f8:75:
ef:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:F6:99:45:06:C4:AB:D8:D7:2B:BD:FF:C0:67:E3:51:F2:E4:AE:99
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS213798.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:54c7::/32
Signature Algorithm: sha256WithRSAEncryption
0a:72:b9:f9:42:27:bd:14:96:42:b8:4e:9a:28:f6:bd:7e:1d:
0f:ea:54:f9:59:a2:4d:94:75:7b:2b:52:60:c5:9e:24:cd:fb:
30:ab:fc:7c:b0:2e:83:7b:33:7a:74:d5:31:af:98:a8:f7:04:
74:80:ee:fe:f7:6c:87:7c:2d:e4:aa:76:44:24:9f:80:60:a8:
3e:4c:f3:da:82:c5:17:bb:f1:4c:33:9e:0a:6d:ca:ba:fd:bd:
6e:d1:61:f5:04:48:9c:2f:51:42:58:07:40:30:74:3d:e3:3f:
06:23:de:c2:48:a0:e2:83:28:44:19:5e:fc:7a:a1:ab:87:f9:
05:cc:1f:5b:82:a2:b1:61:ab:29:e2:65:09:f4:41:6d:c8:d7:
c3:17:0f:89:cd:10:54:fd:11:53:35:bc:58:cc:b7:c1:ac:b7:
1f:ff:14:57:5f:0b:8b:5c:89:3d:82:25:75:41:da:5e:4a:7d:
e4:db:6e:14:3d:f9:77:7c:18:c4:37:47:11:41:b9:14:b1:13:
69:15:f1:50:b5:80:32:5e:8d:f8:d0:91:b5:2b:fa:d9:35:68:
00:40:32:45:bb:30:25:28:90:af:45:96:51:d1:f8:7f:18:aa:
a3:ca:4c:61:b6:1f:44:cd:fd:fa:b8:0d:f0:11:f7:ad:d4:05:
9e:18:d2:04
-----BEGIN CERTIFICATE-----
MIIE5jCCA86gAwIBAgIUO4Nf11geV+ISYSu1OaLXRg87cQgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDE0YjZmY2YyYjJjNjliZTA4NWU5Zjk1OTg3MmRjYmU4
ZWE1NDE3NzAeFw0yNjA2MTMyMDI2MTNaFw0yNzA2MTIyMDMxMTNaMDMxMTAvBgNV
BAMTKERERjY5OTQ1MDZDNEFCRDhENzJCQkRGRkMwNjdFMzUxRjJFNEFFOTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdlWFBW4JSq4Wkbwaxsf+YbpFc
rZsRT2VreEDFbWr1RUoY1wKPz1kYkqDv9FfOBFLUmigvPrKEFOeA7Eh9gKkPJpsC
k0rlF8lpRuff+AXI51Xt4WwknS1wOVshXXTK5lE4DsEWq6HVJ0cEoAcsZrLmtzrk
jLsF+N9Ppg8Qxela0GIDUWSFxDUR7PCLCN/2dFx1rXjB4gzZg06E1t984YhPwEDc
y2iS6ZBn+MfEGe3tOev+b2EWNx7aS0jj4Ck2ISlK4yodYOTiMy9neZfK6vEf3tut
hBoEGj05K+TApNpg5RINT3XuPwf0heVQdtTqiGQy6ngHCkqEUGTSZXj4de/bAgMB
AAGjggHwMIIB7DAdBgNVHQ4EFgQU3faZRQbEq9jXK73/wGfjUfLkrpkwHwYDVR0j
BBgwFoAU0Utvzyssab4IXp+VmHLcvo6lQXcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNy9EMTRCNkZDRjJC
MkM2OUJFMDg1RTlGOTU5ODcyRENCRThFQTU0MTc3LmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMFV0dnp5c3NhYjRJWHAtVm1ITGN2bzZsUVhjLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC83L0FT
MjEzNzk4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKglUxzANBgkqhkiG9w0BAQsFAAOCAQEACnK5+UIn
vRSWQrhOmij2vX4dD+pU+VmiTZR1eytSYMWeJM37MKv8fLAug3szenTVMa+YqPcE
dIDu/vdsh3wt5Kp2RCSfgGCoPkzz2oLFF7vxTDOeCm3Kuv29btFh9QRInC9RQlgH
QDB0PeM/BiPewkig4oMoRBle/Hqhq4f5BcwfW4KisWGrKeJlCfRBbcjXwxcPic0Q
VP0RUzW8WMy3way3H/8UV18Li1yJPYIldUHaXkp95NtuFD35d3wYxDdHEUG5FLET
aRXxULWAMl6N+NCRtSv62TVoAEAyRbswJSiQr0WWUdH4fxiqo8pMYbYfRM39+rgN
8BH3rdQFnhjSBA==
-----END CERTIFICATE-----
Generated at Sun Jun 14 02:23:03 2026 by rpki-client