Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS213884.roa
File: AS213884.roa (raw, json)
Hash identifier: Edsup66fg+rMjUumKFME/bl5T/k04A+S5ZLVdRCHfzI=
Subject key identifier: 44:05:E7:C9:C5:74:87:AD:EB:D8:39:49:FD:20:84:F7:DD:94:93:99
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 4F1BB80671DCCA71E633CEF66E203FD7DAA2E7E4
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS213884.roa
Signing time: Thu 04 Jun 2026 15:58:54 +0000
ROA not before: Thu 04 Jun 2026 15:53:54 +0000
ROA not after: Thu 03 Jun 2027 15:58:54 +0000
asID: 213884
IP address blocks: 195.184.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:1b:b8:06:71:dc:ca:71:e6:33:ce:f6:6e:20:3f:d7:da:a2:e7:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jun 4 15:53:54 2026 GMT
Not After : Jun 3 15:58:54 2027 GMT
Subject: CN=4405E7C9C57487ADEBD83949FD2084F7DD949399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:bf:d0:53:bd:06:1d:fb:c1:7e:37:83:e9:52:
3b:3c:41:fe:79:fe:ea:51:f1:26:89:0a:32:0f:e8:
88:6b:4c:a8:c4:26:b7:71:13:52:fe:97:9e:a7:f7:
99:af:b4:1d:fa:0c:57:41:7f:38:48:b3:cf:d7:03:
83:ea:6b:08:fc:ca:ee:69:ad:41:e1:52:fd:d7:f5:
45:29:e4:75:1c:83:06:2b:8e:d3:3c:66:23:69:2c:
53:0c:09:0f:80:1c:32:9d:cd:f1:50:9d:28:54:5e:
58:17:0d:cc:8d:8f:72:84:0b:45:df:e2:a8:b2:9d:
fd:7f:c9:78:09:d2:bb:0f:e6:ab:b4:39:3d:b7:2d:
78:c2:61:70:bb:ac:5e:64:dc:09:97:e9:79:1c:21:
3a:79:1a:16:7d:ff:53:eb:2d:03:fd:77:41:49:87:
eb:c4:a7:ec:a8:98:04:21:d6:c6:e9:6e:09:93:04:
e3:88:a0:68:85:ab:6a:6b:cf:ef:56:ae:5b:1f:db:
96:6a:94:b1:73:41:c9:8a:60:02:56:73:be:f8:45:
ec:a9:ad:a8:06:b3:ee:6d:d1:32:f9:ee:9b:a4:1e:
3d:ba:5e:37:af:ed:a0:11:0b:a4:da:dc:b3:21:58:
12:b0:ac:a4:d0:ec:e9:04:cb:0f:a0:c4:a3:4c:a7:
1a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:05:E7:C9:C5:74:87:AD:EB:D8:39:49:FD:20:84:F7:DD:94:93:99
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS213884.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.184.246.0/24
Signature Algorithm: sha256WithRSAEncryption
41:80:6c:ae:7a:4e:2d:8e:a9:46:e0:2c:ce:c9:ef:ae:53:be:
cc:34:0e:85:27:50:82:17:5c:bf:82:07:51:01:4c:19:f0:f7:
c3:e8:d1:5b:5e:14:42:20:eb:36:01:85:c8:a7:f1:7a:11:d7:
14:83:f8:a7:e2:ef:9c:b6:08:cc:9a:be:67:23:d8:0f:54:80:
01:0c:b1:e8:bd:26:e8:83:1b:57:e2:c2:2d:8b:14:8a:77:43:
05:40:43:ab:90:b8:1d:64:fe:33:6b:e9:55:3d:4c:8a:47:53:
72:e4:8e:c6:10:7b:e2:59:1a:c9:5d:dd:93:db:10:a2:ba:71:
23:64:9f:85:3e:ea:31:b1:7c:88:14:2e:b5:5a:c1:90:5c:fd:
2d:85:31:17:19:14:3a:26:cc:17:e4:e0:de:f5:0f:b9:bf:61:
51:8d:62:04:a4:72:9d:92:a0:c6:d4:0b:3b:c8:9d:eb:ae:00:
6e:1a:2d:4a:5f:48:97:f3:df:1d:b2:50:b5:78:af:01:45:46:
61:e7:d6:da:2e:a7:98:d7:0f:69:74:94:95:d9:8d:95:1b:e6:
fa:e4:49:25:f7:30:24:6f:0f:e6:dd:cb:25:9e:62:de:ba:33:
33:3a:82:e1:13:d8:c1:a2:d1:d1:09:57:b1:96:bc:9a:85:a0:
1b:5c:b4:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:23:14 2026 by rpki-client