Route Origin Authorization
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS214344.roa
File: AS214344.roa (raw, json)
Hash identifier: 92I9K++vIYVma3ad6t7p31jET0aJw0HPAUFYTFFQTeA=
Subject key identifier: 82:5F:BE:92:E3:35:00:15:4B:60:0A:C5:CF:B2:D0:62:0B:62:B4:68
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 4131AA9E14F26B096965A85266DE38B1707D5CB8
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS214344.roa
Signing time: Sat 31 Oct 2026 09:59:12 +0000
ROA not before: Sat 31 Oct 2026 09:54:12 +0000
ROA not after: Sat 30 Oct 2027 09:59:12 +0000
asID: 214344
IP address blocks: 85.155.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:31:aa:9e:14:f2:6b:09:69:65:a8:52:66:de:38:b1:70:7d:5c:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Oct 31 09:54:12 2026 GMT
Not After : Oct 30 09:59:12 2027 GMT
Subject: CN=825FBE92E33500154B600AC5CFB2D0620B62B468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:65:7c:5e:fa:ca:94:6e:9b:69:cd:81:95:31:
32:88:5d:ba:f1:64:7a:d9:7a:14:69:12:56:7a:5f:
f8:5b:0a:ae:c1:ca:b6:06:77:c3:3b:71:12:47:fc:
31:98:49:3c:32:29:b2:0c:7f:40:68:1b:d5:04:97:
df:63:7c:46:b2:ae:6c:6e:1c:07:f2:34:2e:4f:f1:
81:10:6f:3b:8f:1e:aa:c3:2a:40:91:23:51:d1:af:
b8:b5:da:7d:ba:4b:5f:d6:f2:81:10:23:8d:6a:76:
79:e0:08:5b:9a:66:2c:ac:e5:fd:ee:fa:d6:68:07:
ea:be:da:f6:0d:8b:ec:4d:20:63:40:ea:5d:72:5a:
78:0c:c9:3a:44:de:fa:27:c7:f5:d4:88:b6:01:27:
dd:16:d6:4e:4e:3e:f1:ed:ee:8a:4f:fd:15:3b:7a:
52:ab:c6:8b:cb:3b:83:ed:97:43:1f:dd:21:06:59:
5c:11:af:37:c0:41:64:f1:f5:3a:95:be:bc:90:da:
94:10:fb:6c:fa:95:f2:76:f4:8d:bf:20:33:ab:a1:
61:e7:27:6e:fa:1a:34:99:61:a1:12:0c:b2:9e:27:
d3:52:3f:1f:15:56:36:9f:31:1b:21:23:09:60:7e:
d9:69:c0:f3:92:ca:5b:ea:d0:57:52:f4:8c:6c:a7:
17:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:5F:BE:92:E3:35:00:15:4B:60:0A:C5:CF:B2:D0:62:0B:62:B4:68
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS214344.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.155.126.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:cd:34:5e:36:5e:23:22:3a:03:97:01:aa:93:32:fe:a3:ae:
aa:33:4b:dc:64:f7:1f:81:69:77:15:84:2a:a5:06:8b:95:cb:
22:51:e0:0c:3a:52:9c:60:cb:ff:c9:c5:6c:95:69:8a:49:4b:
88:68:1b:d6:6b:53:20:99:ae:a5:93:64:20:c8:f7:d7:f3:3f:
f4:cf:ca:2a:5e:25:d9:ba:b9:be:b8:09:c3:dc:08:95:19:ae:
5d:b8:51:5a:f5:6e:81:5b:0f:51:48:f6:35:68:44:30:74:85:
53:2d:97:ee:43:39:42:ca:45:92:3f:3f:30:01:48:9a:13:f1:
6c:fd:8f:4b:b7:04:6e:95:5c:e3:bf:01:d7:02:38:3c:91:10:
1e:53:57:06:8a:4b:7e:04:74:61:c3:1c:42:8a:6c:4b:2b:e3:
15:17:23:fe:65:b8:54:6d:fb:12:8a:55:df:02:ef:dd:74:b1:
e0:97:2d:c5:23:8e:e8:01:92:16:ff:87:f0:3e:35:c4:70:d2:
59:87:15:0c:1b:24:99:ec:bb:aa:a7:70:e7:ec:fb:1a:8a:0e:
08:66:9e:eb:93:2e:40:15:93:f8:22:af:ea:1e:67:1e:05:8f:
8b:94:ab:67:99:c4:fc:68:5f:df:f0:73:d3:0b:35:91:42:a9:
08:0a:5e:bf
-----BEGIN CERTIFICATE-----
MIIE5TCCA82gAwIBAgIUQTGqnhTyawlpZahSZt44sXB9XLgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDE0YjZmY2YyYjJjNjliZTA4NWU5Zjk1OTg3MmRjYmU4
ZWE1NDE3NzAeFw0yNjEwMzEwOTU0MTJaFw0yNzEwMzAwOTU5MTJaMDMxMTAvBgNV
BAMTKDgyNUZCRTkyRTMzNTAwMTU0QjYwMEFDNUNGQjJEMDYyMEI2MkI0NjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0ZXxe+sqUbptpzYGVMTKIXbrx
ZHrZehRpElZ6X/hbCq7ByrYGd8M7cRJH/DGYSTwyKbIMf0BoG9UEl99jfEayrmxu
HAfyNC5P8YEQbzuPHqrDKkCRI1HRr7i12n26S1/W8oEQI41qdnngCFuaZiys5f3u
+tZoB+q+2vYNi+xNIGNA6l1yWngMyTpE3vonx/XUiLYBJ90W1k5OPvHt7opP/RU7
elKrxovLO4Ptl0Mf3SEGWVwRrzfAQWTx9TqVvryQ2pQQ+2z6lfJ29I2/IDOroWHn
J276GjSZYaESDLKeJ9NSPx8VVjafMRshIwlgftlpwPOSylvq0FdS9IxspxevAgMB
AAGjggHvMIIB6zAdBgNVHQ4EFgQUgl++kuM1ABVLYArFz7LQYgtitGgwHwYDVR0j
BBgwFoAU0Utvzyssab4IXp+VmHLcvo6lQXcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNy9EMTRCNkZDRjJC
MkM2OUJFMDg1RTlGOTU5ODcyRENCRThFQTU0MTc3LmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMFV0dnp5c3NhYjRJWHAtVm1ITGN2bzZsUVhjLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC83L0FT
MjE0MzQ0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAVZt+MA0GCSqGSIb3DQEBCwUAA4IBAQC8zTReNl4j
IjoDlwGqkzL+o66qM0vcZPcfgWl3FYQqpQaLlcsiUeAMOlKcYMv/ycVslWmKSUuI
aBvWa1Mgma6lk2QgyPfX8z/0z8oqXiXZurm+uAnD3AiVGa5duFFa9W6BWw9RSPY1
aEQwdIVTLZfuQzlCykWSPz8wAUiaE/Fs/Y9LtwRulVzjvwHXAjg8kRAeU1cGikt+
BHRhwxxCimxLK+MVFyP+ZbhUbfsSilXfAu/ddLHgly3FI47oAZIW/4fwPjXEcNJZ
hxUMGySZ7Luqp3Dn7Psaig4IZp7rky5AFZP4Iq/qHmceBY+LlKtnmcT8aF/f8HPT
CzWRQqkICl6/
-----END CERTIFICATE-----
Generated at Thu Nov 5 17:06:49 2026 by rpki-client