Route Origin Authorization
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS214456.roa
File: AS214456.roa (raw, json)
Hash identifier: iWqFaIRFj+hV+vt2gs/6TlnYURuy4cl4U4vR0MgnyH8=
Subject key identifier: BD:10:04:40:EA:2D:C7:BC:6A:F8:F5:4B:BC:AA:B3:76:00:A3:29:D3
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 1F1EC5A650D1BA8D8C9FCBC11FE96ADE250C2793
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS214456.roa
Signing time: Tue 01 Sep 2026 22:09:25 +0000
ROA not before: Tue 01 Sep 2026 22:04:25 +0000
ROA not after: Tue 31 Aug 2027 22:09:25 +0000
asID: 214456
IP address blocks: 81.31.213.0/24 maxlen: 24
103.230.142.0/24 maxlen: 24
136.148.72.0/24 maxlen: 24
153.76.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:1e:c5:a6:50:d1:ba:8d:8c:9f:cb:c1:1f:e9:6a:de:25:0c:27:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Sep 1 22:04:25 2026 GMT
Not After : Aug 31 22:09:25 2027 GMT
Subject: CN=BD100440EA2DC7BC6AF8F54BBCAAB37600A329D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bd:4e:82:bc:94:5d:43:bf:5d:07:58:3f:87:
a4:60:93:af:43:7e:b0:ea:fa:3b:bc:66:c0:37:74:
6a:6b:80:40:a3:1b:43:66:4f:bd:6e:70:e2:aa:3a:
97:7b:26:82:7c:b4:86:a9:41:62:57:2a:4d:e6:53:
19:6b:8f:3b:af:f9:e6:37:ed:c3:b2:f1:4c:a2:7c:
25:aa:94:02:95:77:47:1f:4d:8e:b4:21:17:62:80:
55:8b:96:26:83:ed:ad:0a:5c:54:8c:3b:9f:da:dd:
6e:e9:ee:4c:07:dd:63:bf:3d:2f:12:08:eb:49:74:
ba:24:09:c4:04:52:b3:08:c0:ba:d2:23:65:91:b2:
b6:65:2e:11:59:ec:38:3c:7e:1e:7b:c3:f2:56:d7:
5d:a7:6e:ee:21:8d:18:7b:95:dc:36:85:08:d4:c4:
82:40:2b:b5:b4:5d:9c:79:f8:fe:26:b7:d2:72:3c:
89:af:d2:be:80:2d:f2:85:10:98:3b:bc:df:08:f7:
a7:ca:a7:d8:d8:d6:a5:50:56:19:da:7b:d9:0a:83:
21:f6:13:3d:db:41:1f:16:35:83:fa:58:ff:5e:11:
4f:10:27:84:82:21:57:83:83:ca:28:09:61:8e:16:
44:21:1f:fe:e4:9d:50:26:a8:b7:3d:cf:e4:13:c6:
ab:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:10:04:40:EA:2D:C7:BC:6A:F8:F5:4B:BC:AA:B3:76:00:A3:29:D3
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS214456.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.31.213.0/24
103.230.142.0/24
136.148.72.0/24
153.76.114.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:51:6c:0b:b7:20:89:d6:9d:e0:54:c0:fa:53:ea:eb:f8:c8:
6b:ad:9a:e3:ec:7c:df:88:e8:ef:27:5a:c6:d5:43:d4:df:d5:
24:4f:fc:a1:ce:c3:ce:9f:b1:29:0d:31:c8:fe:cb:88:c7:c8:
af:43:70:71:b2:b9:ab:36:c1:93:a8:f1:94:32:ce:db:57:29:
62:a3:e5:3d:83:9e:a1:5d:e4:fd:5a:a9:14:69:d5:2b:23:df:
66:16:08:f3:ae:56:d2:2b:8c:4d:cb:46:b6:6e:71:58:97:45:
da:e4:6c:46:39:c1:24:5b:9c:17:64:91:c5:04:00:bf:b9:18:
44:8f:68:c9:63:2f:3a:31:1c:39:f6:1a:02:a4:e9:34:2b:f8:
20:42:53:ce:e9:c7:f8:11:61:d6:8b:4e:8e:c1:ed:15:b7:3e:
78:b8:11:18:e8:75:76:8f:f3:2a:a2:12:7e:aa:d4:5e:52:18:
35:b0:c6:c8:c3:08:85:23:0a:b3:84:83:6e:71:3c:be:38:79:
2b:7d:04:30:a9:d5:27:d9:d1:b2:d5:a3:1c:30:fe:51:9f:6f:
0e:b1:6e:7a:84:00:6c:b8:b3:96:f2:26:d4:9a:4f:5d:ff:6e:
91:0e:7a:4f:ef:a2:e9:ff:4c:35:3f:41:8f:95:69:f2:71:cd:
38:44:65:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 03:50:51 2026 by rpki-client