Route Origin Authorization
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS214716.roa
File: AS214716.roa (raw, json)
Hash identifier: aSudBUeJeCZrMQ5E1yd0PzRZVqk6REv8zfBVXFyWss0=
Subject key identifier: 40:DD:17:43:5B:2E:54:5F:2D:91:28:B0:45:67:CC:0C:7E:E6:8F:2B
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 2C53F34E9E7F463D54E9944820EA431A32164281
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS214716.roa
Signing time: Fri 18 Sep 2026 10:25:18 +0000
ROA not before: Fri 18 Sep 2026 10:20:18 +0000
ROA not after: Fri 17 Sep 2027 10:25:18 +0000
asID: 214716
IP address blocks: 81.31.210.0/24 maxlen: 24
81.31.211.0/24 maxlen: 24
85.155.98.0/24 maxlen: 24
103.109.234.0/24 maxlen: 24
136.148.71.0/24 maxlen: 24
136.148.74.0/24 maxlen: 24
136.148.79.0/24 maxlen: 24
143.246.182.0/24 maxlen: 24
167.104.217.0/24 maxlen: 24
167.104.223.0/24 maxlen: 24
185.121.179.0/24 maxlen: 24
195.184.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 10:51:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:53:f3:4e:9e:7f:46:3d:54:e9:94:48:20:ea:43:1a:32:16:42:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Sep 18 10:20:18 2026 GMT
Not After : Sep 17 10:25:18 2027 GMT
Subject: CN=40DD17435B2E545F2D9128B04567CC0C7EE68F2B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:7e:8e:6d:f7:67:b4:f0:9e:6d:97:db:9c:6d:
6b:a0:dc:f5:e9:82:8a:40:62:b6:7c:82:9c:79:ad:
a6:c2:22:af:5a:e9:9d:0b:93:3c:4b:c7:66:05:7b:
6d:be:ec:3f:0a:55:f4:2b:17:c1:50:66:6b:12:f2:
58:b3:9c:5d:aa:56:bf:9a:8b:00:be:27:c1:a3:be:
11:82:ba:4f:d5:de:25:18:ad:dd:78:94:6c:06:80:
f4:f3:cb:05:36:3a:54:d2:fe:39:9b:72:07:be:80:
84:d8:a6:15:a1:49:61:6c:5f:b5:1d:25:5e:3c:82:
b7:48:21:69:ee:d5:ae:a9:6b:bb:5d:a7:2b:ae:b1:
42:4b:3c:63:88:5e:86:30:fc:29:ce:31:c0:d4:3c:
c4:3c:7d:74:90:d3:ba:c5:b9:90:bd:3c:77:0f:76:
c2:16:16:73:16:f6:8f:a0:fc:5a:ba:d7:f1:49:ed:
c5:e2:7e:67:d8:91:f7:38:b5:1d:c3:9e:9a:4e:db:
a7:db:a1:fb:28:e3:c1:fb:af:a9:08:66:c3:c0:47:
04:43:d7:af:14:5b:47:fa:04:03:f4:6b:a9:6d:ae:
6b:a1:a0:c9:34:4d:ea:dc:fa:b6:54:ad:24:9e:d1:
40:21:97:90:e9:10:41:36:d9:9e:29:3f:78:3b:d0:
fb:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:DD:17:43:5B:2E:54:5F:2D:91:28:B0:45:67:CC:0C:7E:E6:8F:2B
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS214716.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.31.210.0/23
85.155.98.0/24
103.109.234.0/24
136.148.71.0/24
136.148.74.0/24
136.148.79.0/24
143.246.182.0/24
167.104.217.0/24
167.104.223.0/24
185.121.179.0/24
195.184.247.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:81:60:ba:16:88:ae:7d:ff:65:08:48:5d:43:90:55:40:ce:
af:d1:12:e5:c8:bf:29:59:c4:69:57:e6:67:af:86:fe:5a:3f:
f2:8c:8f:0a:3c:91:5a:53:b3:b4:ee:8c:d7:b5:0b:94:b4:0d:
f4:db:12:b1:6b:6c:14:d2:d2:1a:a6:ee:33:6a:40:bc:26:69:
67:63:a4:8a:bc:24:88:dc:8d:cb:31:73:e5:94:86:03:2e:f6:
af:1b:63:de:29:3f:92:d8:40:99:8b:a0:3d:1e:d1:91:ec:db:
5f:15:6c:58:10:28:f1:e7:ad:02:ee:c8:2c:d8:a2:3c:53:64:
90:d8:cb:b2:cf:60:3a:ed:ce:c3:38:09:20:b0:12:26:d3:57:
86:f3:64:7a:45:91:8a:c8:30:0f:f3:b1:03:53:c8:fa:8e:21:
bb:d2:04:bf:90:9f:83:9c:b4:dd:a6:47:fa:b2:de:42:4b:3d:
66:37:f5:7b:55:73:e4:83:0b:9c:81:a9:92:b6:8d:e3:45:7c:
a3:b4:07:b2:bd:e4:82:bb:e3:13:08:10:84:b2:d8:fa:48:12:
43:a6:2d:2a:96:03:83:9a:a2:d4:83:24:54:b9:74:1d:22:27:
a7:29:66:d6:a1:01:05:2a:d6:6d:0d:fb:c3:b5:83:92:e0:bd:
af:fe:a5:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 16:33:38 2026 by rpki-client