Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS215081.roa
File: AS215081.roa (raw, json)
Hash identifier: Z2hZFpDdSClFMGni5QKc0Ud32QB2w6KlpWCOu0tjfB4=
Subject key identifier: 32:EA:D2:9A:51:3B:34:73:41:EF:F5:5B:25:98:31:29:5F:D9:F9:8D
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 7FBB8DC30F6255318B964E4F24C61BC440464AD2
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS215081.roa
Signing time: Thu 04 Jun 2026 15:58:50 +0000
ROA not before: Thu 04 Jun 2026 15:53:50 +0000
ROA not after: Thu 03 Jun 2027 15:58:50 +0000
asID: 215081
IP address blocks: 5.253.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:bb:8d:c3:0f:62:55:31:8b:96:4e:4f:24:c6:1b:c4:40:46:4a:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jun 4 15:53:50 2026 GMT
Not After : Jun 3 15:58:50 2027 GMT
Subject: CN=32EAD29A513B347341EFF55B259831295FD9F98D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c7:39:40:89:45:91:ee:c2:af:be:94:ba:54:
3c:55:1d:1e:cd:ce:fb:0b:69:bb:d3:72:94:d8:99:
38:d6:84:18:64:a2:dd:43:32:f5:74:78:9a:8a:51:
2b:22:64:0a:a4:82:3b:09:24:68:2a:86:35:16:6d:
00:c1:e6:03:94:8e:6e:a3:af:f0:0a:e0:9a:60:1b:
c9:15:96:b7:be:a6:da:a0:bc:17:e8:f0:48:ea:78:
c4:17:7d:fe:e0:bc:d4:4b:f7:2c:4a:a6:68:96:55:
1d:11:48:34:20:b2:9c:6a:b8:4d:3b:61:ac:53:63:
77:7b:f5:60:4c:8c:1f:15:00:1d:8a:a1:13:bb:9c:
e0:90:6b:41:65:5f:0d:74:2e:13:33:83:06:38:7c:
fb:d4:e6:a1:93:20:c1:28:af:4c:3e:87:ad:fa:57:
14:91:11:5e:e9:f2:f1:95:9f:33:b1:c1:0c:ce:3d:
16:a3:d1:a4:36:af:80:8f:81:da:55:bf:b0:6a:54:
d7:8c:04:75:98:b4:1d:6e:7d:99:12:41:4b:07:43:
38:ca:c8:db:dd:ab:14:ae:90:c7:0a:30:72:ef:86:
0d:20:dc:67:1c:73:0c:7b:4b:7b:d5:75:d5:da:56:
a5:e8:74:04:45:6c:cf:a1:f6:58:dc:bd:b1:17:68:
f7:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:EA:D2:9A:51:3B:34:73:41:EF:F5:5B:25:98:31:29:5F:D9:F9:8D
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS215081.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.87.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:8e:0e:91:82:80:52:35:03:a3:31:a5:b6:a6:48:70:f2:ff:
3b:24:03:47:02:ce:e2:b9:cd:e5:30:b3:88:91:1f:89:8e:a5:
3b:ec:dd:eb:3f:b2:e8:0a:d2:0a:b9:f8:dd:ff:2b:60:c8:c8:
81:26:8b:17:10:77:ce:d8:e1:b1:97:39:6b:af:e6:67:ac:54:
ed:d8:aa:e7:de:c6:f5:32:d9:41:94:79:42:c0:1f:55:b3:49:
29:19:77:83:64:97:bc:8f:d2:9d:85:8b:32:fa:e7:bc:03:85:
8f:a6:8c:23:5a:65:8a:65:01:4f:87:00:82:5a:ad:20:7f:c9:
f5:f8:e6:6e:97:51:15:36:11:dc:47:16:5f:a7:6f:d2:cb:f7:
e4:96:9e:81:32:26:0d:51:3e:c5:eb:c9:46:73:7c:7b:6a:72:
d5:13:7b:26:21:9f:d2:9b:05:df:3a:68:36:bd:e4:07:6d:a6:
12:96:a3:0d:aa:4b:fd:51:93:a2:34:b6:af:b9:06:d1:59:7d:
e1:b2:ac:cd:ee:1e:1d:9d:c1:6f:9d:4a:bb:2d:39:2b:e6:a2:
c7:a7:57:fc:41:a9:4b:dc:03:1e:86:05:96:6d:1c:b8:58:81:
06:42:5a:e0:90:98:09:02:54:82:80:2a:61:3a:13:9b:5a:8e:
73:57:ac:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:25:39 2026 by rpki-client