Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS215086.roa
File: AS215086.roa (raw, json)
Hash identifier: jBbvL8T4M9khOgRn7Lo2aQlJJhYEsrwmbd4GfZXGxjM=
Subject key identifier: D9:F4:C0:A6:CB:19:94:EA:7C:57:A0:55:AD:43:F7:42:B7:EF:64:98
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 7791E2760B85E99B5D29B66D2111054C3FA41164
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS215086.roa
Signing time: Thu 04 Jun 2026 15:58:53 +0000
ROA not before: Thu 04 Jun 2026 15:53:53 +0000
ROA not after: Thu 03 Jun 2027 15:58:53 +0000
asID: 215086
IP address blocks: 103.204.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:91:e2:76:0b:85:e9:9b:5d:29:b6:6d:21:11:05:4c:3f:a4:11:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jun 4 15:53:53 2026 GMT
Not After : Jun 3 15:58:53 2027 GMT
Subject: CN=D9F4C0A6CB1994EA7C57A055AD43F742B7EF6498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:77:63:e0:81:36:bc:5e:cb:34:66:66:fa:ce:
c3:8d:ea:cf:d9:ad:82:4e:c9:9b:74:a1:fa:34:86:
88:0d:09:db:24:97:3a:a6:7b:10:65:c9:2f:2e:0f:
6c:0f:13:06:89:78:47:ad:38:4e:ad:ba:8d:5b:6d:
12:b5:e7:d6:fd:54:3f:76:c4:c5:3f:9f:2c:f6:3f:
bd:e2:c9:53:15:db:a2:a7:c9:ff:14:93:b4:9e:3b:
7c:fc:fd:61:60:43:65:62:95:aa:64:5e:05:3c:97:
e4:b3:9f:1b:b7:c2:d5:26:bb:4c:cd:5e:dc:bf:40:
d8:fe:6a:ad:85:50:4d:b3:81:a0:02:af:fa:87:27:
f0:c0:06:a5:26:05:9e:e5:c9:d1:53:67:a3:fe:75:
7e:87:28:6b:bd:6e:b6:39:f7:84:7b:86:67:ea:ed:
e8:d4:5d:20:9b:8a:f9:64:a3:22:43:85:c4:04:e6:
9c:30:60:ed:16:2d:81:44:d2:f3:98:68:b7:dc:39:
11:1b:06:42:44:58:12:63:5c:11:dd:2d:15:1d:5f:
9b:e6:a1:e9:09:39:77:cb:9d:ea:8c:d2:2a:f3:71:
70:3c:fb:2c:56:03:ea:35:21:4a:8c:18:fc:64:80:
24:8a:1a:1d:cd:2c:83:12:de:bd:2b:e5:bc:7b:79:
10:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:F4:C0:A6:CB:19:94:EA:7C:57:A0:55:AD:43:F7:42:B7:EF:64:98
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS215086.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.204.195.0/24
Signature Algorithm: sha256WithRSAEncryption
62:ea:25:8c:7e:b3:5d:56:9e:05:5d:88:30:f7:d7:44:2e:86:
95:47:6f:5a:c7:5b:ce:75:1f:3f:23:a1:09:35:df:83:30:05:
e6:c6:b7:28:d7:d0:44:cd:44:49:eb:da:72:13:ac:93:66:34:
96:10:a9:ae:9b:08:20:e5:8c:79:bf:dc:27:6a:08:c0:9d:b7:
b7:d7:48:40:20:29:d0:60:71:31:6a:1b:62:a0:ea:35:8c:59:
00:76:c7:57:f0:ec:40:b5:02:86:1f:04:0b:8f:c0:69:6c:f9:
ac:24:9c:38:df:e9:3c:52:18:ec:a1:5d:c8:b1:88:e2:31:d0:
fa:67:d7:d2:05:be:70:cd:0c:d8:7b:79:eb:7c:08:b4:1f:4d:
f8:f0:7b:3d:81:ec:20:1d:a9:69:dc:df:87:e3:88:66:63:28:
40:3e:6b:0a:68:ca:76:fc:99:7d:38:5f:b7:1e:d4:db:25:81:
81:b0:60:83:1c:31:ac:e1:b6:35:ee:ae:ba:e1:b0:a3:47:ae:
be:4e:86:a3:f0:0a:fc:3e:85:83:c0:ae:93:db:52:bc:44:84:
d3:87:33:34:f7:d7:88:2a:cb:2a:72:51:41:a0:d1:2b:c9:88:
f0:13:7f:ec:14:57:66:f1:6c:07:8e:c0:d1:60:37:68:12:60:
29:e1:f8:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:25:43 2026 by rpki-client