Route Origin Authorization
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS215666.roa
File: AS215666.roa (raw, json)
Hash identifier: O0/IgmK78aCK+PlwCYMPahh0MrDIgjZOlEbpQVvoDoE=
Subject key identifier: 23:33:7F:48:F7:60:AB:D5:1F:2F:01:F9:DD:98:7F:11:3C:4A:3F:4B
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 05E061CD651C41225ECC11865F1BFB61BA8B642E
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS215666.roa
Signing time: Thu 29 Oct 2026 09:52:39 +0000
ROA not before: Thu 29 Oct 2026 09:47:39 +0000
ROA not after: Thu 28 Oct 2027 09:52:39 +0000
asID: 215666
IP address blocks: 202.50.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 22:05:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:e0:61:cd:65:1c:41:22:5e:cc:11:86:5f:1b:fb:61:ba:8b:64:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Oct 29 09:47:39 2026 GMT
Not After : Oct 28 09:52:39 2027 GMT
Subject: CN=23337F48F760ABD51F2F01F9DD987F113C4A3F4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e7:ec:1a:bc:7a:24:bf:f2:3d:5a:a6:fb:66:
e5:38:47:b6:de:6c:98:75:f7:c6:c2:8e:f8:02:7f:
96:c8:1c:c6:ff:52:2d:27:13:74:03:fe:ac:82:83:
5c:49:d6:37:f0:8e:97:cc:95:99:d7:96:1f:6c:a2:
d4:16:c3:e4:45:f0:de:59:19:7c:12:bc:f1:3e:6e:
f0:84:66:5b:1b:fd:5c:6b:10:13:e3:4a:e9:1a:02:
49:16:b6:7a:7b:f8:3c:c7:8b:d1:d1:27:a3:5c:4a:
31:14:76:9c:b5:a9:01:8f:35:48:9c:6f:2c:ed:fa:
59:ab:83:dd:72:9a:7a:20:2e:18:5f:9e:61:da:52:
61:d0:32:c6:20:dc:9e:88:b9:81:d2:d7:2c:74:27:
46:4c:73:01:45:3c:9a:d8:98:4f:81:fb:20:c1:f3:
4b:85:0a:b7:04:7c:e6:47:3f:67:e9:f4:9f:b4:17:
b6:10:d4:b1:01:8e:05:ca:bf:78:69:08:3f:4f:e1:
c7:d9:d5:f3:67:0c:48:ab:f7:ae:9e:d8:e6:76:bc:
70:e5:e5:f9:10:11:15:e2:8d:18:59:60:8d:eb:7f:
e0:9f:c2:bf:54:f0:fd:42:77:7b:d9:13:54:59:39:
03:82:62:bb:99:38:29:35:3f:73:6a:2e:d6:df:8c:
ff:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:33:7F:48:F7:60:AB:D5:1F:2F:01:F9:DD:98:7F:11:3C:4A:3F:4B
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS215666.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.50.54.0/24
Signature Algorithm: sha256WithRSAEncryption
00:28:61:ee:f5:fe:eb:9d:b7:78:e3:19:e2:e2:54:b0:6e:61:
39:19:e1:b0:7d:0e:65:97:3a:01:9b:27:52:81:7d:0a:43:a7:
60:d5:da:8c:8b:29:2e:20:06:b2:d8:62:1f:6b:e5:ac:22:cf:
5c:26:6f:ee:29:61:62:0b:24:33:5c:6d:88:c0:b8:fb:8c:11:
47:5c:6b:ff:b8:70:44:4e:04:77:a3:49:03:13:88:69:f6:c5:
d3:46:9c:c5:e2:a1:a3:03:91:44:81:4f:29:44:68:5f:f2:93:
80:eb:5c:5c:38:94:09:9d:6d:5f:fe:f3:5d:4c:37:a9:0b:9c:
a9:76:20:00:5d:c4:eb:49:13:84:9f:03:de:0b:39:87:aa:d2:
88:ee:d9:cb:00:79:dc:f5:46:69:5f:77:d2:bf:9c:e9:4e:0b:
ea:a6:39:cd:69:db:0d:48:b8:2a:03:a8:76:cc:e7:e7:18:37:
16:37:ab:25:81:11:11:d2:7e:7a:19:57:e0:76:1d:28:9f:07:
7e:0c:ce:27:ca:2b:77:7d:50:bd:99:22:8b:88:80:a9:5d:68:
9b:90:5d:30:cf:86:fc:b1:01:f5:fc:e0:d4:53:95:04:3c:e5:
3d:31:63:64:6c:5d:35:4c:39:31:93:99:c3:dd:54:9b:81:b1:
76:27:3d:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 05:30:53 2026 by rpki-client