Route Origin Authorization
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS218832.roa
File: AS218832.roa (raw, json)
Hash identifier: 19hU8vwckdtr5TKbdvL+jTtES7gpudj5HhAANojoOAQ=
Subject key identifier: 08:BA:57:46:BE:FD:41:00:D3:32:39:55:0C:1C:63:6E:4C:11:FE:8C
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 17DAB7C6BD1B8035D31242AEC1697562BB7A5E77
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS218832.roa
Signing time: Mon 31 Aug 2026 05:41:53 +0000
ROA not before: Mon 31 Aug 2026 05:36:53 +0000
ROA not after: Mon 30 Aug 2027 05:41:53 +0000
asID: 218832
IP address blocks: 85.155.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:da:b7:c6:bd:1b:80:35:d3:12:42:ae:c1:69:75:62:bb:7a:5e:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Aug 31 05:36:53 2026 GMT
Not After : Aug 30 05:41:53 2027 GMT
Subject: CN=08BA5746BEFD4100D33239550C1C636E4C11FE8C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6e:ab:27:ab:ed:02:40:11:f4:88:d3:65:40:
ab:8d:21:51:09:3a:ef:76:66:cb:ea:03:8d:a3:ce:
fa:ac:e2:71:b8:ed:65:42:83:6f:a8:b9:fe:be:04:
af:7a:0b:eb:06:e3:4c:bc:6d:ab:54:53:dc:57:a9:
6b:d9:17:8a:38:1f:91:95:4f:bb:de:0e:0c:ff:cf:
db:e6:93:72:d4:8f:31:de:e1:12:af:58:27:86:03:
ba:2f:c9:46:82:d7:28:cb:d4:cc:95:97:7f:60:b2:
ed:2c:df:14:f1:73:65:b9:7b:46:2c:34:b1:58:65:
e5:96:f5:98:04:cf:be:92:e5:21:9f:68:68:ec:ae:
86:a7:86:3a:13:4d:13:a0:a8:d2:a0:bf:60:9a:c8:
d7:f4:53:0b:dc:0d:a1:9c:4d:47:30:31:97:96:29:
2c:41:3f:62:fc:ef:93:3e:38:03:cf:e4:6c:e0:2d:
12:1d:fe:fb:e9:fc:8a:eb:c1:f2:7a:3e:2d:e1:3f:
e6:72:e2:01:70:c4:e6:92:52:45:20:43:a3:f9:86:
52:7c:19:a5:cf:f2:0e:09:d1:ad:85:4b:28:fe:9a:
f8:4f:fd:2f:b8:a8:34:6f:53:05:81:5c:b6:06:64:
1e:4f:14:45:0b:15:0b:18:fb:35:dd:f5:32:63:60:
b7:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:BA:57:46:BE:FD:41:00:D3:32:39:55:0C:1C:63:6E:4C:11:FE:8C
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS218832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.155.226.0/24
Signature Algorithm: sha256WithRSAEncryption
27:17:ec:d3:6c:46:1c:f1:46:8b:93:72:55:da:03:1b:54:41:
24:70:fe:3e:2f:1c:49:bb:92:92:3d:f8:8b:59:bb:3c:c1:5d:
8d:bf:ef:1d:92:cb:fd:c4:42:4b:ee:ea:46:e0:e8:b9:f0:be:
33:5c:81:eb:ce:53:68:c4:29:0b:e7:02:be:50:ac:28:da:91:
52:32:ab:f2:73:c4:cd:9f:d5:c5:05:bc:d0:21:cb:b1:fb:85:
14:e4:03:70:97:c9:7c:f1:d6:f5:75:eb:2d:76:cc:49:be:39:
8b:bb:ae:2f:cc:48:0f:e4:1f:dd:54:d9:cb:30:b4:ff:ee:1b:
8b:ee:3d:b8:94:51:b7:2c:8e:aa:66:ac:a7:5b:92:93:3c:38:
c9:bd:b7:96:3d:d5:98:46:03:e7:03:63:ad:d6:f9:f5:69:46:
06:14:2d:68:d6:56:d7:59:90:0c:24:1f:d7:91:51:4a:f7:3a:
0f:1d:e9:d6:65:e0:17:40:83:6b:5b:0b:3a:f8:2e:89:df:b9:
51:39:18:2a:4f:f2:11:61:d1:f6:7e:8e:eb:c2:54:d0:fa:dd:
f5:08:9f:70:ba:53:63:d7:58:87:02:58:80:02:5b:5f:e1:b0:
39:70:8f:20:5c:f1:98:12:3f:de:eb:13:68:77:27:ef:20:38:
fd:a9:e0:e3
-----BEGIN CERTIFICATE-----
MIIE5TCCA82gAwIBAgIUF9q3xr0bgDXTEkKuwWl1Yrt6XncwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDE0YjZmY2YyYjJjNjliZTA4NWU5Zjk1OTg3MmRjYmU4
ZWE1NDE3NzAeFw0yNjA4MzEwNTM2NTNaFw0yNzA4MzAwNTQxNTNaMDMxMTAvBgNV
BAMTKDA4QkE1NzQ2QkVGRDQxMDBEMzMyMzk1NTBDMUM2MzZFNEMxMUZFOEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgbqsnq+0CQBH0iNNlQKuNIVEJ
Ou92ZsvqA42jzvqs4nG47WVCg2+ouf6+BK96C+sG40y8batUU9xXqWvZF4o4H5GV
T7veDgz/z9vmk3LUjzHe4RKvWCeGA7ovyUaC1yjL1MyVl39gsu0s3xTxc2W5e0Ys
NLFYZeWW9ZgEz76S5SGfaGjsroanhjoTTROgqNKgv2CayNf0UwvcDaGcTUcwMZeW
KSxBP2L875M+OAPP5GzgLRId/vvp/IrrwfJ6Pi3hP+Zy4gFwxOaSUkUgQ6P5hlJ8
GaXP8g4J0a2FSyj+mvhP/S+4qDRvUwWBXLYGZB5PFEULFQsY+zXd9TJjYLfZAgMB
AAGjggHvMIIB6zAdBgNVHQ4EFgQUCLpXRr79QQDTMjlVDBxjbkwR/owwHwYDVR0j
BBgwFoAU0Utvzyssab4IXp+VmHLcvo6lQXcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNy9EMTRCNkZDRjJC
MkM2OUJFMDg1RTlGOTU5ODcyRENCRThFQTU0MTc3LmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMFV0dnp5c3NhYjRJWHAtVm1ITGN2bzZsUVhjLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC83L0FT
MjE4ODMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAVZviMA0GCSqGSIb3DQEBCwUAA4IBAQAnF+zTbEYc
8UaLk3JV2gMbVEEkcP4+LxxJu5KSPfiLWbs8wV2Nv+8dksv9xEJL7upG4Oi58L4z
XIHrzlNoxCkL5wK+UKwo2pFSMqvyc8TNn9XFBbzQIcux+4UU5ANwl8l88db1dest
dsxJvjmLu64vzEgP5B/dVNnLMLT/7huL7j24lFG3LI6qZqynW5KTPDjJvbeWPdWY
RgPnA2Ot1vn1aUYGFC1o1lbXWZAMJB/XkVFK9zoPHenWZeAXQINrWws6+C6J37lR
ORgqT/IRYdH2fo7rwlTQ+t31CJ9wulNj11iHAliAAltf4bA5cI8gXPGYEj/e6xNo
dyfvIDj9qeDj
-----END CERTIFICATE-----
Generated at Mon Sep 21 22:10:24 2026 by rpki-client