Route Origin Authorization
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS400587.roa
File: AS400587.roa (raw, json)
Hash identifier: vntZLmspDYvfPAuYOioAYrIiwfYuOTWyULHIFZmWV9g=
Subject key identifier: 87:67:5C:54:C3:73:F6:19:D8:16:E9:69:19:38:2D:24:95:67:60:0B
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 6085C8751AB0F5579C195FDF26A3AE330A34BB47
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS400587.roa
Signing time: Thu 17 Sep 2026 19:59:11 +0000
ROA not before: Thu 17 Sep 2026 19:54:11 +0000
ROA not after: Thu 16 Sep 2027 19:59:11 +0000
asID: 400587
IP address blocks: 85.155.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:85:c8:75:1a:b0:f5:57:9c:19:5f:df:26:a3:ae:33:0a:34:bb:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Sep 17 19:54:11 2026 GMT
Not After : Sep 16 19:59:11 2027 GMT
Subject: CN=87675C54C373F619D816E96919382D249567600B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6f:be:b8:80:e6:04:40:3a:92:dc:46:75:ce:
4a:a3:d3:a9:1e:e4:31:0b:2d:84:d7:b0:6d:09:77:
94:77:2b:46:03:af:99:3b:5e:b8:56:04:99:02:b9:
82:eb:aa:06:73:f9:66:3c:0a:ce:92:e9:54:8d:ea:
44:f3:bc:3b:98:e6:64:44:ae:1c:20:53:b6:80:91:
00:07:8e:b4:7c:8a:2c:c3:e4:cb:2c:b9:5e:1e:d0:
3d:12:61:b8:17:de:48:90:d5:b0:16:d9:71:1e:fd:
f5:46:7c:fa:25:82:16:5c:bc:96:f7:ff:ed:ff:31:
0b:e7:ed:3f:22:06:da:26:4e:d3:db:56:c4:87:83:
40:b9:d2:b4:54:f6:8b:3a:dd:9a:41:7e:12:d2:34:
b4:35:bc:9c:f0:91:63:fc:74:fa:72:d6:bd:27:9a:
b3:3a:bc:21:c1:6d:27:40:34:c6:60:5d:d0:41:63:
09:38:fe:2d:31:f4:da:64:b4:da:1e:5a:0e:9a:07:
6a:85:7c:a8:8d:67:27:cc:f5:44:65:9c:72:28:20:
da:eb:9e:c8:15:cd:50:06:a7:45:c1:bb:92:32:4f:
c6:7f:22:35:38:83:5a:88:6d:55:10:0c:3e:5b:e8:
36:f2:c0:48:80:61:9f:15:77:37:56:59:b8:a5:c2:
a9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:67:5C:54:C3:73:F6:19:D8:16:E9:69:19:38:2D:24:95:67:60:0B
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS400587.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.155.231.0/24
Signature Algorithm: sha256WithRSAEncryption
79:05:91:38:40:b7:f1:bb:c7:27:f4:de:17:cf:11:3e:58:e6:
8b:12:32:b4:33:5c:ad:81:0b:ea:67:33:ec:a6:cc:7e:d5:68:
74:7b:f5:ee:b8:dc:fd:95:00:68:7a:fd:a1:b4:f9:53:f6:e4:
64:72:e3:91:7e:f5:29:46:5c:36:dd:af:08:58:65:a6:a4:34:
83:61:93:99:28:40:6f:d7:ee:e1:3e:d2:06:80:ff:7d:3b:8c:
6d:93:6c:99:2a:70:ce:a8:96:dd:58:ee:62:22:f7:a3:40:fb:
9b:48:40:aa:3f:1d:fd:f5:33:56:46:fb:bb:e5:85:3d:15:65:
a4:40:54:03:f3:cf:45:71:9b:ca:6e:9d:0b:d6:27:ec:cd:d4:
68:65:55:81:3d:1a:62:15:04:38:ac:c3:ec:57:23:18:99:ec:
ac:52:47:7f:31:67:6e:ef:05:9b:4a:e5:14:27:02:9a:f3:54:
0b:5c:de:d1:5c:7d:dc:72:38:dd:18:84:48:83:b5:99:2d:9b:
61:38:cd:48:b5:1b:87:23:b9:5e:51:1f:ca:6b:6f:13:c4:62:
8f:58:5a:46:a8:e5:19:b4:da:9d:f5:d4:74:72:dd:26:5d:51:
e3:aa:e5:05:b4:07:31:54:40:fc:bd:56:49:a0:6b:a3:ba:df:
a8:e7:3a:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:29:48 2026 by rpki-client