Route Origin Authorization
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS400810.roa
File: AS400810.roa (raw, json)
Hash identifier: S5V91HnyuQ6h1RxyAOwY0aD/rH8H8K+h1g0dV+YpyPM=
Subject key identifier: 6E:5B:34:F8:22:E8:C2:75:0B:76:DB:53:F7:BC:0D:41:CC:A7:51:AE
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 05AEA5EE1380A2FD5021496010BB7D63DAF980EA
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS400810.roa
Signing time: Fri 18 Sep 2026 10:24:20 +0000
ROA not before: Fri 18 Sep 2026 10:19:20 +0000
ROA not after: Fri 17 Sep 2027 10:24:20 +0000
asID: 400810
IP address blocks: 85.155.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:ae:a5:ee:13:80:a2:fd:50:21:49:60:10:bb:7d:63:da:f9:80:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Sep 18 10:19:20 2026 GMT
Not After : Sep 17 10:24:20 2027 GMT
Subject: CN=6E5B34F822E8C2750B76DB53F7BC0D41CCA751AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:59:13:89:5b:7e:74:48:a7:f8:a7:87:f6:3b:
9d:d3:29:0c:a3:e8:e9:da:39:4d:37:53:7e:0a:b6:
74:b7:f9:53:fd:0e:00:66:3f:fd:22:db:53:19:ac:
c0:ec:ce:f9:3f:d3:48:d0:3f:b7:eb:8d:2a:30:bf:
65:e7:81:0e:3c:be:9d:13:88:10:ad:04:91:d3:48:
ad:b9:5d:38:1f:8d:eb:b4:ad:5e:42:0d:42:39:65:
4a:3c:a4:d1:cd:71:7d:b7:c2:a4:d9:0c:c3:be:4c:
4a:8b:1e:fd:f2:74:3d:40:28:73:9b:bf:41:af:5e:
1d:f2:42:44:40:18:bb:85:b6:24:78:b9:6b:66:6b:
9f:5b:b8:de:ff:2c:93:06:33:50:51:53:d3:0c:3e:
c3:dc:a5:76:f4:1a:ca:12:b6:43:3c:1e:e9:e4:9a:
c4:96:5b:f5:fe:9d:94:d2:be:dc:58:c2:d8:01:d1:
ac:3b:a2:80:92:f7:fd:be:bf:26:93:29:8d:b5:43:
fb:34:3e:75:a6:a5:02:8f:82:c2:95:ed:21:9a:36:
a6:8d:65:60:26:bd:0d:8a:00:4f:28:c9:be:ce:62:
93:50:64:6f:0b:93:e8:6a:5d:a6:40:c3:0f:47:3d:
1c:5b:bd:ad:9b:17:c3:2b:2c:40:64:5e:96:c3:c4:
67:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:5B:34:F8:22:E8:C2:75:0B:76:DB:53:F7:BC:0D:41:CC:A7:51:AE
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS400810.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.155.224.0/24
Signature Algorithm: sha256WithRSAEncryption
82:cb:cb:fa:51:42:9e:06:44:78:8c:96:4c:a6:18:2b:10:bd:
29:26:5b:4f:73:47:1a:6f:77:30:57:9b:03:ee:56:5c:5b:c4:
8c:80:65:08:b7:4e:c9:10:21:c3:11:b2:17:d5:1e:c2:50:5c:
71:92:3a:97:7d:50:ee:35:b8:97:8c:4e:e4:3a:67:5a:db:a7:
f6:4b:de:92:b1:4a:d6:dc:06:0d:17:fc:7d:93:5c:bb:81:3c:
57:16:bc:e8:e8:94:1b:24:a2:b1:86:0a:09:ea:34:af:7a:81:
69:e5:31:5f:9a:c6:ce:41:9a:12:ff:12:d2:88:3f:ea:d6:65:
21:9f:10:1a:a7:1f:8c:0d:30:a2:a3:ac:cb:ee:b0:4c:ff:07:
2c:e7:d9:98:66:2c:27:7d:49:ca:47:e3:d9:83:02:59:6e:b6:
61:57:3b:26:70:7a:4d:e6:18:8b:99:04:f3:97:4e:de:c2:45:
81:48:0e:fd:bc:f9:8e:cf:7f:14:55:71:68:cc:4a:03:45:a0:
ed:57:40:df:65:69:1f:e7:ca:7f:57:bc:ec:d2:58:07:7d:3b:
51:cc:36:07:61:5c:4c:2c:cd:1f:9e:04:52:ff:32:8b:48:a8:
79:04:11:e3:66:8b:a9:10:82:af:3d:ea:28:0c:db:0a:b9:eb:
cc:ac:fd:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:32:39 2026 by rpki-client