Route Origin Authorization
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS401486.roa
File: AS401486.roa (raw, json)
Hash identifier: 5Kw2nAlj2F5tMS4+WtgUevyCtwlMdESCTN8JAA6KdEI=
Subject key identifier: F1:94:EC:C3:97:AD:C9:1C:6D:01:5C:8D:E2:46:B8:69:3B:D5:64:64
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 1C0B1A787E903723E43B961510C720AD2022371E
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS401486.roa
Signing time: Wed 16 Sep 2026 23:16:26 +0000
ROA not before: Wed 16 Sep 2026 23:11:26 +0000
ROA not after: Wed 15 Sep 2027 23:16:26 +0000
asID: 401486
IP address blocks: 136.148.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:0b:1a:78:7e:90:37:23:e4:3b:96:15:10:c7:20:ad:20:22:37:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Sep 16 23:11:26 2026 GMT
Not After : Sep 15 23:16:26 2027 GMT
Subject: CN=F194ECC397ADC91C6D015C8DE246B8693BD56464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:53:50:45:53:09:a7:dc:40:25:db:6c:af:32:
db:8f:00:84:c3:bd:1f:0a:bd:0f:02:c6:74:9a:74:
40:66:07:e4:66:05:f0:9b:f1:01:cb:33:0d:40:f0:
e7:a4:f3:f5:bf:89:5e:b9:e0:ef:0d:91:5e:2a:98:
a4:9f:29:c3:d9:03:16:54:0e:11:43:08:3a:ab:32:
03:8f:45:e0:47:8f:ab:86:f2:bc:32:8a:4b:45:d2:
8f:c3:08:1f:55:b7:c1:a7:04:93:82:3f:7d:89:3f:
22:8a:87:b5:e8:9d:67:d7:59:ef:b6:f4:35:df:79:
52:bc:7e:39:30:dd:59:6b:dc:e4:56:db:b7:19:cd:
dd:45:88:40:68:d4:48:ef:94:9e:89:71:92:c5:1d:
ba:b4:25:9a:01:12:83:f8:6f:fb:92:2e:75:93:00:
2f:ce:61:90:81:53:df:4c:99:97:c7:de:24:c0:64:
77:99:e0:3e:62:8e:69:98:61:24:81:62:c9:2b:27:
76:e5:04:49:6b:b2:c6:ea:23:6e:14:b7:63:b4:1d:
4b:25:9a:db:22:83:d1:fb:6e:f4:b8:a5:53:63:9d:
8a:05:68:f1:67:18:17:24:cf:f6:36:a3:f6:87:82:
30:14:ee:75:06:89:cb:05:fe:52:f4:7e:ef:13:39:
e3:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:94:EC:C3:97:AD:C9:1C:6D:01:5C:8D:E2:46:B8:69:3B:D5:64:64
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS401486.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
136.148.76.0/24
Signature Algorithm: sha256WithRSAEncryption
69:06:ec:0d:58:5a:f2:83:30:72:ff:58:2f:9f:15:ec:d8:8c:
f5:e9:8b:2d:f5:ef:b0:11:19:80:dc:ba:d6:57:2d:10:03:6c:
39:02:78:13:54:11:3f:64:51:da:13:11:5d:e3:80:61:53:6c:
ca:d8:85:25:64:50:65:e9:05:4d:5f:63:ee:6b:1b:d4:ff:6c:
02:0b:42:7e:a4:e8:70:64:cc:c2:f1:08:0b:02:d5:2c:d4:06:
f2:63:6e:e0:4c:5f:60:4f:32:6f:e7:36:90:39:22:40:7d:28:
f1:28:97:96:6d:1e:26:91:3a:d3:22:69:bc:37:a3:c0:e9:80:
ad:d8:45:74:59:4d:30:bc:6f:0c:85:ba:a0:a3:e9:a7:a8:dc:
a2:8e:6b:88:f5:71:0b:5a:9e:b6:8a:c5:eb:50:fa:e5:dc:5e:
e2:96:84:68:fd:e7:a3:42:8d:0a:7b:c4:09:99:aa:e0:82:7d:
c5:14:2f:a6:67:3e:29:7d:d0:d0:66:26:52:ac:63:ee:ee:a2:
40:34:bd:10:40:7d:63:ef:1d:1d:a7:f6:06:43:56:94:85:bb:
4b:f2:af:71:05:65:4a:1c:56:16:90:1f:14:b5:0b:11:01:bf:
48:ce:d9:01:07:31:b6:63:02:0d:7c:14:42:ee:86:a6:77:2b:
7e:ea:b5:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 04:19:36 2026 by rpki-client