Route Origin Authorization
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS52025.roa
File: AS52025.roa (raw, json)
Hash identifier: djgKVVq1eOV6/Z3rbQYXic0+Ssz+sBEizI04+xIkH4c=
Subject key identifier: 8E:DE:46:FD:A6:F1:BD:04:BA:17:99:F2:ED:32:58:26:31:B7:D5:FC
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 5D36BE030F6F44D7D327F11078CAD38119D608AC
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS52025.roa
Signing time: Wed 04 Nov 2026 03:33:00 +0000
ROA not before: Wed 04 Nov 2026 03:28:00 +0000
ROA not after: Wed 03 Nov 2027 03:33:00 +0000
asID: 52025
IP address blocks: 85.155.229.0/24 maxlen: 24
136.148.70.0/24 maxlen: 24
2a06:a005:5b8::/48 maxlen: 48
2a06:a005:1da0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:36:be:03:0f:6f:44:d7:d3:27:f1:10:78:ca:d3:81:19:d6:08:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Nov 4 03:28:00 2026 GMT
Not After : Nov 3 03:33:00 2027 GMT
Subject: CN=8EDE46FDA6F1BD04BA1799F2ED32582631B7D5FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b3:e9:02:06:32:e6:9a:ad:42:3f:96:7f:f6:
c5:5c:61:e3:05:c6:fe:7d:8f:fd:bc:23:2a:38:55:
e8:84:81:39:fb:81:e0:b7:68:ad:c6:77:a7:65:4e:
ef:e4:84:0b:32:9a:b4:92:da:f5:92:4b:09:41:c3:
fd:d0:fe:ae:b2:1e:06:8a:39:1b:68:f3:b1:15:83:
30:ac:50:69:ff:fe:0d:02:c5:5d:22:d5:76:b6:50:
42:4c:8a:e3:a9:4b:db:87:b4:3b:96:88:c9:66:c3:
3f:bb:46:31:ca:8c:72:13:52:e3:33:2c:e5:38:f4:
57:60:15:60:ca:20:9a:5b:83:b6:cd:1f:4c:dc:33:
c7:3c:46:7d:22:fd:17:02:a6:9a:4d:6c:42:b7:49:
ff:a5:a4:2e:8a:f8:ca:bb:47:5d:03:40:57:77:3a:
85:20:4c:1e:9a:cd:34:92:d2:18:fc:24:5b:d2:80:
31:eb:95:20:d1:88:a2:8f:54:24:b1:68:af:5e:58:
04:b2:f9:72:4e:f7:e2:d8:ae:c6:86:dd:36:27:4f:
7f:14:66:90:64:56:bb:66:80:a8:01:1e:7f:6b:b1:
00:c2:38:b8:8a:0f:25:09:a3:88:9c:f4:88:61:f4:
01:9f:88:b9:4d:87:c2:ac:b2:bf:34:22:62:f2:b3:
0c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:DE:46:FD:A6:F1:BD:04:BA:17:99:F2:ED:32:58:26:31:B7:D5:FC
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS52025.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.155.229.0/24
136.148.70.0/24
IPv6:
2a06:a005:5b8::/48
2a06:a005:1da0::/44
Signature Algorithm: sha256WithRSAEncryption
6f:0d:b5:8a:05:ff:ed:3e:d0:e2:72:78:af:d4:0a:e3:e9:b2:
90:d7:ce:3f:28:0e:96:77:84:d1:2b:52:34:08:cc:58:70:e9:
90:6c:46:78:6f:f6:02:41:b9:59:b5:e1:2f:dc:53:d5:0b:fd:
d0:62:b1:ee:3d:ed:99:34:2e:71:e6:4b:1d:3a:20:c5:2f:12:
b5:5c:a2:d7:c6:71:21:af:b6:2d:0a:ff:1e:d5:45:4f:f3:5a:
1a:89:96:b4:1a:a5:02:15:86:93:56:66:1f:bd:dc:94:75:88:
bc:fa:c8:21:10:60:bb:7d:a0:4f:78:66:35:a6:9c:71:7f:85:
27:ad:30:c9:df:c6:6c:df:dd:9b:b0:33:52:1d:dc:38:7b:b0:
aa:5a:0a:ad:a8:46:d7:e4:77:81:d1:90:f0:5c:15:75:fa:34:
4a:61:03:6c:2d:67:29:25:3c:7c:49:77:1e:6d:22:69:a6:ae:
ad:d6:0a:7a:40:e7:94:ba:16:00:b7:e0:53:82:1d:b4:17:83:
0f:06:74:cc:63:bf:8a:b6:9b:d2:e3:69:4a:0e:87:9f:2d:2f:
8c:ec:28:7f:e8:b8:3f:95:85:97:9c:6f:8e:89:59:17:17:8a:
2c:6e:ca:03:e6:d2:87:32:a3:38:c1:00:65:db:d3:06:b3:a3:
f2:0f:ea:cb
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgIUXTa+Aw9vRNfTJ/EQeMrTgRnWCKwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDE0YjZmY2YyYjJjNjliZTA4NWU5Zjk1OTg3MmRjYmU4
ZWE1NDE3NzAeFw0yNjExMDQwMzI4MDBaFw0yNzExMDMwMzMzMDBaMDMxMTAvBgNV
BAMTKDhFREU0NkZEQTZGMUJEMDRCQTE3OTlGMkVEMzI1ODI2MzFCN0Q1RkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKs+kCBjLmmq1CP5Z/9sVcYeMF
xv59j/28Iyo4VeiEgTn7geC3aK3Gd6dlTu/khAsymrSS2vWSSwlBw/3Q/q6yHgaK
ORto87EVgzCsUGn//g0CxV0i1Xa2UEJMiuOpS9uHtDuWiMlmwz+7RjHKjHITUuMz
LOU49FdgFWDKIJpbg7bNH0zcM8c8Rn0i/RcCpppNbEK3Sf+lpC6K+Mq7R10DQFd3
OoUgTB6azTSS0hj8JFvSgDHrlSDRiKKPVCSxaK9eWASy+XJO9+LYrsaG3TYnT38U
ZpBkVrtmgKgBHn9rsQDCOLiKDyUJo4ic9Ihh9AGfiLlNh8Kssr80ImLyswzTAgMB
AAGjggIOMIICCjAdBgNVHQ4EFgQUjt5G/abxvQS6F5ny7TJYJjG31fwwHwYDVR0j
BBgwFoAU0Utvzyssab4IXp+VmHLcvo6lQXcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNy9EMTRCNkZDRjJC
MkM2OUJFMDg1RTlGOTU5ODcyRENCRThFQTU0MTc3LmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMFV0dnp5c3NhYjRJWHAtVm1ITGN2bzZsUVhjLmNlcjBvBggrBgEF
BQcBCwRjMGEwXwYIKwYBBQUHMAuGU3JzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC83L0FT
NTIwMjUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwPwYIKwYBBQUHAQcB
Af8EMDAuMBIEAgABMAwDBABVm+UDBACIlEYwGAQCAAIwEgMHACoGoAUFuAMHBCoG
oAUdoDANBgkqhkiG9w0BAQsFAAOCAQEAbw21igX/7T7Q4nJ4r9QK4+mykNfOPygO
lneE0StSNAjMWHDpkGxGeG/2AkG5WbXhL9xT1Qv90GKx7j3tmTQuceZLHTogxS8S
tVyi18ZxIa+2LQr/HtVFT/NaGomWtBqlAhWGk1ZmH73clHWIvPrIIRBgu32gT3hm
NaaccX+FJ60wyd/GbN/dm7AzUh3cOHuwqloKrahG1+R3gdGQ8FwVdfo0SmEDbC1n
KSU8fEl3Hm0iaaaurdYKekDnlLoWALfgU4IdtBeDDwZ0zGO/irab0uNpSg6Hny0v
jOwof+i4P5WFl5xvjolZFxeKLG7KA+bShzKjOMEAZdvTBrOj8g/qyw==
-----END CERTIFICATE-----
Generated at Thu Nov 5 04:55:54 2026 by rpki-client