Route Origin Authorization
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS59253.roa
File: AS59253.roa (raw, json)
Hash identifier: aXQyprBwXGKliGyLLfLVVLXqz11w5GncWZkkUJni1is=
Subject key identifier: DA:EF:C6:1A:0D:D4:58:C0:AA:FB:4D:89:B7:7B:DB:B1:87:F9:24:85
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 23F88845D898374215D315478574B1EC6B0358B3
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS59253.roa
Signing time: Fri 23 Oct 2026 09:32:00 +0000
ROA not before: Fri 23 Oct 2026 09:27:00 +0000
ROA not after: Fri 22 Oct 2027 09:32:00 +0000
asID: 59253
IP address blocks: 81.31.208.0/24 maxlen: 24
2a0d:d903::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:f8:88:45:d8:98:37:42:15:d3:15:47:85:74:b1:ec:6b:03:58:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Oct 23 09:27:00 2026 GMT
Not After : Oct 22 09:32:00 2027 GMT
Subject: CN=DAEFC61A0DD458C0AAFB4D89B77BDBB187F92485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0b:ec:75:de:11:d3:7d:f8:0f:0f:78:2b:a7:
52:81:e5:5a:c1:90:02:66:fe:aa:62:4c:94:89:42:
8c:a0:05:34:d9:fb:6f:b1:bb:a1:0f:ba:ad:a5:e3:
de:9f:07:92:5a:e3:0f:aa:de:15:75:f1:5c:ea:3e:
b5:d8:af:cb:fe:14:46:e8:00:3f:1d:e5:e6:a8:f6:
d7:28:f3:62:7a:36:01:69:bb:d2:f0:5c:87:ed:da:
73:da:4a:29:bc:1c:36:f6:b8:a1:ed:df:36:bb:9a:
38:6b:7f:c8:82:5d:41:c3:cd:19:ad:bf:9c:29:ed:
69:04:23:7a:89:30:53:40:57:d2:fe:f5:c1:af:5a:
e8:c9:82:d5:9a:62:33:61:79:c8:dd:c7:43:dd:b6:
ff:9d:d4:bb:8f:94:e5:32:58:bf:a1:f4:6b:a2:6c:
56:9c:37:dd:ad:cb:d3:d0:46:a7:95:3f:62:20:2c:
fe:e3:05:ed:cc:02:3c:5a:d2:39:67:0c:78:5f:1d:
a9:1a:14:7a:52:fa:88:99:14:28:f9:53:a1:13:12:
94:a5:ff:2e:95:7a:23:6d:b8:02:28:b4:62:f2:80:
1f:44:4b:cc:a3:28:c8:c9:82:cc:51:96:4d:f7:44:
18:dd:37:63:22:21:2c:0c:5b:8e:33:aa:ad:51:b6:
48:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:EF:C6:1A:0D:D4:58:C0:AA:FB:4D:89:B7:7B:DB:B1:87:F9:24:85
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS59253.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.31.208.0/24
IPv6:
2a0d:d903::/32
Signature Algorithm: sha256WithRSAEncryption
44:1f:cc:96:b5:ed:55:7b:19:a5:29:db:50:be:32:54:44:49:
1e:f5:5f:82:25:a2:dd:e5:5a:32:2c:46:9c:d7:f7:15:d1:5a:
18:d8:35:ca:47:8c:f0:2d:a6:9f:a7:aa:c4:79:5c:a7:82:45:
77:07:04:b4:7a:03:67:c4:eb:89:4f:51:aa:5d:43:a4:e6:ea:
ed:70:62:af:81:5d:fa:b7:53:ff:35:f2:fb:b9:25:e7:d2:16:
5c:3c:96:47:8f:84:75:5a:29:8d:7c:76:eb:cf:4c:08:f1:af:
e7:a9:46:bd:78:ca:fc:cc:91:24:ab:82:a4:0c:16:8f:a8:05:
d1:bf:a9:bc:79:eb:c1:3b:ae:75:98:a9:7f:3f:d4:a4:e9:4a:
fd:1a:e1:f8:89:7d:de:0e:fc:06:c5:ed:50:4e:fb:f6:02:a6:
63:4e:ab:7e:7d:90:94:2c:09:57:32:cd:05:18:a6:28:f8:01:
ad:84:16:03:6f:3c:f4:44:57:df:5b:c3:79:72:a7:7f:2e:ac:
8a:d5:5e:4a:b0:a7:ab:41:4b:99:68:8c:94:a9:1d:d1:44:05:
95:1d:50:ad:e3:a3:a1:7a:f2:05:d4:0f:2d:6f:95:dc:e9:f8:
74:38:b8:c8:fc:44:cc:26:e9:43:e4:23:94:21:ef:2f:06:44:
d7:2e:b7:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 17:02:18 2026 by rpki-client