Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS931.roa
File: AS931.roa (raw, json)
Hash identifier: IE+cqMXyzZhA/uzDqooBNC9l0EwA1Ci0DqElibtKyHo=
Subject key identifier: 6C:E8:94:EA:CF:08:97:72:00:D1:28:E5:FA:87:B9:47:7A:29:50:09
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 787B2EEEDD83974C6BEF0B115DC74AC178A4AEFA
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS931.roa
Signing time: Thu 04 Jun 2026 15:58:49 +0000
ROA not before: Thu 04 Jun 2026 15:53:49 +0000
ROA not after: Thu 03 Jun 2027 15:58:49 +0000
asID: 931
IP address blocks: 185.147.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:7b:2e:ee:dd:83:97:4c:6b:ef:0b:11:5d:c7:4a:c1:78:a4:ae:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jun 4 15:53:49 2026 GMT
Not After : Jun 3 15:58:49 2027 GMT
Subject: CN=6CE894EACF08977200D128E5FA87B9477A295009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1e:7f:ca:4a:e6:95:d4:fa:81:82:4d:2e:7f:
71:48:98:6e:5a:39:24:5b:fc:ea:cf:f0:ec:de:a5:
a1:9a:b4:9e:94:33:b1:07:40:6d:98:99:a1:58:49:
6d:da:a3:08:cf:41:54:e1:34:9a:4b:c7:53:87:55:
f1:27:b4:59:fb:bd:cb:a0:a6:d4:66:89:9d:93:8c:
8c:b0:9f:98:b3:0e:d4:d0:30:c2:13:78:f2:ce:59:
b7:54:95:ad:bd:7e:d6:4c:78:63:52:78:c3:b7:61:
47:35:ef:d6:0e:3c:12:2e:27:a5:ed:a8:b7:c8:ad:
5f:3a:42:54:b9:f5:61:56:4e:ae:2b:d0:3e:16:7a:
de:3b:91:f5:59:6f:16:14:29:55:12:71:67:ce:3a:
fd:87:d9:24:4b:86:4b:fa:68:81:1a:c6:17:f1:15:
3d:38:28:bb:3f:e7:19:ff:44:1c:71:fb:f7:7b:ba:
95:d4:2d:26:c6:a3:6e:4b:a1:e6:f9:26:ad:e3:91:
26:e7:a6:75:29:2a:36:cc:da:45:0a:00:4b:b1:f5:
af:8e:f8:7a:d5:94:38:64:a3:2f:78:a9:b6:13:d4:
3f:78:45:95:d7:6b:f2:70:ad:a3:55:a0:26:f5:36:
85:94:b0:72:b9:7f:82:c3:6d:06:d4:09:9a:b2:46:
72:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:E8:94:EA:CF:08:97:72:00:D1:28:E5:FA:87:B9:47:7A:29:50:09
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.147.34.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:d7:93:7e:de:e7:de:50:51:e7:af:50:34:51:51:52:c0:fa:
13:bf:22:e7:95:67:fa:b5:12:a6:2e:a4:2a:fd:e9:b7:48:cb:
3c:ce:b8:9f:88:f0:57:82:ba:9d:27:b4:c6:d3:7b:3c:19:ba:
b6:bf:01:de:c9:ca:2d:08:21:a2:8b:ad:4b:e5:17:56:c8:41:
a1:9b:dd:da:40:75:d9:fa:c4:f3:06:bb:9d:48:30:17:89:82:
5f:52:44:98:55:a3:3f:ff:d1:f2:83:b7:b1:ae:3b:c7:9d:91:
5f:7c:7e:24:c1:a6:c5:e7:40:2e:81:75:30:4f:85:67:64:af:
8e:ba:89:52:92:3c:2e:14:df:31:5d:b4:79:55:e0:3f:a5:11:
de:cf:81:7c:68:e5:1a:5a:e6:68:1b:f4:e8:d3:0c:2e:a2:49:
05:84:ae:eb:68:34:60:2e:32:df:ad:30:18:66:86:b6:59:5d:
72:c7:e8:8d:6d:b7:c4:2a:25:f0:a0:72:e0:a1:8d:3f:3b:25:
3c:50:93:5a:ad:91:d6:88:6e:4d:8a:80:01:39:6f:5e:28:f6:
3f:bd:78:83:bb:eb:d4:10:6d:4e:f7:0d:46:ca:fa:e4:4a:0e:
9e:66:a6:15:19:74:5a:0b:0e:9c:f0:94:22:27:c3:9f:54:ca:
d8:e5:33:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:58:12 2026 by rpki-client