Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/1/3139352e3133372e3235322e302f32342d3234203d3e20313937353337.roa
File: 3139352e3133372e3235322e302f32342d3234203d3e20313937353337.roa (raw, json)
Hash identifier: mgMQWupg/DJduDF+8HBUOXn5+ghStFl+2cN5huBHfGg=
Subject key identifier: 74:77:45:02:A3:A9:ED:E2:1D:1E:AF:42:22:98:47:80:A7:32:80:0B
Certificate issuer: /CN=07b1fb1839a414f2bbaafbe0efcd0f202bcf74fe
Certificate serial: 721B7DD0E1F51D1A5AFF54E0BC3236A99E0299F7
Authority key identifier: 07:B1:FB:18:39:A4:14:F2:BB:AA:FB:E0:EF:CD:0F:20:2B:CF:74:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B7H7GDmkFPK7qvvg780PICvPdP4.cer
Subject info access: rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/1/3139352e3133372e3235322e302f32342d3234203d3e20313937353337.roa
Signing time: Tue 16 Jun 2026 10:17:38 +0000
ROA not before: Tue 16 Jun 2026 10:12:38 +0000
ROA not after: Tue 15 Jun 2027 10:17:38 +0000
asID: 197537
IP address blocks: 195.137.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/1/07B1FB1839A414F2BBAAFBE0EFCD0F202BCF74FE.crl
rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/1/07B1FB1839A414F2BBAAFBE0EFCD0F202BCF74FE.mft
rsync://rpki.ripe.net/repository/DEFAULT/B7H7GDmkFPK7qvvg780PICvPdP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Jun 2026 11:49:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:1b:7d:d0:e1:f5:1d:1a:5a:ff:54:e0:bc:32:36:a9:9e:02:99:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07b1fb1839a414f2bbaafbe0efcd0f202bcf74fe
Validity
Not Before: Jun 16 10:12:38 2026 GMT
Not After : Jun 15 10:17:38 2027 GMT
Subject: CN=74774502A3A9EDE21D1EAF4222984780A732800B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:1f:88:96:40:5f:c7:5a:89:0d:3d:fd:53:62:
9e:7e:3a:51:2e:23:a5:fa:55:c9:b3:c7:09:68:62:
03:f9:24:49:91:80:ed:b1:5d:d9:e2:bd:cf:21:bd:
3c:5e:31:26:d8:73:73:4c:ac:12:c3:76:c3:1c:b5:
89:a5:b4:fd:f8:58:9f:3c:69:2b:6d:e5:1a:03:8e:
b8:c8:34:f2:a0:e9:e2:af:bc:9d:42:1e:c6:06:46:
c9:d6:75:47:22:16:a8:1b:f5:6e:5e:4b:c3:08:ef:
7d:da:33:76:15:10:7f:3e:37:a7:1f:af:90:97:13:
e0:70:32:de:99:38:ba:2f:c7:b5:4c:f4:15:16:6d:
5e:c4:35:c8:94:e3:ce:54:38:1e:85:91:de:3c:f6:
0c:df:26:64:c9:15:3e:9c:77:14:7d:1d:1e:a2:ca:
06:01:61:df:2a:aa:2b:44:93:95:4a:76:b7:ae:d2:
0e:a9:3f:5d:26:35:6c:fa:5e:7d:66:d5:42:96:b7:
2f:af:d2:d6:20:20:9b:a3:1d:61:49:5e:de:24:4a:
9a:d0:ee:61:f4:a4:e1:8d:88:bc:85:e6:96:4a:b0:
55:d3:70:f3:91:d2:f6:bd:9a:2e:70:39:05:63:1b:
32:28:22:fe:7f:e4:9f:14:57:4c:d8:7a:69:b2:d0:
c5:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:77:45:02:A3:A9:ED:E2:1D:1E:AF:42:22:98:47:80:A7:32:80:0B
X509v3 Authority Key Identifier:
keyid:07:B1:FB:18:39:A4:14:F2:BB:AA:FB:E0:EF:CD:0F:20:2B:CF:74:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/1/07B1FB1839A414F2BBAAFBE0EFCD0F202BCF74FE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B7H7GDmkFPK7qvvg780PICvPdP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/1/3139352e3133372e3235322e302f32342d3234203d3e20313937353337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.137.252.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:63:3c:54:c7:0c:26:62:e1:45:d4:b5:5b:61:9c:03:ef:a4:
47:f4:71:bf:7e:41:57:34:3c:b0:1d:82:c5:c1:ab:74:86:0b:
74:b6:59:43:ae:c2:e8:b3:2a:c7:71:73:7a:e2:f0:c2:1d:69:
c4:49:73:6d:18:d4:6f:76:c9:fd:0a:db:eb:18:f8:6e:e4:fd:
84:2a:40:3e:fb:0d:bb:e1:c2:0a:fa:7b:1c:83:e0:e4:bd:5a:
4f:d7:e3:a8:c2:28:5c:03:14:fe:df:b2:87:5f:09:24:c3:a9:
e8:f2:a2:02:01:c3:f3:71:b3:70:9c:8b:7e:fd:bb:0f:ed:0d:
8b:49:8b:2a:be:97:a2:f5:45:1d:3b:7b:16:e6:cf:b9:af:99:
55:96:6f:ae:af:3a:30:97:38:e9:0c:f8:04:f2:1b:69:14:7a:
3d:bb:55:3a:9b:b0:29:f9:28:7e:d9:8e:48:ce:1a:32:0b:ac:
47:8f:93:2d:06:ff:9a:10:5d:12:10:64:83:60:90:22:c1:69:
fc:f5:54:af:58:73:64:b1:fd:9e:a6:a0:1f:7e:31:8e:1e:25:
7b:68:a2:5e:8f:e4:11:e5:f4:8a:18:e9:d5:63:a6:99:d2:ac:
1b:bd:5a:00:76:fc:4a:ff:50:a3:c4:72:61:c1:ef:da:8c:17:
46:d2:0c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 05:10:10 2026 by rpki-client