Route Origin Authorization
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS197537.roa
File: AS197537.roa (raw, json)
Hash identifier: SqPnaL/lxOqz/JuSqMdeSYs9k7UIYtmmh6nM89Np/0E=
Subject key identifier: AD:B9:AE:E3:85:A9:11:D4:6C:FB:00:A1:83:80:8E:42:01:7B:1D:79
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 37C3013ADF8090519725811F0DA2EFDA481055BB
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS197537.roa
Signing time: Mon 03 Aug 2026 10:33:27 +0000
ROA not before: Mon 03 Aug 2026 10:28:27 +0000
ROA not after: Mon 02 Aug 2027 10:33:27 +0000
asID: 197537
IP address blocks: 153.76.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 14:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:c3:01:3a:df:80:90:51:97:25:81:1f:0d:a2:ef:da:48:10:55:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Aug 3 10:28:27 2026 GMT
Not After : Aug 2 10:33:27 2027 GMT
Subject: CN=ADB9AEE385A911D46CFB00A183808E42017B1D79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:da:e9:93:62:3a:ea:a6:4d:8c:95:52:c9:1f:
c7:54:dd:8b:5d:49:72:42:5b:ab:40:ea:e0:ec:b8:
ec:70:b0:39:73:a7:c0:a4:b4:0f:61:5c:0a:77:7e:
43:cf:89:8f:bf:b3:a0:6a:e8:69:14:ad:51:55:18:
ff:eb:ef:f6:db:41:3e:2f:a6:07:32:ab:3b:ec:fe:
90:96:f9:a6:64:6a:72:f6:5d:ea:ec:6c:1c:d3:c9:
f5:ae:91:60:00:45:01:6a:69:12:ed:05:96:52:5e:
0d:7f:2f:0c:2a:16:8b:34:75:fc:e1:49:13:98:c5:
fb:e2:96:17:50:9c:76:42:30:64:54:e7:39:a3:c7:
75:cc:6e:92:a3:e2:31:50:7c:f9:4b:77:8e:c3:5d:
5f:d6:fc:9e:5a:1a:d1:48:b7:ce:85:e0:2b:f3:56:
f8:8f:69:79:ae:29:89:66:8c:57:af:08:54:ad:f1:
8f:4b:9d:95:ed:80:ca:43:80:ad:a8:3a:6c:57:58:
8d:ee:a1:5b:1e:f8:1f:f8:de:60:7b:b6:f6:38:49:
4f:1f:02:72:48:8b:5f:b8:ef:5c:75:58:38:e9:6c:
e5:2e:e8:a6:bd:fb:60:9d:3d:b4:4f:e4:d9:6f:3d:
af:1a:11:8b:e8:38:cc:74:02:8b:cc:5a:b3:e7:4c:
a6:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:B9:AE:E3:85:A9:11:D4:6C:FB:00:A1:83:80:8E:42:01:7B:1D:79
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS197537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.76.119.0/24
Signature Algorithm: sha256WithRSAEncryption
05:46:ba:af:a0:5f:c4:a8:ec:ea:55:04:5d:30:43:8c:6c:b2:
3d:1f:0a:00:a3:73:e6:a4:c9:32:47:9c:fb:0d:e5:63:fb:c2:
c6:36:bd:82:a9:7e:79:32:85:17:78:93:86:9d:af:dc:e1:61:
c0:fe:3b:3c:74:ee:6a:7b:cb:53:72:b1:9c:1d:ba:5a:24:c0:
3a:eb:4f:aa:59:c2:d4:03:43:08:b5:c5:52:2a:42:29:4f:f5:
87:34:c2:9f:2c:bd:ae:64:b7:8d:f3:1d:9d:37:f4:eb:f6:e3:
3f:9b:05:90:c4:8e:fd:d6:4c:f0:df:60:07:f6:e9:9e:01:35:
18:ef:4e:10:bd:ea:dd:26:9b:e1:a5:d3:7b:8e:72:a9:f4:aa:
46:7c:4a:8b:e2:75:57:c3:77:26:be:90:8f:30:23:3e:6b:76:
6e:72:7b:5e:3a:de:17:25:5f:14:54:5a:95:92:ec:71:34:77:
8e:38:54:47:71:12:04:22:39:c9:9d:b3:8b:a6:a7:d1:1f:1f:
67:59:33:34:6c:79:59:0d:de:a5:06:2c:42:1c:e1:c1:10:d6:
5b:9e:ad:1b:69:41:5b:9c:03:81:5d:35:70:41:40:3e:82:c3:
07:73:c6:19:54:d6:fa:ef:0d:9b:61:bb:e8:7f:73:4f:b5:2a:
3b:18:92:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 16:34:46 2026 by rpki-client