Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS200775.roa
File: AS200775.roa (raw, json)
Hash identifier: a8SM2UhZFUjB6Rt8fBaSiXwOii1gKO3AXeE4L0OqZSc=
Subject key identifier: 4A:0A:9C:8F:BC:94:37:CE:B3:D2:67:43:6C:E3:B2:C0:1C:FE:AB:34
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 22DA68647A571F7004035DCD0A8E0232CA2F1469
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS200775.roa
Signing time: Mon 09 Mar 2026 22:37:56 +0000
ROA not before: Mon 09 Mar 2026 22:32:56 +0000
ROA not after: Mon 08 Mar 2027 22:37:56 +0000
asID: 200775
IP address blocks: 185.121.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 15:04:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:da:68:64:7a:57:1f:70:04:03:5d:cd:0a:8e:02:32:ca:2f:14:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Mar 9 22:32:56 2026 GMT
Not After : Mar 8 22:37:56 2027 GMT
Subject: CN=4A0A9C8FBC9437CEB3D267436CE3B2C01CFEAB34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ff:3d:af:d4:41:4d:8b:32:a7:6d:fc:1f:d2:cb:
97:9e:70:1b:b2:ee:ac:cd:58:33:ce:e4:f7:92:89:
61:42:3d:25:ce:05:da:c3:b6:27:8c:11:62:63:78:
ec:34:7e:68:e0:5d:f8:00:82:f6:1b:b7:33:55:87:
d6:44:0a:05:2f:f8:f9:10:08:46:1b:d3:2d:06:4f:
d3:de:7e:90:fc:bd:db:0d:14:a1:e8:d2:67:63:7e:
dd:88:44:70:1a:54:35:dc:c4:c1:0f:b2:aa:0b:74:
4a:c4:fe:12:03:51:1d:f8:57:5f:a2:04:cd:d7:f5:
27:b9:01:e6:a2:82:fc:06:29:4b:2d:14:e2:8e:bd:
35:d7:0b:64:ec:9a:88:81:f5:46:a5:53:a3:86:cc:
ae:f7:44:ce:fb:5a:02:44:28:5e:e7:09:b3:06:23:
05:39:48:b0:f5:13:ce:a1:5c:d0:4f:fb:5c:63:7e:
6c:2e:b6:26:00:21:04:12:d8:f7:fe:b8:2a:92:38:
54:4e:bf:61:e0:81:0c:e3:e6:13:74:ba:18:bd:1b:
8d:c5:bd:bb:5c:ea:68:b1:4e:6a:c2:6d:ef:ae:a0:
a9:0e:8d:8e:6b:37:00:a0:d7:2e:f1:68:0d:68:e2:
c3:8f:23:6b:27:94:2c:0d:6b:9b:9a:e0:96:96:6d:
72:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:0A:9C:8F:BC:94:37:CE:B3:D2:67:43:6C:E3:B2:C0:1C:FE:AB:34
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS200775.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.178.0/24
Signature Algorithm: sha256WithRSAEncryption
04:0b:9d:76:ab:7c:7e:3d:59:45:28:15:ea:32:4f:c3:d3:5c:
a1:11:10:e4:6c:15:b3:df:18:15:74:5d:c7:84:0e:3b:84:a8:
ed:ee:ee:1d:15:48:88:be:e3:5d:52:11:99:5a:7b:08:83:46:
96:60:75:e7:d7:52:e0:3d:65:3f:ac:c6:cb:9c:b1:18:23:67:
ff:c6:7b:26:23:f4:6e:d6:78:02:5b:96:ee:b2:9e:57:b0:ab:
b0:ab:1c:98:4b:b6:f9:9a:6b:36:2d:18:77:66:69:90:0b:cc:
e0:88:de:ae:b4:65:03:23:f3:66:92:9f:de:ed:5e:da:a3:75:
cc:ee:15:ca:71:71:64:f9:cd:cc:41:e1:8c:9a:20:b6:0d:e7:
a4:b5:a3:0f:7f:fb:9c:2c:b0:64:98:99:bd:7c:96:c8:a0:47:
35:40:8d:99:dc:b1:4b:a7:cc:e6:27:ce:db:68:71:24:df:87:
4b:bf:0f:97:d8:ba:0f:b0:66:45:dd:ba:e5:de:68:5c:0d:eb:
99:b3:bd:89:e3:06:20:c4:52:a2:34:be:a0:05:02:e4:3d:56:
1a:d5:23:2a:92:a4:f9:32:a5:08:55:d2:dd:c9:15:27:ad:04:
d0:d6:ea:a7:93:84:82:cd:ab:9f:5d:83:bf:46:78:12:a3:d7:
68:8c:90:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 22:53:02 2026 by rpki-client