Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS201979.roa
File: AS201979.roa (raw, json)
Hash identifier: O4wcx2prypYUgqijzQouWyG74MWcu0EdzK+21Z0313w=
Subject key identifier: 16:28:07:AF:6F:E1:8D:B5:B9:9F:15:B3:AD:8A:DB:64:FA:30:14:1B
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 7F576EB0AC07BA22CE09247E402C022B8CDE13F0
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS201979.roa
Signing time: Thu 04 Jun 2026 15:58:47 +0000
ROA not before: Thu 04 Jun 2026 15:53:47 +0000
ROA not after: Thu 03 Jun 2027 15:58:47 +0000
asID: 201979
IP address blocks: 2a06:a005:d43::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 17:49:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:57:6e:b0:ac:07:ba:22:ce:09:24:7e:40:2c:02:2b:8c:de:13:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jun 4 15:53:47 2026 GMT
Not After : Jun 3 15:58:47 2027 GMT
Subject: CN=162807AF6FE18DB5B99F15B3AD8ADB64FA30141B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:1f:b9:fe:35:2e:64:e1:b3:7b:d5:eb:70:7e:
9c:5e:10:64:ed:70:dc:8b:3a:96:45:5e:44:4c:4b:
93:ff:ec:42:38:fe:ce:01:25:aa:e2:2b:cf:b1:b6:
e7:e8:1d:39:d9:8e:e8:57:a2:df:b3:23:34:c7:d8:
08:7a:e4:ed:76:0c:ce:e9:14:75:a3:4f:8a:1f:95:
e1:08:c0:f5:a0:ee:cc:44:cd:fa:3c:10:ac:d5:50:
f8:4a:1f:45:d8:f6:f3:4b:c9:85:5c:e7:64:9b:32:
ad:65:3a:75:d9:ea:bb:05:a4:79:35:31:f3:1e:46:
c4:2e:09:f3:15:b0:55:bb:1b:ca:1d:81:80:bc:bc:
d0:bf:83:4f:33:9f:cc:21:11:50:f2:97:e7:db:27:
48:c9:d4:46:4e:27:a2:d0:c7:0b:30:72:0e:c8:5a:
5e:cc:72:c6:7e:36:60:54:ca:14:c3:7b:98:70:a8:
64:85:10:54:eb:19:d2:20:bb:ad:09:5c:0b:b6:85:
c3:2c:8b:57:45:d3:55:b2:60:49:d1:77:68:b9:ce:
f2:b4:87:23:38:49:fc:37:8c:37:d3:a0:67:ce:8d:
6e:0c:3a:1a:f8:de:b7:81:dc:30:1e:b2:b6:69:52:
18:4f:6f:c1:00:c8:70:06:68:87:65:6d:35:37:a3:
2b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:28:07:AF:6F:E1:8D:B5:B9:9F:15:B3:AD:8A:DB:64:FA:30:14:1B
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS201979.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:d43::/48
Signature Algorithm: sha256WithRSAEncryption
1d:07:bd:f8:1e:ed:42:6a:40:e1:4a:42:7b:ed:e0:94:23:bf:
7d:2c:e1:c7:fb:04:3d:30:22:f4:a6:eb:76:5d:bd:f5:20:34:
91:8b:45:81:de:67:32:ed:b7:57:c3:28:72:20:c0:2d:39:8d:
61:54:0d:a7:ff:51:84:5a:e1:4d:5e:f1:29:7d:75:d5:57:f6:
05:06:48:e6:36:b8:54:a6:0e:43:fe:31:48:64:fc:f9:78:0c:
b7:6f:76:d7:bc:7b:7d:b0:54:5f:e2:8d:8e:49:0a:72:11:36:
8f:18:84:16:98:dd:1b:38:d1:78:93:b6:30:d8:b8:48:88:1a:
44:e7:89:6f:d0:5f:f5:1b:24:55:64:49:3e:68:46:e2:06:00:
cb:f5:d1:4e:d8:74:70:fc:f3:fd:62:54:30:0d:eb:2a:f1:70:
44:b4:19:d6:73:30:63:b8:35:61:3f:85:8c:cd:da:e0:95:a3:
15:58:2e:ad:17:d1:bd:d7:8f:a9:2e:97:53:d4:bf:13:9b:e6:
07:a0:a1:a3:11:ba:c8:70:3c:51:45:fc:b0:08:8f:43:05:e5:
47:77:69:d8:7c:c4:b1:41:20:64:6f:67:ca:eb:29:ab:cb:db:
58:62:ff:7a:17:55:e7:22:b8:91:f3:08:aa:38:47:ed:3c:3a:
d2:5f:30:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 5 23:33:28 2026 by rpki-client