Route Origin Authorization
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS202736.roa
File: AS202736.roa (raw, json)
Hash identifier: L1L7I/uAE2kwk48M5y2CcWYSrgyR3eBiQHaWu6GtyJU=
Subject key identifier: 16:48:EA:84:0E:70:56:B6:87:EB:BC:8C:70:92:84:49:11:87:7D:7C
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 059FA0AB3A200B3B1F98B0C267805070F169DDC4
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS202736.roa
Signing time: Mon 03 Aug 2026 10:33:50 +0000
ROA not before: Mon 03 Aug 2026 10:28:50 +0000
ROA not after: Mon 02 Aug 2027 10:33:50 +0000
asID: 202736
IP address blocks: 153.76.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 14:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:9f:a0:ab:3a:20:0b:3b:1f:98:b0:c2:67:80:50:70:f1:69:dd:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Aug 3 10:28:50 2026 GMT
Not After : Aug 2 10:33:50 2027 GMT
Subject: CN=1648EA840E7056B687EBBC8C7092844911877D7C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:13:ff:9c:b7:c3:c7:a1:28:3f:aa:b9:da:e8:
52:25:53:b6:55:dc:b7:52:ec:0e:0b:fe:76:25:a2:
46:eb:08:a4:90:82:28:2f:46:49:a1:88:75:ff:97:
12:dc:ab:1e:ea:fb:ec:db:4a:9a:2b:4f:dd:00:6f:
15:02:bc:91:73:19:08:24:bf:30:a9:44:57:f2:1e:
37:c9:23:c1:a9:c5:86:a0:e8:c3:cd:d3:d2:9e:bd:
4d:99:03:ab:9b:d4:ab:3e:cc:fb:85:94:f5:fe:e5:
92:b6:b8:ad:06:03:96:c7:66:c4:ab:4e:d6:df:a6:
b6:9e:b9:7c:c2:6b:98:06:81:53:b8:65:e1:96:48:
fc:fb:75:13:b9:fd:ca:ec:22:6d:ca:72:1a:b8:b6:
cd:8d:ba:c3:79:9d:e5:fb:47:3c:bb:cf:d3:84:5f:
64:d9:c6:b4:d5:94:f8:01:43:ed:ed:a8:19:c4:24:
aa:9d:1f:2e:cf:29:cd:47:72:db:2f:c4:e1:83:80:
e0:c5:d7:50:4f:8c:b2:57:c5:63:e3:c3:c4:60:81:
78:87:9b:5f:ce:5a:12:5e:16:aa:da:93:22:25:2c:
c9:f5:59:81:a1:ba:df:4f:f5:de:5a:dd:df:08:c4:
64:48:67:b3:84:e7:b1:8e:b8:89:30:36:f8:68:59:
10:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:48:EA:84:0E:70:56:B6:87:EB:BC:8C:70:92:84:49:11:87:7D:7C
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS202736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.76.119.0/24
Signature Algorithm: sha256WithRSAEncryption
65:09:9f:73:d4:1d:c0:39:f4:9a:df:99:31:37:78:d0:14:2a:
4c:96:81:8f:e0:53:a1:e4:30:8b:8d:59:46:f8:be:42:dc:d2:
91:29:9f:00:95:a0:b3:03:e5:c7:8a:59:1a:42:27:ae:8e:32:
c1:c0:91:8f:b2:40:3c:60:3c:bb:e3:fc:e1:cc:ec:e0:13:64:
ce:e7:05:0f:44:24:f7:37:d3:73:63:a7:ee:08:5f:1c:92:47:
15:47:7c:ee:2c:98:7f:3f:91:29:c0:5f:20:b2:53:cd:e8:33:
62:06:40:fd:ba:34:c0:c4:5f:f5:c2:26:24:0e:bd:77:13:26:
e2:0f:c9:87:8b:fa:9b:50:20:5c:f8:5c:39:e5:f9:4f:58:af:
42:df:aa:c9:fd:95:be:bf:39:5d:13:17:51:74:35:af:23:4d:
0b:f6:a6:64:00:55:ea:63:de:76:b5:5b:b3:3a:d7:fd:42:c7:
f3:73:8d:ce:dc:f8:f1:f7:65:44:c4:85:11:58:28:ef:67:61:
ef:01:66:a1:dd:52:5c:8a:9b:df:02:89:1a:e5:e1:9b:1b:90:
33:82:80:49:6b:41:76:1c:58:f7:dd:1e:40:9d:98:b5:d4:3d:
eb:97:6a:e9:ad:0d:6d:b3:41:34:aa:7c:1f:21:28:f9:5a:ad:
03:9e:d5:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 16:34:50 2026 by rpki-client