Route Origin Authorization
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS204676.roa
File: AS204676.roa (raw, json)
Hash identifier: QMUxDu0QtgMmVPv/xCWua0BCaNTzm9X2nczAUfImDGE=
Subject key identifier: 94:98:37:C8:C8:CD:BC:2B:9A:77:12:38:87:CC:45:24:BD:68:9C:35
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 47341C1CF82FC629E7E34191F3C1BCEDAF8C33F5
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS204676.roa
Signing time: Wed 30 Sep 2026 10:19:12 +0000
ROA not before: Wed 30 Sep 2026 10:14:12 +0000
ROA not after: Wed 29 Sep 2027 10:19:12 +0000
asID: 204676
IP address blocks: 2a06:9f40::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 13:17:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:34:1c:1c:f8:2f:c6:29:e7:e3:41:91:f3:c1:bc:ed:af:8c:33:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Sep 30 10:14:12 2026 GMT
Not After : Sep 29 10:19:12 2027 GMT
Subject: CN=949837C8C8CDBC2B9A77123887CC4524BD689C35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f7:a6:9e:4c:d2:bb:02:50:14:d2:0d:cf:a9:
96:35:9b:5f:bb:5f:1e:5e:b7:89:2d:a6:a1:e9:d8:
b0:44:43:29:1c:1b:2d:82:0e:1d:d3:a5:81:b2:12:
98:8f:83:c8:f7:ea:d9:a2:c5:35:33:dd:b7:9b:36:
ed:29:ba:24:9b:ea:47:e9:de:20:e9:77:0e:a9:95:
ff:d5:15:75:34:b0:b4:4d:e0:09:18:c6:fb:8a:63:
44:3d:60:2d:56:6a:61:9a:b3:0b:a1:9a:80:37:5c:
ec:57:e3:5f:14:b5:49:a6:5a:5a:6d:b9:ba:3e:c9:
67:63:b0:17:91:5f:a2:8a:56:06:45:0e:81:d1:8c:
bb:48:19:31:9a:7e:23:94:50:0e:96:b2:eb:df:ad:
3b:84:0e:34:d9:2b:1f:5d:5d:98:b0:07:8b:60:27:
fb:1a:0c:18:bf:73:33:f9:de:5b:2d:e2:2a:d4:39:
d7:06:68:84:ff:5c:68:5c:56:45:81:d4:5e:50:6e:
03:0f:cc:ba:bb:7f:e8:1e:d7:a2:f7:79:e9:48:a9:
7a:b0:42:87:4c:6e:83:4a:de:78:8b:2a:ed:3c:5d:
70:13:4a:0c:5e:99:57:23:0a:f9:40:40:a8:57:8a:
30:5e:7e:93:fe:8f:8b:22:44:b8:a0:53:33:73:7d:
e9:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:98:37:C8:C8:CD:BC:2B:9A:77:12:38:87:CC:45:24:BD:68:9C:35
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS204676.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9f40::/32
Signature Algorithm: sha256WithRSAEncryption
4c:15:fe:08:bf:ea:8d:f1:15:f7:84:57:94:71:ba:a8:77:3d:
e3:12:f4:73:c6:a0:32:0d:9d:da:41:87:a5:6c:e7:bf:f0:03:
0e:de:9e:c4:af:b2:4c:0a:6e:73:fb:58:0a:aa:76:c2:e1:58:
d0:c1:8e:a3:23:2f:1e:7a:5b:87:9e:af:3f:b8:5d:d4:7f:a8:
86:fa:d7:15:5d:40:da:49:5c:14:a0:42:18:9a:36:89:49:dc:
95:fc:b3:a8:f0:7e:c4:06:d5:cd:e6:5f:f5:a6:7c:ab:ca:63:
2c:42:67:4c:18:0a:a6:88:8c:3d:08:a1:39:6e:64:c9:00:7b:
a2:b7:90:7e:c4:c9:aa:6b:db:15:8c:60:d0:db:a4:c6:29:d1:
12:5f:be:63:79:11:66:95:11:a3:0f:ef:8c:9b:f8:4c:1c:65:
ae:f7:16:11:d6:0a:b8:13:8c:2f:b0:bc:7b:3f:d1:60:b8:1f:
15:a0:aa:11:6b:26:e8:dd:3a:70:ca:c0:3e:91:47:15:15:7b:
82:6f:90:56:4e:df:fe:93:dd:4d:5f:e0:b9:9c:a4:38:b4:00:
37:e5:1b:44:bf:be:5f:0b:4b:96:02:a6:95:43:f7:ee:a8:3e:
12:df:84:ba:ee:97:aa:a7:8a:68:13:4d:b1:4e:96:33:f7:5c:
cd:0c:cb:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 19:11:31 2026 by rpki-client