Route Origin Authorization
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS207196.roa
File: AS207196.roa (raw, json)
Hash identifier: rZb7/zqncM6NMfd+htpIUCtrILWQgmc+K3innrFII/0=
Subject key identifier: BC:67:6A:EF:FC:A7:C0:0C:1D:01:E7:78:EF:DF:F1:24:D1:CA:B2:F8
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 7547663FEE23F9F85FE6703492A568C64EAD03CD
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS207196.roa
Signing time: Wed 21 Oct 2026 21:59:12 +0000
ROA not before: Wed 21 Oct 2026 21:54:12 +0000
ROA not after: Wed 20 Oct 2027 21:59:12 +0000
asID: 207196
IP address blocks: 118.91.184.0/24 maxlen: 24
2a0d:d900::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 16:53:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:47:66:3f:ee:23:f9:f8:5f:e6:70:34:92:a5:68:c6:4e:ad:03:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Oct 21 21:54:12 2026 GMT
Not After : Oct 20 21:59:12 2027 GMT
Subject: CN=BC676AEFFCA7C00C1D01E778EFDFF124D1CAB2F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c3:7f:ca:50:1b:33:7f:c5:da:15:cd:8a:9a:
1c:c0:89:41:e0:3f:06:f3:3c:27:58:c8:7d:c1:cc:
6f:39:b6:56:f4:c7:71:82:f6:71:63:50:80:ad:3f:
16:ae:b5:7d:90:11:99:9f:73:a8:f5:1b:f1:94:dd:
6e:de:77:95:02:ed:f7:d5:51:51:51:94:57:15:5c:
b1:c0:7e:e3:7b:7a:43:0c:a0:fd:45:10:1b:ed:35:
7f:48:57:f5:1c:b3:83:b6:be:cb:1e:26:13:d0:cf:
82:88:17:74:16:c9:4d:c4:b0:cc:97:11:7a:ba:91:
80:3c:25:70:7a:3a:31:1d:fe:96:0a:bd:f5:28:8e:
90:ad:b7:2e:23:46:60:ca:52:41:3c:1a:cc:4e:a6:
81:db:98:97:be:61:2d:99:a7:1a:88:0f:67:70:2a:
bf:dc:19:b3:6c:59:b9:7e:cc:e8:d0:00:c3:4e:5e:
54:aa:14:37:14:2b:e3:6a:fe:d9:1d:ba:21:67:f9:
05:2b:84:00:3f:3d:e8:75:e5:51:1c:05:55:cf:2a:
5b:6f:19:fe:3f:af:be:84:ef:0c:8e:ce:cb:88:53:
cd:68:93:4b:de:4d:29:9c:60:e8:ab:b5:ee:d8:28:
f4:7b:77:eb:fc:bc:42:d0:74:33:0c:6c:56:65:45:
84:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:67:6A:EF:FC:A7:C0:0C:1D:01:E7:78:EF:DF:F1:24:D1:CA:B2:F8
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS207196.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
118.91.184.0/24
IPv6:
2a0d:d900::/32
Signature Algorithm: sha256WithRSAEncryption
4d:6f:28:7d:e1:21:a2:ea:ed:71:21:06:89:37:d7:d7:e2:db:
64:b3:8e:1b:39:c6:d9:07:4f:f9:c8:99:d4:41:d0:9b:d2:f7:
1d:4a:10:ea:70:af:d8:e7:10:41:fb:1d:b4:6a:75:d2:6f:c3:
8e:67:9c:a9:70:49:fa:9d:c8:2f:7c:e9:83:b5:88:82:dc:4c:
83:08:3f:a1:47:e6:5e:2e:2a:55:84:b2:70:eb:0a:76:8c:3b:
53:50:6d:2d:59:d9:d6:e2:b7:1d:36:76:af:1d:5f:c9:f4:c4:
c6:74:26:15:b0:38:4c:2e:6d:a4:a7:b0:af:fa:b0:ef:53:49:
38:50:e6:94:63:f6:8c:a4:80:eb:ef:9f:e2:08:ae:18:98:62:
18:79:6b:a2:06:9d:a5:3a:61:db:76:cf:79:7e:6c:8e:0a:03:
84:b8:e6:8b:e3:d8:ea:cf:47:1e:29:a6:d5:8e:e1:30:bc:a5:
9e:59:07:15:b8:c0:68:a0:e4:cb:cf:87:9f:08:a1:b9:f2:dc:
5e:85:3b:b0:c5:c4:f5:a3:f3:60:bb:0a:4b:8f:7e:5d:f6:f1:
2e:1b:6c:ec:fd:9f:01:80:13:01:b0:19:76:33:35:73:e4:e3:
d2:04:2f:6d:f4:77:f6:bc:8c:8a:66:ad:4f:3b:64:85:fd:ad:
12:3e:29:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 02:29:01 2026 by rpki-client