Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS207513.roa
File: AS207513.roa (raw, json)
Hash identifier: dsE/PbsLPFdflonQl3DIr+6Bg4hX3Yvcw4MUurza0dw=
Subject key identifier: A5:C2:4D:69:DC:59:9E:7F:50:5E:E8:68:5A:30:1E:87:AA:E1:F1:88
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 4C28934613BAFF1777B8A48684D6858761B070D8
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS207513.roa
Signing time: Tue 31 Mar 2026 19:19:46 +0000
ROA not before: Tue 31 Mar 2026 19:14:46 +0000
ROA not after: Tue 30 Mar 2027 19:19:46 +0000
asID: 207513
IP address blocks: 81.31.209.0/24 maxlen: 24
83.142.30.0/24 maxlen: 24
85.155.96.0/24 maxlen: 24
85.155.101.0/24 maxlen: 24
85.155.124.0/24 maxlen: 24
85.155.125.0/24 maxlen: 24
103.68.110.0/24 maxlen: 24
103.137.193.0/24 maxlen: 24
153.76.116.0/24 maxlen: 24
153.76.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 Apr 2026 23:51:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:28:93:46:13:ba:ff:17:77:b8:a4:86:84:d6:85:87:61:b0:70:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Mar 31 19:14:46 2026 GMT
Not After : Mar 30 19:19:46 2027 GMT
Subject: CN=A5C24D69DC599E7F505EE8685A301E87AAE1F188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:84:f2:cb:5e:a1:fb:3f:4c:80:03:ac:c2:4f:
8d:84:25:7b:d4:57:aa:fd:10:ab:0d:99:dd:fd:6e:
70:49:00:41:13:4a:07:58:45:ba:03:b8:95:6e:e6:
7b:8e:79:70:3f:cb:69:d9:98:84:b5:1b:be:50:3d:
a2:d9:3d:b5:b0:e1:60:89:c5:91:3a:75:e8:aa:65:
20:d8:f0:5a:ac:8a:c3:d3:43:8a:23:e1:d9:7c:42:
88:15:f8:46:35:44:c6:2a:08:0d:28:eb:05:43:f4:
53:26:e4:d1:c4:7d:81:db:5f:29:50:9d:8c:37:40:
0e:70:e0:9e:df:bc:c4:3c:7c:6c:22:42:d0:64:af:
d0:55:65:97:9e:55:02:2c:69:0e:cb:a2:c1:08:fd:
47:ef:0c:d9:fb:9a:be:be:6f:2c:a1:ce:59:9c:7c:
79:bc:ff:22:01:5f:21:c2:c0:3d:64:77:fd:71:71:
8d:84:82:6c:94:55:c6:fa:dd:27:1d:e9:9b:4f:3e:
81:6f:3e:1e:b6:be:8f:b7:d6:62:80:f3:03:f3:64:
5a:4a:3f:7b:7e:cd:88:2b:90:93:c6:a1:c4:42:fe:
ce:64:26:6b:75:aa:47:49:54:ae:36:16:54:10:e8:
f3:2f:67:26:90:c9:e8:da:9b:94:e2:e4:1b:87:cc:
82:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:C2:4D:69:DC:59:9E:7F:50:5E:E8:68:5A:30:1E:87:AA:E1:F1:88
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS207513.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.31.209.0/24
83.142.30.0/24
85.155.96.0/24
85.155.101.0/24
85.155.124.0/23
103.68.110.0/24
103.137.193.0/24
153.76.116.0/23
Signature Algorithm: sha256WithRSAEncryption
55:58:c3:f0:ba:1a:27:c6:55:4a:f5:a3:83:a2:b3:42:38:6d:
07:18:0b:d4:dd:d5:36:f1:52:f6:d7:57:ae:f6:40:d1:d6:d2:
3a:90:b3:2e:20:8a:b5:7e:62:75:98:97:e8:fa:15:ba:5c:e7:
51:cb:98:da:e8:bc:d3:cf:dc:0a:7b:9c:f0:f9:62:ec:80:77:
22:d7:af:e3:41:53:22:86:c7:e6:21:a1:a2:57:94:b2:1e:12:
2e:03:7b:ac:4c:4e:4d:c3:8b:c1:36:61:e5:1f:2d:cf:ca:8b:
8e:47:9f:85:77:f1:60:b2:3a:65:ee:39:a7:b7:1c:64:3b:76:
97:1c:62:d0:64:0a:07:57:2c:69:a4:90:d3:ff:88:85:d8:ed:
d0:c2:9e:e0:4d:62:da:06:54:43:50:45:54:e7:ee:3d:a6:79:
7f:d9:c3:2f:e7:a5:2b:42:37:87:f8:fc:fe:96:51:f1:c4:81:
a6:32:dd:51:1b:eb:88:84:e1:25:be:a5:94:42:b8:e9:9e:c3:
a2:fd:75:97:67:eb:5e:cf:03:72:7a:af:bc:c8:c2:65:f8:a6:
e8:25:8a:63:76:ba:9e:e7:3e:38:8c:75:42:06:6e:68:73:c2:
81:4b:29:fa:5e:fa:68:11:94:cc:11:b5:88:e1:49:1f:5c:23:
13:59:d1:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 07:43:00 2026 by rpki-client