Route Origin Authorization
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS208328.roa
File: AS208328.roa (raw, json)
Hash identifier: AMbyiDR6FCeMQ+cCz6spOkH1bMgAL6aGqhbLL3fLba8=
Subject key identifier: E4:D9:35:18:92:8D:3E:B0:84:18:87:42:6A:76:5D:9C:30:3F:8F:DE
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 1B8B761ED4A9F0D689FEC0C294CEBE19484EE23C
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS208328.roa
Signing time: Wed 19 Aug 2026 09:19:02 +0000
ROA not before: Wed 19 Aug 2026 09:14:02 +0000
ROA not after: Wed 18 Aug 2027 09:19:02 +0000
asID: 208328
IP address blocks: 85.155.148.0/24 maxlen: 24
85.155.149.0/24 maxlen: 24
85.155.151.0/24 maxlen: 24
136.148.69.0/24 maxlen: 24
2a06:9f42::/32 maxlen: 48
2a0a:6046::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:8b:76:1e:d4:a9:f0:d6:89:fe:c0:c2:94:ce:be:19:48:4e:e2:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Aug 19 09:14:02 2026 GMT
Not After : Aug 18 09:19:02 2027 GMT
Subject: CN=E4D93518928D3EB0841887426A765D9C303F8FDE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2a:36:85:ac:b5:b9:04:d5:6e:89:b9:3e:28:
d5:57:79:c9:70:da:0b:2b:95:11:44:37:eb:31:47:
88:70:50:f6:b5:ff:0a:ab:f0:af:6f:9d:ec:76:a4:
96:a0:f7:d7:84:5f:ad:14:96:61:1e:45:62:e9:cd:
76:1f:6b:cf:8d:84:0a:c9:25:ac:18:c8:68:2e:3f:
39:1d:23:3b:21:ae:c0:a9:08:36:b8:8e:a9:81:66:
49:50:a9:c3:25:e9:d2:4f:2c:a2:de:3f:f5:c2:fc:
0f:8a:d0:5c:e9:a2:20:e1:67:07:22:f8:5b:f0:ac:
3f:8a:d3:d6:87:09:33:e0:43:ff:fb:d5:76:ca:87:
cf:55:4d:12:60:d2:e7:8f:e1:c1:9f:88:e3:dd:13:
3b:25:94:b2:31:af:71:72:e5:19:ce:43:94:5d:72:
ba:9d:c3:7c:a3:45:89:b1:5f:55:89:a4:b3:a3:14:
41:f8:f3:b4:4b:7f:70:54:2d:27:e5:05:b4:7c:14:
20:b1:61:18:d2:ef:a5:f4:57:f3:f4:81:3e:73:4d:
69:88:da:4d:31:c7:c1:9e:2d:5f:81:dd:b8:e7:3d:
c5:33:58:68:f7:36:ab:4d:ca:fe:69:04:2b:f6:a4:
29:ec:68:5e:59:7d:84:93:82:84:86:6f:54:6d:90:
84:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:D9:35:18:92:8D:3E:B0:84:18:87:42:6A:76:5D:9C:30:3F:8F:DE
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS208328.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.155.148.0/23
85.155.151.0/24
136.148.69.0/24
IPv6:
2a06:9f42::/32
2a0a:6046::/32
Signature Algorithm: sha256WithRSAEncryption
32:87:2f:09:94:49:7b:2c:50:37:82:98:9f:ef:cf:d4:e3:7b:
32:03:ba:3e:54:23:94:92:c6:d6:ec:44:2c:b8:73:d7:e2:51:
0d:0b:5c:cd:a3:a8:b8:f2:9f:0f:7a:fa:b7:92:29:e9:58:e0:
76:26:ab:4e:30:84:00:f5:b7:e9:c7:e3:49:11:5d:bd:98:78:
08:2e:56:f1:14:aa:55:c5:49:fc:65:17:bf:65:22:e8:cb:25:
74:26:10:e0:ea:7e:a0:a5:51:2c:ec:95:0f:df:82:0f:48:1d:
dc:d0:a0:bd:c5:61:76:ab:32:5d:49:bc:e7:80:3b:67:dd:18:
3a:41:b6:1e:47:46:09:8a:f8:c1:e3:7b:7a:bd:9c:99:50:22:
5b:78:68:37:c8:f1:3d:c7:52:3c:35:4e:61:c7:1e:10:a6:ed:
c9:36:b9:ec:5c:42:1d:78:e6:41:30:bd:f6:4f:40:1c:ca:31:
21:b5:41:5d:07:99:9a:e6:a8:f3:18:4d:41:45:4d:ec:83:1b:
cb:37:9e:69:c0:ca:19:c7:9a:6a:66:f7:8b:24:c2:3b:40:70:
7c:37:bc:0a:df:7a:ac:9a:96:ef:17:7e:fc:1b:e7:88:a8:d1:
55:13:44:44:f3:56:a8:c1:99:3c:0f:f3:9f:81:5c:c7:de:8a:
cf:44:1e:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 16:56:26 2026 by rpki-client