Route Origin Authorization
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS208328.roa
File: AS208328.roa (raw, json)
Hash identifier: h1NNne87jOMxasW3Uv1LVmh3SqRMwxEw0/EwG3ZQRSw=
Subject key identifier: D1:E3:60:FD:D3:19:9F:3B:9E:8A:F3:83:8D:3E:33:1B:AB:5D:33:24
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 248AEA9E00AB1099C0C73D9CA5A36CF713592455
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS208328.roa
Signing time: Fri 02 Oct 2026 20:30:26 +0000
ROA not before: Fri 02 Oct 2026 20:25:26 +0000
ROA not after: Fri 01 Oct 2027 20:30:26 +0000
asID: 208328
IP address blocks: 85.155.148.0/24 maxlen: 24
85.155.151.0/24 maxlen: 24
136.148.69.0/24 maxlen: 24
2a06:9f42::/32 maxlen: 48
2a0a:6046::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 04:55:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:8a:ea:9e:00:ab:10:99:c0:c7:3d:9c:a5:a3:6c:f7:13:59:24:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Oct 2 20:25:26 2026 GMT
Not After : Oct 1 20:30:26 2027 GMT
Subject: CN=D1E360FDD3199F3B9E8AF3838D3E331BAB5D3324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:3d:8d:ff:00:10:91:75:9b:36:d7:33:36:bd:
76:1c:91:c6:93:ea:a4:68:98:8d:92:c9:13:b6:a7:
48:ce:43:68:92:cc:2b:59:dd:da:bc:e2:7f:c4:e2:
0d:67:7f:d2:c7:61:01:59:de:cc:46:7c:0a:2d:b3:
4b:9e:30:fe:21:df:66:b1:05:2b:ea:b5:e1:66:db:
1c:15:46:82:3b:0f:cd:47:84:3d:93:0f:d9:e6:b0:
cd:76:3a:01:a0:60:ed:64:8e:7c:38:ac:87:f0:76:
8a:d6:95:ee:14:a2:c0:6e:c9:da:52:cf:78:7c:17:
24:e1:54:dd:2b:d3:92:24:40:d0:df:ef:57:43:ed:
5a:00:e8:46:ae:da:e5:45:ad:ec:8b:d2:9a:40:9a:
c8:88:92:78:91:be:61:10:04:ea:45:53:6a:13:cc:
3c:97:e9:4c:b1:19:c8:3a:7b:1b:03:56:32:93:28:
06:f9:7d:1f:3f:a9:3d:b8:7e:d8:d2:52:c1:00:66:
a2:c7:13:58:c6:76:b7:7e:02:2f:bb:bd:48:41:67:
20:9e:a3:0c:3c:c1:3c:74:e5:40:02:03:f5:7b:c0:
30:55:14:9a:16:56:5a:2e:e2:9e:c4:07:35:85:dd:
d4:a4:29:36:2e:35:b9:03:82:65:49:da:cb:42:73:
f5:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:E3:60:FD:D3:19:9F:3B:9E:8A:F3:83:8D:3E:33:1B:AB:5D:33:24
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS208328.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.155.148.0/24
85.155.151.0/24
136.148.69.0/24
IPv6:
2a06:9f42::/32
2a0a:6046::/32
Signature Algorithm: sha256WithRSAEncryption
56:47:16:43:8d:f4:e5:df:65:2d:b0:b7:03:3e:73:ec:7b:84:
1a:af:8f:a5:ef:6f:8a:b9:90:0d:38:47:28:c3:7b:9c:e1:aa:
49:e9:4f:05:ff:22:ae:3b:c7:f3:57:75:bf:a4:06:45:c1:00:
84:08:e4:3f:8c:ac:e4:87:a6:46:be:f3:11:65:f1:70:c6:73:
d0:5c:af:a6:92:a3:15:4a:de:c0:70:f1:d9:f4:9c:aa:a8:3e:
d3:68:a6:fe:f8:cb:ae:46:97:be:7b:6c:b1:15:ca:08:2e:69:
68:16:00:9b:27:ed:2a:d8:60:41:4b:4c:08:06:a4:7e:ae:6d:
48:92:9f:76:7e:b8:39:d1:15:69:55:b6:52:18:45:db:12:f9:
16:68:bf:10:d1:71:3a:24:21:19:fa:d4:5c:a0:0b:55:12:5c:
a4:78:62:08:03:00:0c:7e:14:4b:33:91:5c:85:f5:77:3a:69:
fe:cd:31:99:81:04:ff:14:bd:69:82:25:37:30:81:76:90:ce:
0b:0c:43:cd:a6:bc:e7:3a:cb:ba:59:b0:e1:6b:cf:7e:90:b9:
65:b0:00:c2:5d:5c:8d:c1:f7:3b:87:c4:e4:06:d1:f6:ff:a1:
8a:d0:28:b8:fd:0f:df:34:f5:32:10:48:a3:49:40:66:e1:c2:
51:20:ac:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 11:48:48 2026 by rpki-client