Route Origin Authorization
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS210667.roa
File: AS210667.roa (raw, json)
Hash identifier: WcS8nbK2vzKXeAd3JSuv29I25I1Tl8lLTi8kXnrmXdA=
Subject key identifier: 2C:C6:AF:A5:9C:F7:7C:AD:39:40:D2:74:8A:41:C5:11:8F:52:9F:91
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 5179E87C931AA48E5249E1714F43E4F8A23A3E50
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS210667.roa
Signing time: Thu 20 Aug 2026 05:10:58 +0000
ROA not before: Thu 20 Aug 2026 05:05:58 +0000
ROA not after: Thu 19 Aug 2027 05:10:58 +0000
asID: 210667
IP address blocks: 89.39.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:79:e8:7c:93:1a:a4:8e:52:49:e1:71:4f:43:e4:f8:a2:3a:3e:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Aug 20 05:05:58 2026 GMT
Not After : Aug 19 05:10:58 2027 GMT
Subject: CN=2CC6AFA59CF77CAD3940D2748A41C5118F529F91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5f:8f:37:f1:7d:73:67:fc:eb:32:30:4d:68:
4d:2f:80:70:7f:7c:13:7d:db:bd:82:80:22:ea:d4:
66:fd:6b:b5:5a:3e:05:27:7c:6c:d5:21:d5:c7:ae:
70:3b:0a:0f:0f:a4:9f:bd:c5:2b:f1:e6:2b:9e:1b:
5e:a4:b6:71:59:28:49:60:e0:bf:9e:d1:59:81:59:
bb:05:45:a8:d0:80:b9:41:07:b1:1f:38:18:e1:cb:
d4:ec:5b:3c:59:46:85:f3:0d:48:62:f2:b6:95:02:
31:f3:02:26:27:06:35:f7:74:c5:a3:ff:a9:1e:f0:
87:e0:f6:8f:6e:3e:0e:6d:00:6b:b0:a8:e5:0b:ef:
62:a0:47:d4:84:86:e4:5a:a1:73:46:14:b5:17:63:
c8:9c:31:02:31:29:74:78:db:21:57:08:0d:69:68:
e7:16:d7:1e:cd:c4:92:de:da:0b:5a:cd:e8:8e:68:
2b:f1:f6:03:81:58:b3:50:07:21:16:2d:00:66:8a:
49:9e:d8:6b:d1:e6:c9:58:6b:43:ea:c8:ea:3f:a0:
64:de:c3:56:2e:22:72:02:c5:a1:9f:6a:fd:52:80:
05:02:b6:e4:96:8f:c7:f4:17:95:cc:b1:1a:a8:a3:
09:48:a8:a6:0c:eb:e7:ae:dd:29:d6:e5:c4:b9:b9:
ec:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:C6:AF:A5:9C:F7:7C:AD:39:40:D2:74:8A:41:C5:11:8F:52:9F:91
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS210667.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.39.211.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:fb:c3:39:dd:e2:a7:91:7f:f7:15:19:80:31:39:44:b9:1b:
7c:a5:03:7f:70:d2:5b:87:8c:ee:95:c6:fc:dd:60:95:1b:57:
b2:d5:a7:3f:b6:26:b4:42:ca:a5:98:1d:36:64:88:c4:b2:be:
d0:ac:67:50:bf:9d:07:79:ea:e0:5f:fc:ec:99:46:5c:a8:92:
8d:33:63:d5:84:9d:c4:5e:a6:74:b4:a0:4b:e9:07:4f:6b:20:
e6:5b:4d:11:58:42:48:92:a3:64:be:3e:d9:ec:ae:da:0e:eb:
ac:6d:8b:e8:65:d9:1e:d5:16:dc:d1:b5:c6:5a:e9:18:4b:2f:
7e:98:d0:90:60:23:04:b4:0b:a0:67:08:b3:88:79:e2:6e:e3:
af:c6:75:58:da:22:b4:c6:a9:c3:13:9e:e3:c8:06:b2:68:f2:
6c:ed:6b:1e:c4:b4:f7:e9:92:d6:ad:d8:ed:6f:01:99:e2:6d:
36:1d:e7:57:81:2f:3a:4a:3c:64:ce:94:56:8b:15:6f:b4:f1:
bc:c4:a9:41:54:f5:2c:c7:aa:17:78:39:5a:6e:7b:7f:55:64:
3b:51:32:cf:cd:48:6a:e7:8b:bf:e9:c7:ad:c2:21:e2:2a:9e:
be:1f:ca:f5:5c:55:c3:5a:20:30:69:f5:4c:17:6b:76:cc:70:
68:d3:fc:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:17:23 2026 by rpki-client