Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS212746.roa
File: AS212746.roa (raw, json)
Hash identifier: 3AQ2GbyFOmT2k+pRNKBNcqD7/RNSxsMEf1diq4w4EME=
Subject key identifier: 3B:24:59:94:36:78:99:4F:08:DE:AF:B1:F9:45:2C:A0:96:50:7E:03
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 69EB04355611A65A7026A786D672DE8B76511618
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS212746.roa
Signing time: Thu 04 Jun 2026 15:58:49 +0000
ROA not before: Thu 04 Jun 2026 15:53:49 +0000
ROA not after: Thu 03 Jun 2027 15:58:49 +0000
asID: 212746
IP address blocks: 2a06:a005:1020::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:eb:04:35:56:11:a6:5a:70:26:a7:86:d6:72:de:8b:76:51:16:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jun 4 15:53:49 2026 GMT
Not After : Jun 3 15:58:49 2027 GMT
Subject: CN=3B2459943678994F08DEAFB1F9452CA096507E03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:84:25:f3:8b:38:12:a9:0a:9b:33:db:5a:a1:
74:20:4e:9e:ea:f0:70:bd:ce:0d:0f:3e:9d:9b:b1:
5b:1e:65:16:37:82:e8:6f:e3:14:8b:83:d1:e4:5d:
c3:0d:ce:b7:4c:cd:2d:f8:ba:a1:8a:b5:50:c4:86:
5f:e5:51:d5:98:b7:86:07:66:53:e7:df:41:61:a6:
98:13:14:06:6b:09:09:02:a8:11:44:55:c7:51:62:
78:eb:d3:97:84:1a:2a:eb:95:f2:e4:dc:dc:68:12:
6d:89:ff:03:54:0b:84:1c:7b:2d:0a:50:64:aa:b4:
8b:4f:79:0e:2c:2f:51:ef:31:03:f2:8a:72:4e:a9:
dc:39:cf:82:aa:aa:92:1f:94:a9:a6:48:51:46:4a:
ba:39:cc:c8:55:73:78:b4:00:55:47:be:c2:3c:34:
35:8e:66:5b:22:d9:d0:10:fc:d1:93:c5:21:a5:6a:
25:b4:e9:22:db:da:95:e1:44:15:d4:2e:44:af:9f:
1b:82:3a:29:df:d1:99:ae:11:e5:10:6e:43:0c:dc:
ee:43:f2:ec:be:88:31:50:19:25:43:9f:1d:17:a5:
71:66:09:e1:85:f7:8c:37:a6:02:e9:3d:11:c0:ae:
63:e6:93:b6:f1:7a:e2:95:d3:09:d3:bc:7d:4d:89:
f9:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:24:59:94:36:78:99:4F:08:DE:AF:B1:F9:45:2C:A0:96:50:7E:03
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS212746.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1020::/44
Signature Algorithm: sha256WithRSAEncryption
3b:5d:9f:bd:24:79:c4:7b:5b:5c:83:0a:65:ae:d1:2c:9d:3b:
31:dd:a0:61:d5:ff:37:02:ba:b6:5e:bd:f5:8d:8b:3c:cc:e5:
95:9d:7c:2b:6b:36:22:9a:1e:d5:64:b8:31:32:67:ac:0e:ee:
4b:c7:6f:46:22:6c:40:63:3a:62:21:c8:da:32:f3:aa:74:70:
fa:ff:c0:57:22:21:cd:ff:3e:8b:ed:ca:06:2e:39:92:2c:0c:
4f:30:61:84:fa:bc:bc:ef:ed:6a:87:5f:71:f2:28:c8:0f:0a:
85:87:b4:8a:3b:33:89:b8:33:b3:79:9f:93:8b:2f:6a:93:b9:
98:08:bb:44:3f:de:17:06:34:9b:37:71:d8:97:3c:65:85:c0:
c6:fa:a2:1d:ca:4e:20:36:62:bc:98:c4:cf:f6:cf:a1:63:77:
81:74:2f:37:71:77:92:44:e8:65:3f:4d:dc:26:87:f5:27:21:
8f:f5:47:ad:ed:41:f5:bb:02:da:9d:a9:16:2f:fe:3d:90:b9:
f8:91:84:76:71:e9:48:dd:85:92:f6:f0:b9:90:06:1e:91:5d:
fe:c4:b8:2d:e0:e7:a7:09:95:13:e2:08:32:e0:4e:5a:fc:c6:
6f:fd:0d:9e:1b:4b:db:ba:eb:ab:40:1b:05:0e:62:03:c2:69:
11:c2:8f:42
-----BEGIN CERTIFICATE-----
MIIE6DCCA9CgAwIBAgIUaesENVYRplpwJqeG1nLei3ZRFhgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDE0YjZmY2YyYjJjNjliZTA4NWU5Zjk1OTg3MmRjYmU4
ZWE1NDE3NzAeFw0yNjA2MDQxNTUzNDlaFw0yNzA2MDMxNTU4NDlaMDMxMTAvBgNV
BAMTKDNCMjQ1OTk0MzY3ODk5NEYwOERFQUZCMUY5NDUyQ0EwOTY1MDdFMDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdhCXzizgSqQqbM9taoXQgTp7q
8HC9zg0PPp2bsVseZRY3guhv4xSLg9HkXcMNzrdMzS34uqGKtVDEhl/lUdWYt4YH
ZlPn30FhppgTFAZrCQkCqBFEVcdRYnjr05eEGirrlfLk3NxoEm2J/wNUC4Qcey0K
UGSqtItPeQ4sL1HvMQPyinJOqdw5z4KqqpIflKmmSFFGSro5zMhVc3i0AFVHvsI8
NDWOZlsi2dAQ/NGTxSGlaiW06SLb2pXhRBXULkSvnxuCOinf0ZmuEeUQbkMM3O5D
8uy+iDFQGSVDnx0XpXFmCeGF94w3pgLpPRHArmPmk7bxeuKV0wnTvH1Nifn1AgMB
AAGjggHyMIIB7jAdBgNVHQ4EFgQUOyRZlDZ4mU8I3q+x+UUsoJZQfgMwHwYDVR0j
BBgwFoAU0Utvzyssab4IXp+VmHLcvo6lQXcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNy9EMTRCNkZDRjJC
MkM2OUJFMDg1RTlGOTU5ODcyRENCRThFQTU0MTc3LmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMFV0dnp5c3NhYjRJWHAtVm1ITGN2bzZsUVhjLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC83L0FT
MjEyNzQ2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEH
AQH/BBMwETAPBAIAAjAJAwcEKgagBRAgMA0GCSqGSIb3DQEBCwUAA4IBAQA7XZ+9
JHnEe1tcgwplrtEsnTsx3aBh1f83Arq2Xr31jYs8zOWVnXwrazYimh7VZLgxMmes
Du5Lx29GImxAYzpiIcjaMvOqdHD6/8BXIiHN/z6L7coGLjmSLAxPMGGE+ry87+1q
h19x8ijIDwqFh7SKOzOJuDOzeZ+Tiy9qk7mYCLtEP94XBjSbN3HYlzxlhcDG+qId
yk4gNmK8mMTP9s+hY3eBdC83cXeSROhlP03cJof1JyGP9Uet7UH1uwLanakWL/49
kLn4kYR2celI3YWS9vC5kAYekV3+xLgt4OenCZUT4ggy4E5a/MZv/Q2eG0vbuuur
QBsFDmIDwmkRwo9C
-----END CERTIFICATE-----
Generated at Fri Jun 12 05:15:52 2026 by rpki-client