Route Origin Authorization
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS213535.roa
File: AS213535.roa (raw, json)
Hash identifier: mX5gMFmQLzR5dotu90Xu5qNZKD3rvkkBjP44T5ec+tU=
Subject key identifier: E3:3C:C6:BE:CF:30:71:97:50:8E:A3:19:7D:50:2A:0C:05:9F:F7:8A
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 6299B65E395543A96E6546080725DF8F316F8D42
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS213535.roa
Signing time: Thu 20 Aug 2026 19:14:19 +0000
ROA not before: Thu 20 Aug 2026 19:09:19 +0000
ROA not after: Thu 19 Aug 2027 19:14:19 +0000
asID: 213535
IP address blocks: 85.155.230.0/24 maxlen: 24
103.214.69.0/24 maxlen: 24
111.235.151.0/24 maxlen: 24
136.148.64.0/24 maxlen: 24
136.148.67.0/24 maxlen: 24
143.246.136.0/24 maxlen: 24
143.246.138.0/24 maxlen: 24
143.246.139.0/24 maxlen: 24
143.246.183.0/24 maxlen: 24
153.76.112.0/24 maxlen: 24
153.76.122.0/24 maxlen: 24
167.104.216.0/24 maxlen: 24
167.104.219.0/24 maxlen: 24
206.245.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 07:49:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:99:b6:5e:39:55:43:a9:6e:65:46:08:07:25:df:8f:31:6f:8d:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Aug 20 19:09:19 2026 GMT
Not After : Aug 19 19:14:19 2027 GMT
Subject: CN=E33CC6BECF307197508EA3197D502A0C059FF78A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e3:8f:5b:c3:60:c1:80:d4:2c:e9:96:16:af:
df:76:54:33:51:99:d6:2d:ab:63:d1:72:46:f6:c1:
50:b8:63:f0:38:cb:e7:cb:20:07:6b:e1:78:4d:c9:
ae:ee:23:5d:a0:6e:7a:1a:3f:44:74:6e:19:98:eb:
08:3d:56:33:de:fe:58:38:1a:6e:96:6d:f0:27:a3:
04:55:5b:fe:10:ad:27:8e:97:af:6d:f1:0c:d8:92:
a2:75:3b:0e:1f:58:ac:bd:ee:ce:de:fe:cb:e8:c5:
ab:04:58:b8:68:50:ce:90:7a:d5:c2:c9:c2:1a:7f:
76:26:86:fb:77:29:fc:83:c8:b8:60:55:ba:3d:be:
ea:85:06:56:a7:f1:27:7e:84:69:d9:e1:ed:44:f6:
8b:b0:42:69:39:94:c5:44:ba:d6:64:ed:18:fd:55:
8d:1f:1e:ab:86:81:bb:2d:28:68:37:60:47:6e:12:
13:f1:38:ea:85:71:94:52:5c:2c:d7:dc:15:ed:3d:
2b:a9:d3:a3:08:d0:53:70:7a:76:a1:36:6a:f1:54:
34:f5:d4:f1:0d:d6:35:08:67:ea:fa:d1:75:71:61:
9d:43:77:8e:e0:a2:c8:7c:3d:f9:13:41:43:f7:7f:
71:8f:cc:22:05:d2:36:cb:9d:cc:6b:fd:c1:af:39:
df:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:3C:C6:BE:CF:30:71:97:50:8E:A3:19:7D:50:2A:0C:05:9F:F7:8A
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS213535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.155.230.0/24
103.214.69.0/24
111.235.151.0/24
136.148.64.0/24
136.148.67.0/24
143.246.136.0/24
143.246.138.0/23
143.246.183.0/24
153.76.112.0/24
153.76.122.0/24
167.104.216.0/24
167.104.219.0/24
206.245.166.0/24
Signature Algorithm: sha256WithRSAEncryption
57:95:d9:ca:4f:f8:e4:96:c1:59:46:45:f5:6e:e8:bf:7b:ad:
a2:77:84:72:3a:53:dc:d1:b1:0e:4f:0d:e6:b6:fb:09:98:7b:
16:4b:36:c4:95:35:88:0f:34:4a:eb:af:e8:2f:53:4e:22:a9:
fe:86:96:cc:0a:b9:d6:ec:2d:53:77:26:0c:ca:42:c8:e5:75:
af:5c:d3:13:04:c8:fa:26:92:b9:25:29:e4:1d:3c:bf:7a:a9:
04:ea:f6:c0:b8:b5:d8:33:82:5e:e1:21:0d:95:fd:26:03:1e:
7a:d5:95:fd:7a:d1:c0:ac:3d:a2:b7:8b:92:67:4a:b0:5f:b2:
38:97:33:68:93:dd:c4:00:1d:19:ec:26:7e:f4:ac:51:bf:69:
eb:af:87:ab:ec:1b:8c:25:97:35:63:65:21:46:c3:89:88:10:
e9:37:19:ac:07:d9:06:3b:93:7f:a7:af:c7:7a:13:ca:a3:8a:
8d:54:60:7e:29:3a:1c:5d:c7:57:d8:6d:90:03:21:1d:32:67:
1e:38:12:d5:65:63:bd:6f:87:28:25:66:0a:91:f4:2f:69:7b:
33:dc:de:fc:69:03:93:66:30:16:69:75:38:c5:0d:2f:49:29:
cc:fb:65:cc:af:d4:a8:4e:99:d7:f4:14:58:ec:9f:e7:9d:49:
e6:52:8a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 10:08:35 2026 by rpki-client