Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS214716.roa
File: AS214716.roa (raw, json)
Hash identifier: u2WvK9qSeFt660BxYSMTbzNxkd09ydPeoYSho0PvNiU=
Subject key identifier: 33:AF:AF:EB:45:DC:F8:FA:2F:A2:7A:B8:D5:72:55:08:16:27:B8:0F
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 0C66AB22F0A0DE093D2996BD94181F2242BD17ED
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS214716.roa
Signing time: Wed 27 May 2026 12:47:56 +0000
ROA not before: Wed 27 May 2026 12:42:56 +0000
ROA not after: Wed 26 May 2027 12:47:56 +0000
asID: 214716
IP address blocks: 85.155.98.0/24 maxlen: 24
85.155.226.0/24 maxlen: 24
103.109.234.0/24 maxlen: 24
167.104.217.0/24 maxlen: 24
167.104.223.0/24 maxlen: 24
195.184.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 07:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:66:ab:22:f0:a0:de:09:3d:29:96:bd:94:18:1f:22:42:bd:17:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: May 27 12:42:56 2026 GMT
Not After : May 26 12:47:56 2027 GMT
Subject: CN=33AFAFEB45DCF8FA2FA27AB8D57255081627B80F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:50:98:78:c1:91:db:a5:89:a0:4e:38:0e:49:
d7:df:28:6a:a8:e9:71:14:35:67:ce:42:0a:d2:59:
6c:33:10:07:e4:93:be:d6:38:af:f3:2e:89:b6:ed:
a6:aa:e9:7f:6e:47:4d:76:34:8b:99:65:07:d1:02:
6a:01:0b:9b:f5:e9:ea:35:e4:46:61:ea:70:89:57:
50:ed:ae:6e:2e:a7:0b:64:45:70:de:98:47:3f:d1:
d0:d8:1a:fb:38:06:8b:9b:0a:e1:71:2b:03:d0:b0:
78:f4:ec:26:44:b8:0c:f4:3a:d3:87:27:8f:2d:a9:
e5:a0:6e:00:46:6c:7e:3b:13:4b:d3:5f:0d:35:45:
bd:a8:1f:3b:77:ce:9e:27:46:cb:c2:c3:93:e3:4a:
02:8f:4b:58:7e:04:83:7e:b5:42:f2:a1:dd:b6:49:
12:8e:7b:83:33:9e:a5:19:04:01:5b:e6:be:11:e6:
14:8d:25:5a:fe:53:08:fe:75:5a:a4:82:9e:f8:e5:
34:41:d2:0a:97:47:de:fd:b0:56:ee:77:8c:b9:20:
68:8c:00:44:62:24:b1:a8:22:87:9b:0e:fa:3e:27:
d1:72:6f:f1:b3:08:1c:db:2e:d9:11:1c:5f:99:14:
77:ef:13:a4:78:3b:be:44:87:8e:27:f1:70:92:10:
eb:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:AF:AF:EB:45:DC:F8:FA:2F:A2:7A:B8:D5:72:55:08:16:27:B8:0F
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS214716.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.155.98.0/24
85.155.226.0/24
103.109.234.0/24
167.104.217.0/24
167.104.223.0/24
195.184.247.0/24
Signature Algorithm: sha256WithRSAEncryption
10:16:85:81:1a:da:c6:ea:2b:90:5c:29:be:4e:f5:f4:e6:1a:
44:10:d7:3c:84:fe:67:20:cf:d7:9f:13:de:16:b3:f4:e6:ea:
0f:68:e4:2d:99:cc:42:7f:22:3a:e0:53:bf:cd:f4:75:86:0c:
9c:51:7d:62:6a:08:ae:fe:16:41:cf:39:eb:f5:98:c7:ee:49:
d8:5f:57:ff:14:9e:9c:88:d3:8c:db:3e:4c:ba:8c:04:f1:1b:
5e:76:c7:07:08:3d:f9:7a:c7:e0:df:9b:64:e9:b3:e7:ce:4e:
e2:02:3c:ed:69:8d:30:90:bf:c7:f6:5e:11:dc:20:eb:d2:2c:
60:13:1f:d0:d3:53:6c:af:27:ae:a4:75:e8:19:98:c4:ec:23:
e1:86:81:6a:42:df:6e:64:d3:54:1f:c3:26:ab:77:4a:ef:07:
e4:09:3e:0c:44:58:77:41:3a:1f:74:58:89:e6:31:ff:d3:80:
0f:c5:a0:63:1e:59:da:6b:50:6f:a3:be:c9:20:8c:a0:c2:cf:
48:ad:c4:92:0f:6e:e0:25:6e:ca:41:f3:51:b3:f7:49:75:53:
cd:19:85:e4:bc:53:43:b0:f5:64:72:ed:b7:f9:fd:b2:15:fd:
fc:64:83:1e:23:9d:3e:73:a6:93:fb:32:66:16:b5:0a:f6:2d:
1c:18:7d:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 15:03:30 2026 by rpki-client