Route Origin Authorization
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS214716.roa
File: AS214716.roa (raw, json)
Hash identifier: mj39UtpEhtiSbyrZ6DhOBNbD+PXNUzW9Mnwd7oAIYHk=
Subject key identifier: 2A:50:31:C0:4B:2E:DE:A9:52:AF:47:44:C4:36:60:04:71:CA:66:FD
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 24FE95F3947B6C1B2A9E363D3ABEB36E5EA7E9DF
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS214716.roa
Signing time: Thu 01 Oct 2026 19:10:21 +0000
ROA not before: Thu 01 Oct 2026 19:05:21 +0000
ROA not after: Thu 30 Sep 2027 19:10:21 +0000
asID: 214716
IP address blocks: 81.31.210.0/24 maxlen: 24
81.31.211.0/24 maxlen: 24
85.155.98.0/24 maxlen: 24
103.109.234.0/24 maxlen: 24
136.148.71.0/24 maxlen: 24
136.148.74.0/24 maxlen: 24
136.148.79.0/24 maxlen: 24
143.246.182.0/24 maxlen: 24
167.104.217.0/24 maxlen: 24
167.104.223.0/24 maxlen: 24
185.121.179.0/24 maxlen: 24
195.184.247.0/24 maxlen: 24
216.86.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:fe:95:f3:94:7b:6c:1b:2a:9e:36:3d:3a:be:b3:6e:5e:a7:e9:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Oct 1 19:05:21 2026 GMT
Not After : Sep 30 19:10:21 2027 GMT
Subject: CN=2A5031C04B2EDEA952AF4744C436600471CA66FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:66:6f:ba:6e:e0:87:f0:b9:7a:2b:b8:24:be:
12:93:27:5d:f0:7a:38:94:f0:6c:c7:60:20:5b:d7:
52:f0:2a:0e:b6:f7:7d:40:5f:8e:05:a4:4a:86:c9:
e6:61:2f:40:76:03:4a:3f:46:86:46:10:23:3d:e7:
5e:fa:cb:58:a5:4e:5f:6c:2c:8a:87:70:f4:40:13:
22:b9:d8:80:1c:19:d7:a5:41:4f:b0:0a:e0:3d:6e:
a7:fa:af:57:c2:5e:f9:09:9c:b8:78:8d:b4:b6:47:
14:4c:c5:5e:6b:98:c8:48:08:4e:ac:05:dd:d1:d0:
24:d0:6e:53:7d:f6:88:55:6b:86:5b:bb:8e:e1:8a:
f1:88:4a:25:b0:cb:41:23:8e:8a:e7:48:fd:87:0c:
53:a4:d0:31:fc:6d:84:a0:16:4e:04:9b:72:47:87:
2b:6a:b8:c2:9c:75:c5:1a:dc:26:c5:e4:e2:8f:a4:
7c:4e:98:82:fd:cf:6e:da:7b:c5:a5:11:40:a6:d3:
d6:27:9a:c0:a2:a2:dc:9c:ff:c0:1e:34:b6:da:1c:
00:00:0a:29:17:bd:3c:74:98:a0:19:d7:fc:8f:6f:
3d:d6:d0:11:52:ed:a1:fb:70:7d:d6:7f:01:ab:d2:
72:7d:4d:3a:c4:28:51:21:fd:af:13:5b:1a:01:da:
0a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:50:31:C0:4B:2E:DE:A9:52:AF:47:44:C4:36:60:04:71:CA:66:FD
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS214716.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.31.210.0/23
85.155.98.0/24
103.109.234.0/24
136.148.71.0/24
136.148.74.0/24
136.148.79.0/24
143.246.182.0/24
167.104.217.0/24
167.104.223.0/24
185.121.179.0/24
195.184.247.0/24
216.86.70.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:81:34:53:e1:b7:12:01:fe:bc:d5:5b:2c:9b:c5:c1:42:0d:
6c:05:0a:38:41:fa:9c:f4:c0:15:f1:b8:f6:ef:3d:8b:d4:c1:
40:e0:1a:e4:1c:08:b5:bc:e4:5d:f7:50:19:0e:ec:17:8d:65:
43:15:af:66:71:10:c5:90:cd:e0:22:43:a0:71:08:66:97:fa:
73:10:89:c0:11:ee:8d:8d:e7:31:a4:d9:f8:a3:af:eb:49:63:
ee:ca:48:f0:cd:1f:9b:84:fa:8f:6a:3e:ec:80:7a:bd:3d:61:
bc:32:83:9f:ab:80:04:bd:7e:f4:74:94:cd:01:5c:db:01:84:
3e:e9:c5:66:b7:b3:d6:75:8f:d2:5e:1d:37:32:33:c6:35:6f:
2b:a6:af:de:ff:44:54:8d:36:67:a3:65:e1:25:e0:c4:7c:d7:
26:44:5b:2a:04:08:5b:fd:ef:8a:c3:55:fb:2b:04:3c:24:b9:
24:af:7a:23:cd:b9:d4:17:38:c9:b2:3b:36:90:44:e3:f1:cb:
88:d3:d0:ce:c2:53:61:00:3b:35:92:86:d1:a9:36:f1:a5:49:
ea:fa:81:56:ce:1d:03:78:57:37:c1:0a:f8:60:df:5c:0d:b8:
f1:1a:f0:da:c1:f1:ac:2f:6a:bd:ed:c0:17:a8:41:1e:bf:fe:
a1:66:7d:bd
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgIUJP6V85R7bBsqnjY9Or6zbl6n6d8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDE0YjZmY2YyYjJjNjliZTA4NWU5Zjk1OTg3MmRjYmU4
ZWE1NDE3NzAeFw0yNjEwMDExOTA1MjFaFw0yNzA5MzAxOTEwMjFaMDMxMTAvBgNV
BAMTKDJBNTAzMUMwNEIyRURFQTk1MkFGNDc0NEM0MzY2MDA0NzFDQTY2RkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzZm+6buCH8Ll6K7gkvhKTJ13w
ejiU8GzHYCBb11LwKg62931AX44FpEqGyeZhL0B2A0o/RoZGECM95176y1ilTl9s
LIqHcPRAEyK52IAcGdelQU+wCuA9bqf6r1fCXvkJnLh4jbS2RxRMxV5rmMhICE6s
Bd3R0CTQblN99ohVa4Zbu47hivGISiWwy0EjjornSP2HDFOk0DH8bYSgFk4Em3JH
hytquMKcdcUa3CbF5OKPpHxOmIL9z27ae8WlEUCm09YnmsCiotyc/8AeNLbaHAAA
CikXvTx0mKAZ1/yPbz3W0BFS7aH7cH3WfwGr0nJ9TTrEKFEh/a8TWxoB2grFAgMB
AAGjggIxMIICLTAdBgNVHQ4EFgQUKlAxwEsu3qlSr0dExDZgBHHKZv0wHwYDVR0j
BBgwFoAU0Utvzyssab4IXp+VmHLcvo6lQXcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNy9EMTRCNkZDRjJC
MkM2OUJFMDg1RTlGOTU5ODcyRENCRThFQTU0MTc3LmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMFV0dnp5c3NhYjRJWHAtVm1ITGN2bzZsUVhjLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC83L0FT
MjE0NzE2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGEGCCsGAQUFBwEH
AQH/BFIwUDBOBAIAATBIAwQBUR/SAwQAVZtiAwQAZ23qAwQAiJRHAwQAiJRKAwQA
iJRPAwQAj/a2AwQAp2jZAwQAp2jfAwQAuXmzAwQAw7j3AwQA2FZGMA0GCSqGSIb3
DQEBCwUAA4IBAQBfgTRT4bcSAf681Vssm8XBQg1sBQo4Qfqc9MAV8bj27z2L1MFA
4BrkHAi1vORd91AZDuwXjWVDFa9mcRDFkM3gIkOgcQhml/pzEInAEe6NjecxpNn4
o6/rSWPuykjwzR+bhPqPaj7sgHq9PWG8MoOfq4AEvX70dJTNAVzbAYQ+6cVmt7PW
dY/SXh03MjPGNW8rpq/e/0RUjTZno2XhJeDEfNcmRFsqBAhb/e+Kw1X7KwQ8JLkk
r3ojzbnUFzjJsjs2kETj8cuI09DOwlNhADs1kobRqTbxpUnq+oFWzh0DeFc3wQr4
YN9cDbjxGvDawfGsL2q97cAXqEEev/6hZn29
-----END CERTIFICATE-----
Generated at Sun Oct 11 03:29:57 2026 by rpki-client