Route Origin Authorization
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS215196.roa
File: AS215196.roa (raw, json)
Hash identifier: YRMKTHJs2977glmsupi12ch9aTkt/58e7BtIKKQANtg=
Subject key identifier: 2B:9F:61:B4:F0:C0:4C:FC:11:C3:50:79:DD:7D:6F:7E:7A:BB:3D:38
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 390AE64463C2A3CA7F69C3DBE4E2858731CDA3CE
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS215196.roa
Signing time: Tue 11 Aug 2026 05:58:56 +0000
ROA not before: Tue 11 Aug 2026 05:53:56 +0000
ROA not after: Tue 10 Aug 2027 05:58:56 +0000
asID: 215196
IP address blocks: 103.254.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:0a:e6:44:63:c2:a3:ca:7f:69:c3:db:e4:e2:85:87:31:cd:a3:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Aug 11 05:53:56 2026 GMT
Not After : Aug 10 05:58:56 2027 GMT
Subject: CN=2B9F61B4F0C04CFC11C35079DD7D6F7E7ABB3D38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a5:c3:3a:1f:32:05:74:07:45:40:4b:7b:08:
29:70:d9:96:fa:a9:21:d8:f5:28:12:27:b9:43:33:
a3:38:6b:f5:97:72:96:0b:61:73:e8:24:53:1a:7a:
d4:f7:88:52:11:47:00:4e:82:8e:41:a7:d9:3b:ba:
a9:3a:b1:b3:dd:a0:42:09:77:7a:fa:fa:8a:bb:48:
85:6b:bf:9f:4f:75:59:10:29:25:11:39:6f:f6:ed:
95:4b:2b:ba:47:23:52:b9:bb:a2:6d:a3:1d:dc:a8:
a7:3b:42:27:40:f6:03:f1:13:21:c9:0b:28:d0:f0:
dd:cf:91:6e:5e:65:84:65:3d:ee:ed:10:3b:1e:e7:
73:c3:29:78:62:86:cb:fe:94:df:a3:3a:e8:58:0d:
cf:2d:82:91:77:a6:a9:b8:70:95:1f:8d:bf:37:94:
27:f1:5b:97:c5:83:bb:31:0a:fe:81:70:1d:c7:4d:
c2:27:9d:75:e6:45:26:a5:36:05:56:1d:4a:59:64:
18:4e:d7:c0:74:cf:b5:a1:1e:b4:78:39:25:62:ca:
82:1c:e3:5c:c1:5f:51:a5:2e:11:97:f2:ba:df:7d:
37:f7:4c:3f:c5:19:91:99:c0:74:74:18:4d:35:ad:
86:c6:4c:1d:f5:b5:55:1b:cc:c5:9f:8a:2c:2d:fa:
c9:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:9F:61:B4:F0:C0:4C:FC:11:C3:50:79:DD:7D:6F:7E:7A:BB:3D:38
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS215196.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.254.60.0/24
Signature Algorithm: sha256WithRSAEncryption
93:b4:02:5b:7a:ed:0d:5d:09:ba:a1:5d:ba:56:2c:b2:60:12:
e8:f7:cd:d1:32:17:a4:62:d6:f3:95:5f:e2:2c:f5:18:4c:3d:
b7:1c:23:c9:90:db:c4:23:38:b0:c9:14:ad:9e:0f:2d:2d:c5:
45:ff:97:c3:c0:79:8c:8d:8a:c4:92:3c:9d:c6:f7:10:78:1b:
2a:a7:54:86:3a:44:f8:7d:1a:73:ef:01:b1:ea:21:8b:e6:f7:
dd:d9:4d:d1:bf:88:6a:80:a4:c0:1a:f0:8b:d2:90:57:94:41:
5e:69:30:90:a7:37:05:ee:df:63:de:a6:26:68:8a:b7:7a:c4:
20:70:e9:c6:6d:ec:70:f8:9e:6e:87:92:32:c8:89:c0:e8:0f:
59:53:4e:12:59:e1:88:a9:97:4e:27:aa:7b:2e:63:60:cf:14:
2f:1a:22:b1:8e:a7:fe:2e:ae:62:fb:58:75:d9:d5:84:6e:e0:
ce:c1:02:37:50:14:b3:41:8e:73:d4:a2:d3:b9:98:bd:43:20:
41:22:3e:4a:95:55:ce:45:e5:e9:3f:40:b3:bc:bd:43:6c:c9:
b6:b7:fa:99:eb:cc:fe:40:ee:43:97:37:f8:ac:e1:5b:90:78:
e5:8a:f1:1c:d8:60:33:c4:fc:f4:22:2d:2f:e3:a5:d6:64:94:
4f:e2:0b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:22:55 2026 by rpki-client