Route Origin Authorization
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS215225.roa
File: AS215225.roa (raw, json)
Hash identifier: H8CwjghPnYTQStwqk0ITlCP85MMB28t9WtrF/rnP/C4=
Subject key identifier: C7:5A:EC:65:20:0C:A4:D3:73:C7:16:6F:25:24:E0:42:9F:4D:AD:24
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 276ECEAC3573407C88A9196B9CB2E1F03F9B4DA3
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS215225.roa
Signing time: Sun 16 Aug 2026 19:15:35 +0000
ROA not before: Sun 16 Aug 2026 19:10:35 +0000
ROA not after: Sun 15 Aug 2027 19:15:35 +0000
asID: 215225
IP address blocks: 5.253.85.0/24 maxlen: 24
136.148.65.0/24 maxlen: 24
153.76.115.0/24 maxlen: 24
168.222.242.0/24 maxlen: 24
206.53.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:6e:ce:ac:35:73:40:7c:88:a9:19:6b:9c:b2:e1:f0:3f:9b:4d:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Aug 16 19:10:35 2026 GMT
Not After : Aug 15 19:15:35 2027 GMT
Subject: CN=C75AEC65200CA4D373C7166F2524E0429F4DAD24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d3:2f:72:72:03:55:2c:90:e6:82:e6:6c:d3:
81:12:3a:76:c4:e3:3a:45:fd:f2:cc:d2:54:d5:52:
be:11:61:d0:72:d2:5d:c2:d5:b6:4a:58:31:44:61:
56:c8:c1:9f:4f:c4:5b:e7:7d:0e:58:c2:27:a9:21:
aa:4a:98:58:aa:51:f7:fd:70:e7:aa:27:60:63:b8:
e1:ca:a2:df:59:9e:33:af:01:32:0e:7d:38:18:1f:
58:d3:6e:84:5a:a0:fd:58:1c:c0:92:58:2c:73:30:
30:52:b1:b0:db:f6:27:8c:6c:87:99:d8:65:ec:86:
ae:ed:38:81:c4:ff:fd:e3:78:1a:e2:5d:2d:cd:9a:
bb:52:d9:da:5b:ff:c6:39:aa:0d:4b:aa:af:1a:8d:
8c:a0:40:a3:6a:da:e0:43:b2:0e:1c:e5:41:f5:9b:
7b:e6:bc:7d:d3:05:a9:40:e1:7d:8a:16:4f:77:e8:
b7:c9:12:f1:fe:e1:44:d8:ef:26:e1:f9:a9:e2:4f:
48:2a:47:75:01:34:98:29:93:a4:1c:83:76:32:7c:
fe:21:0e:dc:5c:9a:e6:54:89:8d:a6:89:40:83:99:
93:49:51:ef:f5:73:df:d4:0a:5d:90:4f:9b:82:fa:
00:2e:4f:cc:d1:14:75:29:04:ce:86:63:18:3f:a7:
f6:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:5A:EC:65:20:0C:A4:D3:73:C7:16:6F:25:24:E0:42:9F:4D:AD:24
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS215225.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.85.0/24
136.148.65.0/24
153.76.115.0/24
168.222.242.0/24
206.53.1.0/24
Signature Algorithm: sha256WithRSAEncryption
14:ad:e1:f2:3e:79:3f:24:ec:3c:e4:a3:5b:04:65:39:69:e8:
ba:3e:bd:34:95:32:50:fe:32:bc:42:b7:8a:0e:0f:80:d3:ff:
64:34:8c:c6:0e:21:f2:5c:9f:68:35:7b:03:78:44:e0:b4:29:
dd:33:18:43:df:81:71:ba:16:fd:2f:b0:b9:28:a5:1b:5b:d7:
c7:57:63:5f:a9:b6:81:c5:f0:e6:79:eb:e3:17:87:20:a8:a4:
fa:3d:a7:4b:47:27:96:b0:26:36:81:d9:82:07:65:2e:fa:9b:
8c:01:47:68:a5:ce:50:55:1d:be:18:16:7a:45:f8:f2:0b:26:
7b:69:93:3f:1a:3e:3f:03:24:f6:a5:82:65:fc:8b:4d:fb:49:
c8:55:e8:5d:ff:3f:71:7a:ff:fd:58:1c:a2:ae:b1:41:11:bd:
6f:a2:51:66:fb:92:04:5c:d5:fb:ea:a3:10:b0:b3:32:f1:96:
23:c5:1d:a6:ee:60:45:15:67:96:2d:d6:0d:33:6f:09:d9:5a:
04:cf:44:44:d1:af:d6:2e:2c:35:2d:8b:4f:e0:36:fb:4d:5c:
25:e9:b4:de:de:bb:d9:4c:d9:4b:b1:12:b4:8b:12:7f:70:49:
fb:6f:b1:9f:58:76:fb:b0:f3:33:29:10:dd:d8:39:c8:55:52:
d4:6b:40:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:23:03 2026 by rpki-client