Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS215823.roa
File: AS215823.roa (raw, json)
Hash identifier: kXnDHAWW1I7+wSGbTPrVTtgmbt4WsxsMOXVgpT2iP8c=
Subject key identifier: B4:34:9E:82:CD:08:BA:B6:59:A1:C2:6F:09:6F:88:5E:C9:A1:7B:54
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 4562DCFAC3CB747CFAFB77D982CDAF44EB352116
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS215823.roa
Signing time: Thu 04 Jun 2026 15:58:50 +0000
ROA not before: Thu 04 Jun 2026 15:53:50 +0000
ROA not after: Thu 03 Jun 2027 15:58:50 +0000
asID: 215823
IP address blocks: 103.146.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:62:dc:fa:c3:cb:74:7c:fa:fb:77:d9:82:cd:af:44:eb:35:21:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jun 4 15:53:50 2026 GMT
Not After : Jun 3 15:58:50 2027 GMT
Subject: CN=B4349E82CD08BAB659A1C26F096F885EC9A17B54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:3b:19:56:95:95:94:9c:db:8b:ff:aa:d0:73:
2e:e9:20:59:02:5d:69:48:8f:66:07:f7:7a:b7:8d:
ce:08:74:d4:f4:08:40:2a:09:42:e2:a2:28:ee:1e:
4d:bc:a5:b0:ab:30:81:a9:96:c1:f0:da:b0:bb:b1:
d7:94:05:df:12:01:df:54:15:6b:5b:14:e3:1f:2f:
86:25:27:a2:7c:6a:b2:cb:57:08:ed:d2:eb:4e:20:
b0:2a:f0:61:f9:bf:ac:12:4c:27:a9:07:3b:3b:5d:
c7:0a:0c:70:14:de:f6:4e:49:f9:c5:48:36:9e:71:
8a:f0:5c:a3:6e:2e:a7:3b:44:78:8c:ff:2e:9a:1c:
3c:5a:e6:40:10:bb:df:0a:6f:92:e8:69:c5:14:f8:
18:38:d8:ae:4a:f6:62:63:ee:c1:d0:42:b3:95:a5:
d7:56:5a:6e:2a:5f:91:1f:68:cb:57:5a:86:b1:a5:
89:28:f5:1f:50:43:ca:f9:ae:9f:60:af:98:03:0f:
29:a0:23:ca:2a:51:a8:0a:3c:5d:ee:a3:bc:e3:43:
97:c5:65:da:a5:93:43:d1:6b:e7:df:53:28:13:fd:
ce:9b:84:b0:41:a3:81:72:32:72:af:81:f1:0e:13:
3d:05:72:8d:37:2c:0c:f7:bf:2b:b9:71:90:1c:a9:
11:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:34:9E:82:CD:08:BA:B6:59:A1:C2:6F:09:6F:88:5E:C9:A1:7B:54
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS215823.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.146.102.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:c5:01:b5:dc:44:c4:1a:56:83:fc:a7:ea:b3:63:7a:bc:3b:
ac:0f:6a:46:1b:78:38:db:44:34:6e:84:6c:67:f2:82:b9:f3:
71:72:1f:08:6b:5f:db:5f:f7:8b:dc:e2:a8:b8:98:d7:0f:98:
ad:bb:8f:48:6c:05:b1:52:cf:67:b6:ce:2f:94:32:9e:5a:c6:
ee:bf:72:a5:03:3a:20:fd:ba:61:24:1a:89:34:13:89:14:d2:
0e:ea:d7:1a:ac:8b:0b:cb:ad:52:ff:ce:2b:48:e8:e6:f4:12:
e5:df:ae:b9:5c:54:d6:02:f4:15:60:b6:55:1c:7c:39:09:bd:
5a:11:8f:1f:e5:b2:57:3b:bc:eb:3b:0f:23:7a:9a:79:f3:12:
93:82:34:26:fb:d9:8a:df:11:a7:68:93:31:ad:df:de:cf:ec:
c2:a4:79:0b:3c:0e:26:64:29:1e:ee:6a:a9:e4:c2:7e:4e:6b:
c9:d0:e2:04:90:98:6f:22:22:b4:5c:32:7a:a5:70:4c:f6:8b:
82:5c:4c:5c:ef:5a:4c:22:2b:90:03:af:7a:14:39:b2:8c:fa:
6c:0b:a6:b0:d7:78:b3:ce:1c:1f:9b:d4:77:8d:6f:5f:29:11:
d9:da:77:30:72:98:49:2e:7f:2d:2f:af:2d:5a:61:ef:9c:0f:
b5:91:55:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 16:28:14 2026 by rpki-client