Route Origin Authorization
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS400175.roa
File: AS400175.roa (raw, json)
Hash identifier: IniirfB49b6BL3FTw8n7m7OFsE/vtyRBGuKj1/C4a6I=
Subject key identifier: 38:79:C7:A1:58:A6:78:02:C8:8C:01:A7:96:77:9F:E3:BD:3D:24:1C
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 0EEA6AE0ADF2B2D078B96B982F78F3931BCC18AE
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS400175.roa
Signing time: Mon 17 Aug 2026 05:54:05 +0000
ROA not before: Mon 17 Aug 2026 05:49:05 +0000
ROA not after: Mon 16 Aug 2027 05:54:05 +0000
asID: 400175
IP address blocks: 136.148.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 14:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:ea:6a:e0:ad:f2:b2:d0:78:b9:6b:98:2f:78:f3:93:1b:cc:18:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Aug 17 05:49:05 2026 GMT
Not After : Aug 16 05:54:05 2027 GMT
Subject: CN=3879C7A158A67802C88C01A796779FE3BD3D241C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:46:ca:31:a4:6b:07:cf:b0:cb:ac:ef:23:c0:
d2:59:c6:af:44:fd:d0:d7:ca:10:45:f5:ad:02:66:
96:5e:09:ae:cd:91:b0:de:80:0c:53:7c:60:8c:7b:
cc:f6:05:1f:9f:7f:34:b6:c6:b5:2b:fd:ed:7b:f2:
2a:ac:c3:b5:3d:d4:47:d1:74:ea:0e:c1:97:fe:5a:
46:8b:a1:be:09:dd:c4:fe:a1:28:6c:1d:63:56:cc:
5a:4b:b0:04:cf:69:12:31:2f:c0:7c:ea:df:52:4d:
58:30:04:da:ef:62:71:a1:41:f1:47:e2:33:e8:21:
23:ce:7e:bb:c3:57:a5:4b:1c:51:66:ba:83:fe:95:
c2:ef:3f:48:8d:fc:a6:02:7b:a0:37:5d:5d:37:31:
9b:c8:48:70:8d:17:73:0e:1d:83:67:d7:53:33:cc:
17:23:35:4c:d0:d2:48:f9:28:a7:47:4c:ff:12:fa:
57:0b:f5:d5:aa:97:2a:81:10:8a:86:3b:99:bf:47:
d0:30:35:95:06:d4:ec:6b:52:76:0d:36:25:5a:77:
5e:f5:94:13:8f:d6:2c:ac:8b:38:b3:9b:91:a4:38:
2f:5b:24:54:15:82:bd:36:2e:4e:51:fc:88:7d:d7:
ea:91:30:cd:0c:e6:0a:d9:d8:8f:f4:d2:22:01:13:
fc:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:79:C7:A1:58:A6:78:02:C8:8C:01:A7:96:77:9F:E3:BD:3D:24:1C
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS400175.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
136.148.66.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:12:fb:be:94:5f:73:1e:d7:71:d1:6e:97:63:14:07:6f:56:
95:f1:2c:67:41:83:e9:f4:3a:b3:61:d8:8c:15:72:e5:18:bd:
c0:b1:11:fa:b3:c5:e4:1a:62:57:75:b9:d9:67:1a:ad:98:ec:
94:e8:89:db:0e:36:0c:1d:95:6e:cd:79:1b:e0:d4:7d:c7:3d:
2e:30:e3:ad:34:da:3e:0a:4e:77:59:03:1d:58:c7:b0:b8:9d:
ea:93:2e:5f:db:2e:ad:99:31:96:83:f1:22:1a:f4:07:a9:92:
5a:82:d2:b5:d0:63:a0:f9:d3:76:73:4b:c8:74:1b:b7:8c:f5:
87:ba:a6:9e:23:b7:ef:56:76:fe:64:65:aa:29:d3:da:42:17:
c0:0c:bb:b5:65:7a:f8:f7:bc:38:16:be:33:2b:3f:d6:fa:af:
b4:2d:9c:06:52:0a:2a:f0:ab:67:a3:b8:24:94:9b:ae:1f:08:
31:8c:89:8a:c6:43:1b:8a:ce:23:8e:2c:fc:76:fa:87:b5:b3:
fa:21:25:34:8b:55:56:53:a9:7f:3b:27:1b:3c:41:12:d9:d4:
85:2e:12:89:b1:5c:be:93:98:0f:dc:56:bb:d1:d7:f8:ae:84:
d3:81:ad:c6:80:f5:52:a4:93:df:44:3d:00:18:e4:0d:af:61:
4c:50:a7:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 16:34:49 2026 by rpki-client