Route Origin Authorization
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS401665.roa
File: AS401665.roa (raw, json)
Hash identifier: iLeFci64cJeHIq1PDzHpaGKfA6dv/ueXI5SAdn/gY24=
Subject key identifier: 0D:90:BE:7C:95:63:88:9E:95:3F:BF:68:2E:A1:7F:18:34:8F:76:76
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 294E45B4FF03A18F35E0007FA24F368BAC1C9C4F
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS401665.roa
Signing time: Wed 12 Aug 2026 20:58:56 +0000
ROA not before: Wed 12 Aug 2026 20:53:56 +0000
ROA not after: Wed 11 Aug 2027 20:58:56 +0000
asID: 401665
IP address blocks: 103.254.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:4e:45:b4:ff:03:a1:8f:35:e0:00:7f:a2:4f:36:8b:ac:1c:9c:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Aug 12 20:53:56 2026 GMT
Not After : Aug 11 20:58:56 2027 GMT
Subject: CN=0D90BE7C9563889E953FBF682EA17F18348F7676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:aa:ad:8f:7c:52:1f:c5:60:b9:63:ef:a1:f8:
cc:b3:61:6c:05:c6:89:69:6b:a4:30:0c:ac:89:62:
ef:79:26:7d:91:28:0c:54:5a:8b:2f:80:e0:c1:c8:
3b:f8:63:41:ae:50:c1:35:13:e9:95:39:17:e7:d6:
58:15:79:01:73:f2:95:44:43:90:44:e9:ba:1b:00:
e1:0e:fc:22:2b:b9:ad:5b:0a:19:bc:05:ca:f1:ef:
af:dd:b9:99:9d:dd:48:19:71:80:76:73:e0:ba:cf:
c6:3e:20:da:0f:c2:4b:b2:21:51:8e:1b:e0:e3:5b:
54:fe:79:e4:22:9f:18:7b:bf:4d:d8:fe:f4:ed:27:
ee:73:7c:80:f3:76:22:15:77:c7:fb:19:c6:8a:7b:
6e:59:50:e0:0e:0c:dd:d4:93:80:4e:e6:7c:7a:14:
44:70:87:f6:8d:ec:5b:fc:ee:52:b5:45:ab:ab:ee:
4d:75:ca:a1:8d:c0:e2:0a:6e:c7:82:52:3b:e4:15:
0d:ac:5b:24:d6:b9:c0:0e:18:78:db:83:a6:1c:32:
1c:09:b9:19:6e:f2:31:bf:a6:b0:0d:f9:54:e7:a4:
93:1a:71:b4:cc:11:c3:bf:49:b5:7d:83:0f:80:44:
7f:38:64:d8:dd:3f:1f:de:f8:d1:34:0f:6b:8a:fc:
b6:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:90:BE:7C:95:63:88:9E:95:3F:BF:68:2E:A1:7F:18:34:8F:76:76
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS401665.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.254.63.0/24
Signature Algorithm: sha256WithRSAEncryption
59:d9:53:14:9f:e2:68:dd:99:67:86:7b:8f:09:57:23:1e:dc:
d3:99:27:98:b7:1f:ce:f7:b2:57:98:53:b6:23:1c:f2:4b:46:
f7:c9:7a:c1:78:ac:93:b9:4f:d6:d2:2d:2d:28:1b:21:8f:4e:
81:19:21:7d:e7:4a:21:e8:60:2a:11:2f:62:fc:5d:ad:f5:f7:
1f:92:cb:fc:bd:b0:fe:08:2c:24:c6:9f:b1:1c:80:00:36:33:
23:cb:ae:ba:f3:f7:53:c6:68:94:ea:91:e1:ae:96:c5:fc:6d:
83:68:76:ae:fe:1b:f1:61:46:b4:b6:fc:24:31:80:bb:5b:b5:
95:05:60:ef:7f:9c:36:bf:21:56:77:8d:d5:82:e9:4c:ec:b8:
e1:f6:35:28:be:51:1c:85:e9:f7:4c:af:12:bf:9e:f6:4c:ca:
9d:63:60:8c:b0:a5:d6:9c:08:7d:7d:49:4a:15:02:1d:c9:39:
35:8e:a1:3d:f8:db:b6:dd:37:9a:e7:90:5e:53:bf:3d:6b:78:
9c:26:10:f3:73:24:57:10:f9:66:f7:ec:b2:53:95:7b:b4:3f:
38:85:7e:16:3c:fd:6f:fc:ed:b4:a5:68:14:97:7c:48:cd:6c:
56:0d:47:10:8d:95:d5:43:0b:e3:8a:2c:bd:0b:e4:9c:f1:f5:
c2:54:14:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 11:28:16 2026 by rpki-client