Route Origin Authorization
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS40663.roa
File: AS40663.roa (raw, json)
Hash identifier: 9Trs/+HdSHMjlzQ1W9sx3/5XI3JPiuM8rNZKm9NOmts=
Subject key identifier: 0B:95:93:3B:94:6F:38:0E:2F:8F:F9:2F:1B:78:4E:B4:DF:B3:27:14
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 62C0D69B163E3EE8EFC5067E9B7DC20B0D6DD616
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS40663.roa
Signing time: Tue 06 Oct 2026 18:59:11 +0000
ROA not before: Tue 06 Oct 2026 18:54:11 +0000
ROA not after: Tue 05 Oct 2027 18:59:11 +0000
asID: 40663
IP address blocks: 168.222.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 05:27:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:c0:d6:9b:16:3e:3e:e8:ef:c5:06:7e:9b:7d:c2:0b:0d:6d:d6:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Oct 6 18:54:11 2026 GMT
Not After : Oct 5 18:59:11 2027 GMT
Subject: CN=0B95933B946F380E2F8FF92F1B784EB4DFB32714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:11:e8:af:90:46:3f:da:49:d1:9b:72:3c:e0:
e2:da:28:b3:e9:82:fd:f0:65:48:c0:d8:66:c2:b6:
64:c6:cb:36:01:7a:45:73:1a:9e:54:b1:53:3c:1f:
0b:47:a7:75:75:76:31:a9:4a:da:c4:1a:68:0f:aa:
27:eb:6a:8d:7e:63:09:9f:22:f3:b1:95:13:11:40:
fc:ba:95:2b:ee:eb:c0:81:1c:48:55:c2:8f:50:e1:
fa:b2:c6:4a:ed:bb:63:fa:2a:5a:e2:ac:46:9c:8b:
4a:8f:02:e8:fe:48:fc:66:f5:d8:6c:a3:31:55:21:
9b:02:e0:47:28:8d:6b:34:fd:a6:04:e1:cd:93:ec:
57:9e:3c:cc:7b:28:e2:55:de:58:c1:e2:95:20:7e:
22:47:bc:89:e1:c4:a7:6d:fb:87:bc:90:87:c4:a0:
dd:64:f8:f8:a3:d4:74:2d:df:f8:72:3e:24:78:21:
8a:e4:4d:65:55:04:a6:ce:01:c0:bc:98:b0:3f:e1:
76:73:4e:81:d8:b7:cd:8d:97:68:11:78:0a:f4:5a:
c5:62:78:0c:92:9f:8b:2c:4f:0e:37:8e:0c:2d:2e:
b0:b9:42:31:ce:af:24:73:da:ef:46:a9:6d:9a:1a:
a8:04:43:16:ef:42:53:1d:f2:27:d0:6e:0b:6d:87:
e8:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:95:93:3B:94:6F:38:0E:2F:8F:F9:2F:1B:78:4E:B4:DF:B3:27:14
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS40663.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.222.241.0/24
Signature Algorithm: sha256WithRSAEncryption
00:da:3d:40:94:f1:8f:10:52:69:01:03:43:57:38:ec:b2:88:
b3:7a:e1:81:43:25:f1:d5:a0:de:58:e4:cb:eb:86:c9:88:9a:
0c:a6:07:37:b7:f0:53:3a:8f:e5:b4:30:42:6a:af:67:35:f7:
4c:d1:87:9d:9d:d4:eb:87:5e:63:ef:ea:d5:72:cf:d9:d8:09:
e9:14:96:9f:69:48:09:d3:35:50:fc:61:96:68:5c:c7:a9:3d:
bb:14:a7:65:56:ef:e9:fb:e0:f2:50:90:f3:90:22:ec:3e:5b:
f8:77:9f:f3:f3:16:98:6f:73:30:22:57:2f:08:f0:4d:0b:47:
08:0b:81:6d:17:06:10:4e:1b:b7:9c:75:c7:72:6e:bf:19:51:
ea:d3:3d:49:4e:2e:9a:40:ae:10:6f:74:ff:52:b4:74:83:10:
b1:03:60:0f:b1:ac:c1:7a:f4:28:ba:e3:7a:ee:df:4e:3b:86:
e6:2c:43:82:53:d5:dd:a9:a8:49:98:83:04:1d:11:4d:21:b6:
be:4e:3e:13:af:53:3b:bb:70:f8:cb:f7:e3:41:d7:4f:8f:bb:
3f:ec:99:7d:40:ad:bf:fd:4d:e8:4f:94:7c:f5:d5:03:80:56:
36:4f:27:f7:e5:4a:c5:33:58:f0:b1:86:ce:73:84:0e:01:d2:
20:c0:8f:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 15:17:43 2026 by rpki-client