Route Origin Authorization
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS6939.roa
File: AS6939.roa (raw, json)
Hash identifier: RC+TpWTqG9y97BKtlNkJV4RbwGhJDGcFewkB1GJAN3U=
Subject key identifier: 79:36:38:50:F1:1F:B5:55:79:F6:96:2A:59:2E:F3:DD:5A:53:1A:24
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 3316AF01C24E999B96D5C26FD4D9D25761B77EAC
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS6939.roa
Signing time: Fri 14 Aug 2026 14:41:24 +0000
ROA not before: Fri 14 Aug 2026 14:36:24 +0000
ROA not after: Fri 13 Aug 2027 14:41:24 +0000
asID: 6939
IP address blocks: 153.76.119.0/24 maxlen: 24
153.76.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 14:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:16:af:01:c2:4e:99:9b:96:d5:c2:6f:d4:d9:d2:57:61:b7:7e:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Aug 14 14:36:24 2026 GMT
Not After : Aug 13 14:41:24 2027 GMT
Subject: CN=79363850F11FB55579F6962A592EF3DD5A531A24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:6e:69:2d:bd:14:5c:c2:59:7c:aa:23:8d:71:
88:bd:df:7c:e7:bb:fe:fa:02:91:00:31:14:ad:3f:
e8:aa:11:1a:e0:a2:5c:b0:58:53:f8:7e:ad:a8:ce:
8b:ef:bf:d2:db:cd:4f:cd:96:23:f3:b1:15:cd:6c:
34:69:0e:f3:43:de:b7:21:ec:ed:aa:e0:c3:6e:18:
de:11:6c:f2:ad:7d:2f:ca:e0:94:c7:7d:25:6e:3e:
69:da:fc:fb:cc:3b:cb:eb:4e:c9:9e:06:9e:61:50:
0c:b0:d7:12:38:ba:3f:65:18:13:e3:96:f0:1e:9b:
59:7f:d0:26:35:f3:27:d8:8e:d2:ea:a7:d2:ca:19:
73:03:a0:de:5b:5b:e5:9b:7a:c5:53:f2:c5:87:6f:
63:52:d5:3e:9f:60:d5:25:0c:5c:d8:a1:90:28:91:
5c:22:26:a3:9a:82:17:87:e6:c6:93:06:29:65:1f:
a4:e8:01:07:d7:72:25:4e:9a:fc:6f:04:d1:c3:d8:
e0:f3:11:ae:45:5b:99:25:da:22:a3:0b:d3:c2:bf:
c5:40:49:0e:9d:35:a6:c8:02:01:67:a4:09:70:04:
cc:c0:59:74:d5:d9:ad:27:52:32:29:61:02:e6:ac:
fa:ff:44:24:a2:e2:7f:d0:83:61:bc:96:c0:7c:fe:
7b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:36:38:50:F1:1F:B5:55:79:F6:96:2A:59:2E:F3:DD:5A:53:1A:24
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS6939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.76.119.0/24
153.76.121.0/24
Signature Algorithm: sha256WithRSAEncryption
80:b9:b9:d9:d6:a4:c8:6d:44:b5:ee:a4:53:fc:10:0a:1b:e8:
0c:15:ae:e6:6e:b2:00:d4:78:4b:76:b0:55:52:61:fc:39:b3:
53:16:8c:07:ad:54:cf:6b:30:9e:96:6e:79:26:71:af:48:c7:
52:14:59:12:0a:d1:b8:e7:46:19:f4:12:52:7e:ed:a8:2a:05:
1b:fc:df:10:9b:6f:b3:3c:10:0e:01:31:97:41:8d:b0:0e:fc:
d3:f0:fd:fe:e7:1e:34:c1:18:84:35:f6:05:44:73:25:37:a9:
fb:fc:72:21:68:3d:0a:59:e3:9c:0f:53:2e:bb:84:df:d4:c2:
17:0d:61:e1:bc:cd:16:ce:db:2a:58:c3:95:72:5a:27:7a:7b:
a3:ac:81:2e:f9:7b:2c:31:7c:7c:af:c9:eb:9f:a5:e3:f3:c8:
df:f5:82:21:65:9d:15:9a:34:0a:32:8b:d6:15:61:35:24:fb:
2a:a3:c6:a2:87:37:a5:0d:0c:50:7c:cc:94:f0:83:dc:04:44:
63:99:f4:13:e8:a1:a6:e2:09:1b:4c:d3:36:66:3c:d7:39:a0:
86:5a:0b:1e:c4:74:52:bd:1f:b1:8c:1a:5c:06:d7:34:da:d2:
ba:8d:55:96:54:20:02:40:45:93:13:ea:b1:3c:16:24:aa:50:
69:03:07:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 16:34:43 2026 by rpki-client