Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/3138352e3137382e3230302e302f32342d3234203d3e203336323336.roa
File: 3138352e3137382e3230302e302f32342d3234203d3e203336323336.roa (raw, json)
Hash identifier: NRnPqhedMQXZITgULXkEFWLg84XqYDgE402kCM63mBA=
Subject key identifier: CE:A2:D8:DA:B4:F2:13:0F:11:E8:66:DC:D7:9E:48:D0:EB:94:D9:C6
Certificate issuer: /CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Certificate serial: 298ACF20B75BDDBA98EC67235ED0F7F98340ED24
Authority key identifier: EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/3138352e3137382e3230302e302f32342d3234203d3e203336323336.roa
Signing time: Thu 25 Jun 2026 20:29:05 +0000
ROA not before: Thu 25 Jun 2026 20:24:05 +0000
ROA not after: Thu 24 Jun 2027 20:29:05 +0000
asID: 36236
IP address blocks: 185.178.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.mft
rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:8a:cf:20:b7:5b:dd:ba:98:ec:67:23:5e:d0:f7:f9:83:40:ed:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Validity
Not Before: Jun 25 20:24:05 2026 GMT
Not After : Jun 24 20:29:05 2027 GMT
Subject: CN=CEA2D8DAB4F2130F11E866DCD79E48D0EB94D9C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:71:35:1b:5d:e1:b8:7e:ad:78:d8:c0:e9:5b:
9a:fa:b0:b0:57:4b:0e:9b:6c:a0:14:1c:bb:72:71:
17:92:b5:15:66:73:89:1a:95:0e:17:9d:3e:1e:b2:
4e:83:1e:08:9a:6d:1c:c2:19:f6:8c:22:00:e9:1c:
a8:52:a3:d2:bd:96:9f:5d:31:a7:be:e3:51:25:dd:
4a:65:64:d4:69:c2:82:06:cf:15:77:ee:fa:5f:60:
83:09:1c:81:4e:9e:fa:f6:3f:17:ef:6c:57:24:47:
a9:6c:b3:a5:7d:95:d7:9c:6c:d7:98:09:d6:46:d5:
ab:09:85:00:ae:83:be:40:16:c7:e3:67:5d:c1:07:
76:72:ec:06:6a:8e:c4:ea:45:1b:25:66:4a:1a:29:
a2:2a:6d:2f:c2:da:8c:45:45:8a:64:86:b2:bd:17:
48:46:1c:4f:39:1e:91:3e:92:5a:32:09:0b:93:92:
54:26:7d:37:5d:40:8d:c7:fe:10:a3:e3:7a:02:72:
18:f8:cb:ee:b4:bf:a7:cf:13:40:17:ab:46:c8:fd:
0f:33:19:da:a7:41:a9:82:3d:12:df:61:b9:3d:e8:
35:ef:3f:96:c3:d5:36:74:58:7e:be:8d:3c:44:e0:
fe:72:0f:87:cd:ca:82:7f:74:e6:6b:7a:af:14:6e:
6c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:A2:D8:DA:B4:F2:13:0F:11:E8:66:DC:D7:9E:48:D0:EB:94:D9:C6
X509v3 Authority Key Identifier:
keyid:EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/3138352e3137382e3230302e302f32342d3234203d3e203336323336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.178.200.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:30:6f:6d:06:3d:69:0d:65:36:2e:9c:29:1d:dc:c4:2a:1b:
95:d9:72:4f:37:ec:f3:9d:93:de:4f:75:74:28:b7:78:06:06:
40:2a:de:67:1d:62:e2:9c:d0:58:5e:cc:41:3c:2e:a2:65:69:
45:3a:8e:30:84:53:32:58:f8:ba:c6:3d:f0:a5:66:fa:43:b4:
3c:00:a9:5f:10:4d:3e:1b:7e:16:4a:86:b3:01:51:85:d2:d7:
e3:8e:1d:b9:f1:6d:0f:d2:5e:88:3c:89:8a:c1:bd:6b:18:15:
c0:07:89:79:9c:b7:38:cd:f2:54:b2:31:00:98:28:c4:c2:50:
13:e0:0a:14:e7:ca:90:d4:ca:d6:9b:27:2b:d6:67:d0:c2:4e:
91:98:58:27:e5:fc:a2:40:23:bd:ff:cc:67:e5:c9:97:ed:f7:
18:31:62:88:2b:bf:1c:51:36:a2:8d:b1:0a:f9:61:a2:cc:f3:
f8:6f:29:ca:b9:76:dd:7a:0d:96:55:f1:2d:26:35:41:0e:f6:
6d:ab:ae:8f:69:95:13:4f:f5:37:c0:53:fa:65:cf:32:ad:36:
ce:41:15:f9:dc:dc:95:6a:a6:30:a6:32:2f:7e:38:fc:3d:4e:
8b:ff:78:88:2c:34:c9:97:9c:f4:9a:cb:cb:48:13:a2:43:f3:
99:66:2f:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:28:42 2026 by rpki-client