Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/3138352e3137382e3230312e302f32342d3234203d3e203336323336.roa
File: 3138352e3137382e3230312e302f32342d3234203d3e203336323336.roa (raw, json)
Hash identifier: QwxgEOTvTtDvChFZAqNAbAny1FDjRzicSlc8aMnBivk=
Subject key identifier: 6A:52:DA:B4:A4:8F:EA:AC:F9:CC:9C:5D:B0:12:E6:DD:08:37:63:57
Certificate issuer: /CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Certificate serial: 0A7675EE99C0FDC57EFCF031DDE0615F2ECE7F24
Authority key identifier: EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/3138352e3137382e3230312e302f32342d3234203d3e203336323336.roa
Signing time: Thu 25 Jun 2026 20:29:05 +0000
ROA not before: Thu 25 Jun 2026 20:24:05 +0000
ROA not after: Thu 24 Jun 2027 20:29:05 +0000
asID: 36236
IP address blocks: 185.178.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.mft
rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:27:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:76:75:ee:99:c0:fd:c5:7e:fc:f0:31:dd:e0:61:5f:2e:ce:7f:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Validity
Not Before: Jun 25 20:24:05 2026 GMT
Not After : Jun 24 20:29:05 2027 GMT
Subject: CN=6A52DAB4A48FEAACF9CC9C5DB012E6DD08376357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f5:18:2a:27:bf:b3:c1:46:4a:3c:2a:73:d5:
c3:b0:e1:59:c9:4b:9c:be:2b:ae:8c:a0:ba:9a:42:
aa:96:68:8b:45:f0:7c:6b:c7:46:8a:75:38:9b:55:
11:2f:6b:7a:91:c2:e9:14:3a:b5:85:14:bb:eb:04:
df:4a:c7:ac:c8:2b:ab:f7:16:05:e6:0e:c5:45:63:
90:13:2f:64:21:a7:25:02:92:05:4a:b1:75:12:8e:
0b:25:7a:29:df:8e:d4:77:2a:7a:1f:f2:8b:10:fd:
3a:d7:46:da:a0:40:a0:70:75:f3:62:b7:17:a3:c0:
31:31:a6:67:69:18:0f:11:ab:e1:20:56:d3:8f:3e:
c3:8f:9f:bb:09:ed:a8:b6:3d:2b:73:7c:59:21:ab:
ff:b4:57:01:6a:b7:ed:d9:61:25:7e:5d:d4:03:6e:
51:49:5f:a4:7f:00:bb:cc:33:95:78:00:6c:3e:36:
b4:6e:62:1b:b4:99:dd:ba:37:73:e4:f9:18:98:56:
f7:5f:bf:c6:ee:c5:07:8c:e6:c9:a6:eb:94:88:d7:
63:94:3a:ac:0e:39:03:d1:95:c0:3a:84:a2:98:07:
aa:33:3f:48:0e:5c:39:15:3d:4d:d2:4c:60:4b:a8:
4c:69:c4:6d:ac:63:e5:fa:a4:22:08:17:7b:c4:28:
97:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:52:DA:B4:A4:8F:EA:AC:F9:CC:9C:5D:B0:12:E6:DD:08:37:63:57
X509v3 Authority Key Identifier:
keyid:EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/3138352e3137382e3230312e302f32342d3234203d3e203336323336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.178.201.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:89:c1:bd:8e:43:fe:0e:55:8b:d2:d8:38:5b:92:73:ef:7f:
f5:b8:3a:66:de:ea:bd:df:ef:f8:53:4a:cb:65:67:8c:a6:c8:
f6:5e:37:9f:18:4a:4b:dc:9c:ed:0f:c8:ad:27:ca:bc:d7:c9:
98:c5:ec:19:4f:74:ef:cf:19:77:56:0e:25:99:67:51:e4:16:
ad:03:b4:94:ff:e7:88:75:45:b1:27:0c:05:5f:a9:d2:6a:16:
2b:cc:be:45:01:0f:63:07:b0:3f:94:66:d2:b3:ad:09:67:51:
d3:0f:ac:36:81:9a:ca:67:29:7d:07:28:6e:2f:f7:89:53:f4:
a1:0a:a7:e2:da:1a:d7:1d:75:08:5f:b0:47:84:71:f4:6f:7a:
a4:6e:f3:d8:f5:6e:2e:9b:77:01:a3:25:26:76:a4:af:bd:88:
7a:5a:c4:18:10:7a:c1:63:30:5b:09:0e:c0:3b:8b:b4:23:c3:
9b:b9:cc:a9:dd:28:fe:41:2c:f9:52:8a:66:26:a4:9a:6b:91:
e1:65:68:1f:d4:88:8a:00:f4:5c:09:d7:46:68:9d:84:14:6f:
20:74:d8:5c:a6:37:6e:ab:84:ac:ce:8f:0c:0a:4e:87:aa:22:
07:8f:eb:6b:3d:06:56:e0:da:cc:a5:76:b0:78:85:d9:dc:98:
a2:14:c9:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:37:47 2026 by rpki-client