Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/3138352e33342e322e302f32332d3233203d3e203336323336.roa
File: 3138352e33342e322e302f32332d3233203d3e203336323336.roa (raw, json)
Hash identifier: dhN+OIIYlBLCy0jix4sXXW+jl2b8A75zyL9VZ56BQc4=
Subject key identifier: 39:5B:6C:94:96:FF:3E:C5:27:E4:D7:23:66:FF:E0:AF:D5:CD:62:F9
Certificate issuer: /CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Certificate serial: 03DAF41DBE6B32F7A61ADF6804FFF26DD0B5D333
Authority key identifier: EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/3138352e33342e322e302f32332d3233203d3e203336323336.roa
Signing time: Thu 25 Jun 2026 19:29:04 +0000
ROA not before: Thu 25 Jun 2026 19:24:04 +0000
ROA not after: Thu 24 Jun 2027 19:29:04 +0000
asID: 36236
IP address blocks: 185.34.2.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.mft
rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:58:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:da:f4:1d:be:6b:32:f7:a6:1a:df:68:04:ff:f2:6d:d0:b5:d3:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Validity
Not Before: Jun 25 19:24:04 2026 GMT
Not After : Jun 24 19:29:04 2027 GMT
Subject: CN=395B6C9496FF3EC527E4D72366FFE0AFD5CD62F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:30:7a:35:01:3d:06:1a:99:10:fa:53:0c:00:
ca:6d:4f:cb:78:33:d4:a4:96:19:ca:b2:c3:6c:1d:
f3:57:c2:69:29:cd:77:46:c5:f0:93:bd:76:b8:7e:
b6:34:87:51:9e:1d:6d:69:c3:be:ca:84:a7:3b:a0:
78:b5:2c:c9:22:12:c4:92:a2:24:14:b6:98:47:78:
2b:dd:07:c2:a0:80:fd:27:fe:60:17:db:63:2c:6d:
85:cb:10:ff:44:90:7f:7d:0c:89:cb:45:8b:9d:0e:
a1:e0:05:32:70:f2:16:ef:0d:0d:1a:df:5e:df:04:
6f:3e:f8:d9:92:94:d3:a0:2b:c1:57:d4:b8:6e:b8:
21:2f:31:f7:b4:ce:74:df:c6:5c:c7:fe:56:18:c0:
2d:a9:a3:b3:be:f7:5d:39:3a:9e:8b:0d:1b:e2:33:
22:d3:48:01:c9:41:1f:77:e1:b5:8b:5b:6a:00:81:
9c:c1:8f:f3:b6:7e:24:04:b6:e8:7f:d8:eb:c1:45:
c9:a4:88:6d:56:e8:a4:f9:6d:45:7e:6f:05:30:3f:
51:cd:a1:94:25:9f:5c:46:36:35:56:c1:ce:1d:e3:
40:43:24:84:a2:6d:00:99:b5:4f:83:ba:15:b5:d9:
47:d0:af:c1:a1:a8:2b:c8:5a:97:ec:e6:1d:d9:e2:
4d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:5B:6C:94:96:FF:3E:C5:27:E4:D7:23:66:FF:E0:AF:D5:CD:62:F9
X509v3 Authority Key Identifier:
keyid:EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/3138352e33342e322e302f32332d3233203d3e203336323336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.34.2.0/23
Signature Algorithm: sha256WithRSAEncryption
39:a4:69:d1:c6:89:d6:02:94:cc:4b:b0:e6:97:37:cc:b1:05:
74:ed:65:5c:6e:ef:04:e9:8f:7a:41:76:1e:9f:41:7e:3b:6b:
df:8c:a5:05:4d:a8:62:7b:59:ca:b7:63:c3:0c:ae:f4:d1:bb:
7e:35:79:38:cd:c4:3f:67:63:f5:3b:43:39:39:ca:6f:de:60:
d5:f0:05:51:bc:c7:fd:68:2a:b3:3e:86:6b:9b:96:53:1c:4e:
61:35:b0:95:23:65:c7:37:21:78:1b:c7:dd:cd:22:2d:f2:b0:
d9:1d:03:1d:dc:7c:58:4a:29:f1:7a:25:96:b0:06:d5:47:e9:
ca:1a:32:0a:0c:89:ea:60:84:b4:e3:34:df:f2:40:11:a5:dd:
b4:1a:85:b2:54:65:9a:c3:27:e3:b7:88:f9:2a:22:eb:df:1b:
fb:cd:6d:12:9a:84:c8:c4:18:7a:2a:ef:cc:be:46:ee:cb:f8:
d9:43:45:b1:82:ec:d7:80:74:6b:84:96:1c:ac:5f:a3:39:01:
33:09:72:0e:f8:dc:a4:d4:2b:25:38:9d:cf:a3:00:aa:0f:bf:
98:58:9b:9b:af:78:21:a5:d1:65:61:2b:05:ac:22:46:20:cc:
dc:f7:15:d2:fe:a5:51:32:4a:c2:6c:e7:ac:cc:ec:b2:ca:57:
33:de:e9:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:57:50 2026 by rpki-client