Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/3138352e33342e332e302f32342d3234203d3e203336323336.roa
File: 3138352e33342e332e302f32342d3234203d3e203336323336.roa (raw, json)
Hash identifier: ALzpcpWFXP9YNfDsJaKgUSMMaAPU04u/tR2W+IHn+tQ=
Subject key identifier: 8C:A0:E5:18:F6:65:33:A8:8E:C2:A8:60:C4:0A:ED:B1:1E:69:16:E3
Certificate issuer: /CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Certificate serial: 77014AD10E2AAA66F00DB9A143C42CEAF7521F4F
Authority key identifier: EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/3138352e33342e332e302f32342d3234203d3e203336323336.roa
Signing time: Thu 25 Jun 2026 19:29:04 +0000
ROA not before: Thu 25 Jun 2026 19:24:04 +0000
ROA not after: Thu 24 Jun 2027 19:29:04 +0000
asID: 36236
IP address blocks: 185.34.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.mft
rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:27:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:01:4a:d1:0e:2a:aa:66:f0:0d:b9:a1:43:c4:2c:ea:f7:52:1f:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Validity
Not Before: Jun 25 19:24:04 2026 GMT
Not After : Jun 24 19:29:04 2027 GMT
Subject: CN=8CA0E518F66533A88EC2A860C40AEDB11E6916E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:58:96:79:a5:58:03:f7:9c:45:9a:7e:f9:9c:
3a:03:3a:15:89:a0:79:bf:b6:c5:4c:91:35:32:7c:
7b:aa:b7:00:94:ae:4d:05:de:d5:04:c5:7d:de:e4:
32:af:09:04:f4:51:35:b7:d9:6d:07:d6:6d:0a:bd:
45:d0:04:d5:ee:ac:9b:66:da:23:7a:bd:25:98:33:
40:bb:b4:bd:80:25:bd:af:49:4a:fc:fe:9a:97:59:
f0:a6:9e:d8:cf:29:11:48:5b:1f:a5:41:f2:a3:8c:
96:71:4f:10:d0:89:2b:e4:d8:b7:dc:ca:c6:c7:6d:
ac:99:18:4c:74:61:b7:e1:25:f5:88:4b:22:36:09:
32:f7:71:f3:e8:93:0e:5c:5d:fd:38:fe:6e:54:86:
00:ac:f8:2d:3f:9b:bd:3d:c8:29:e8:b1:b4:11:01:
dc:70:0d:13:43:fc:f7:ad:0c:ba:05:76:e7:6f:37:
1f:63:51:a3:c7:39:b4:40:48:69:2a:36:56:2d:36:
8b:ff:6c:bf:00:24:52:c1:bf:5d:3a:db:33:8a:29:
50:e5:68:9f:5f:81:51:b0:35:9c:a6:1c:f3:c9:d0:
7d:b3:6e:86:43:25:74:f2:89:1e:e5:38:63:cf:03:
32:fa:2c:40:48:12:82:03:46:1b:c0:d1:aa:04:f9:
bd:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:A0:E5:18:F6:65:33:A8:8E:C2:A8:60:C4:0A:ED:B1:1E:69:16:E3
X509v3 Authority Key Identifier:
keyid:EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/3138352e33342e332e302f32342d3234203d3e203336323336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.34.3.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:25:8d:af:31:09:19:84:33:22:d1:46:33:a2:a7:e7:0a:de:
9a:23:89:a7:eb:34:66:6b:bb:55:0d:21:48:a4:82:2b:42:93:
15:4e:24:7d:11:a9:97:b6:1d:2a:67:b8:59:ae:91:d5:a3:d0:
8f:76:ff:0f:25:f0:8b:cb:6e:75:d3:c5:66:37:a4:cd:bd:f2:
e1:62:3a:2a:99:f0:ce:f3:a5:a4:dc:7a:61:60:9b:b0:fc:c4:
cb:d7:c2:01:2d:44:42:7a:e4:27:2d:04:bc:cc:34:5f:76:c3:
32:b7:02:7a:a3:6f:86:ce:24:ca:eb:e1:64:6a:f7:4e:86:e3:
8e:97:0a:0c:46:7d:5c:73:5c:cb:7b:48:2d:4d:fb:a4:fc:15:
7f:22:4e:8d:58:31:2d:1a:b5:f0:22:91:81:84:56:5c:59:46:
ef:76:0e:ee:7e:fb:96:b2:7f:3c:aa:45:78:15:df:a9:e4:1f:
cf:83:3e:17:a1:33:bd:f9:73:ce:e0:94:3e:37:c9:de:cf:bc:
a3:83:4e:76:68:4e:ef:f2:c9:5a:7f:8f:cd:b3:c7:29:7b:42:
f8:36:f0:12:c5:e1:6c:e8:14:27:48:82:0f:15:96:c1:34:03:
2e:68:15:17:5c:14:1c:16:82:c9:0a:a1:d3:42:d5:bf:ee:cd:
1e:ba:0b:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:23:27 2026 by rpki-client