Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/3138352e34302e3233332e302f32342d3234203d3e203336323336.roa
File: 3138352e34302e3233332e302f32342d3234203d3e203336323336.roa (raw, json)
Hash identifier: Ayy/RRfqN9PiTg4TZWbtTMDa7AT0+8O39MqlMYXhOQU=
Subject key identifier: 60:2B:BD:2D:4F:F9:23:22:29:A4:91:5E:3B:C1:26:49:DD:1C:B0:4F
Certificate issuer: /CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Certificate serial: 4241D0FE7A576313697360BEF328F21C3D7D221A
Authority key identifier: EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/3138352e34302e3233332e302f32342d3234203d3e203336323336.roa
Signing time: Mon 06 Jul 2026 22:29:09 +0000
ROA not before: Mon 06 Jul 2026 22:24:09 +0000
ROA not after: Mon 05 Jul 2027 22:29:09 +0000
asID: 36236
IP address blocks: 185.40.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.mft
rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:58:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:41:d0:fe:7a:57:63:13:69:73:60:be:f3:28:f2:1c:3d:7d:22:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Validity
Not Before: Jul 6 22:24:09 2026 GMT
Not After : Jul 5 22:29:09 2027 GMT
Subject: CN=602BBD2D4FF9232229A4915E3BC12649DD1CB04F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d0:8d:c6:96:45:95:e9:af:45:b0:8d:02:30:
d6:7d:32:ac:e7:ca:8c:16:17:7f:4f:ee:05:15:8c:
91:b6:a0:df:84:5f:0b:61:e2:5d:20:f2:7e:1a:00:
ca:32:e4:dd:85:65:7c:a2:e7:88:93:35:98:f9:da:
b3:90:66:8d:90:a1:5b:bd:39:61:b8:8f:f2:2f:bf:
54:38:28:40:46:6c:93:a4:78:99:5b:f9:b4:6d:7a:
c5:59:dc:d4:6a:8d:61:73:80:2b:07:47:24:16:41:
c1:56:d9:3b:cc:bc:32:97:3c:73:d1:3c:96:88:28:
bf:e2:b0:8b:cf:c3:c0:5a:80:c2:5b:2b:53:d4:3d:
a3:11:ba:91:67:24:f0:de:96:63:af:6c:66:e5:06:
a4:5f:64:42:f6:14:40:cc:88:a9:71:e4:b4:d0:98:
9e:9c:4f:22:e2:6e:aa:9e:45:d0:ba:72:f5:6e:c6:
05:7d:2a:9c:af:ce:ba:11:26:e1:5a:8f:2b:09:13:
b4:d2:02:fc:f7:a7:a5:48:8a:a3:88:e7:48:08:21:
12:45:e9:c7:f1:45:53:48:2b:65:68:96:21:ef:22:
d7:bf:df:3c:27:84:c1:05:ff:78:db:0f:20:7a:9e:
d0:32:ab:47:5c:fe:55:d1:04:b4:05:9c:23:50:18:
f9:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:2B:BD:2D:4F:F9:23:22:29:A4:91:5E:3B:C1:26:49:DD:1C:B0:4F
X509v3 Authority Key Identifier:
keyid:EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/3138352e34302e3233332e302f32342d3234203d3e203336323336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.40.233.0/24
Signature Algorithm: sha256WithRSAEncryption
05:2a:3c:61:95:24:c1:2b:5a:8f:83:5f:a6:ba:6a:35:79:c5:
21:4e:62:09:03:3b:2d:24:c1:30:ef:3c:85:6c:be:36:f5:94:
8c:c3:e2:d3:ab:de:67:b1:7f:18:bc:3d:da:0b:ef:4e:69:9f:
32:31:ec:11:21:c2:ff:77:85:10:27:88:4c:fe:38:26:f1:e2:
e0:bb:25:4b:df:e0:9a:5d:e8:83:06:df:d5:36:df:a8:22:a6:
73:39:38:ea:79:08:86:07:eb:48:be:e4:e8:cb:ba:ce:57:f0:
ca:4d:5a:39:95:91:a6:71:a0:a8:50:27:9e:2e:61:10:27:7a:
ec:82:ba:ca:c1:8a:62:f9:e9:fa:b4:fa:cf:c3:dd:f5:fd:de:
a0:c7:42:b2:01:a5:0f:28:fb:db:92:3a:bc:56:fe:1b:83:2b:
b2:10:ae:19:1e:76:5b:2f:53:ab:07:9f:04:74:b2:27:19:ca:
ab:f6:c4:77:0b:50:75:0d:39:52:83:e4:21:45:91:1d:68:18:
96:84:f8:69:bd:48:ed:34:8e:74:f6:5a:c6:b9:cd:64:05:42:
ac:b2:e6:f4:af:60:c4:06:22:46:ac:67:37:c2:4c:83:3f:ac:
ee:53:0c:04:49:1d:88:b2:e1:e4:6a:0c:ca:10:1a:21:d4:8e:
b4:ca:8f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:05:27 2026 by rpki-client