Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/3138352e34302e3233342e302f32342d3234203d3e203336323336.roa
File: 3138352e34302e3233342e302f32342d3234203d3e203336323336.roa (raw, json)
Hash identifier: 5scbYBYsgYAAKyQp9BfftHDrEcyC2aRtfy12QaJ8JyI=
Subject key identifier: 4B:C5:61:24:06:46:81:3C:C6:A0:CC:2A:FB:0C:3B:7D:02:FD:E7:FC
Certificate issuer: /CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Certificate serial: 22FC4826AE075F27E53D3EA5CCF4630E4C09159D
Authority key identifier: EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/3138352e34302e3233342e302f32342d3234203d3e203336323336.roa
Signing time: Mon 06 Jul 2026 22:29:09 +0000
ROA not before: Mon 06 Jul 2026 22:24:09 +0000
ROA not after: Mon 05 Jul 2027 22:29:09 +0000
asID: 36236
IP address blocks: 185.40.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.mft
rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:27:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:fc:48:26:ae:07:5f:27:e5:3d:3e:a5:cc:f4:63:0e:4c:09:15:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Validity
Not Before: Jul 6 22:24:09 2026 GMT
Not After : Jul 5 22:29:09 2027 GMT
Subject: CN=4BC561240646813CC6A0CC2AFB0C3B7D02FDE7FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b6:12:b4:13:a5:17:c9:9b:21:f3:fc:a6:b0:
d6:b9:20:fd:54:e3:01:ac:6f:c4:2e:e8:ac:79:22:
b5:9c:af:4a:f2:db:45:86:9b:00:17:84:71:de:e2:
31:c6:cd:07:3a:d2:42:bc:35:09:52:c6:e3:af:42:
b8:8a:7f:a1:69:01:fa:84:30:e9:14:2c:2f:37:ed:
29:5c:73:da:6e:2b:e2:51:ba:b1:1e:32:e0:21:41:
2b:cd:9f:21:a2:81:f7:9a:2a:a1:78:22:f1:d4:15:
7d:4c:b3:78:85:c7:3f:0c:97:20:b1:4f:c8:35:fa:
f4:9d:80:7d:e8:22:b6:56:c9:b6:8b:15:38:1c:3b:
b6:1d:9f:59:05:23:ea:54:93:5f:1b:29:07:0c:10:
9c:a2:a8:49:74:5f:08:fa:02:8b:94:c6:7b:0e:f4:
1e:09:04:f7:b7:e0:21:4c:c1:0b:a4:45:ad:c0:80:
d9:f4:4c:10:f4:cc:a5:62:1a:81:e7:9d:9e:ec:ff:
31:fa:24:61:a7:df:6a:95:02:78:58:34:ec:d4:bb:
9f:a2:2d:3c:24:34:b0:24:de:e7:83:ad:b1:92:1f:
71:0f:ef:77:da:d1:1e:94:a8:d7:8c:ff:9b:99:29:
4e:05:f0:99:6f:18:e9:50:0d:8e:ef:54:13:34:cc:
c8:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:C5:61:24:06:46:81:3C:C6:A0:CC:2A:FB:0C:3B:7D:02:FD:E7:FC
X509v3 Authority Key Identifier:
keyid:EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/3138352e34302e3233342e302f32342d3234203d3e203336323336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.40.234.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:fd:8c:a0:10:25:b3:92:2b:be:29:96:1e:ff:5b:c3:89:fe:
3a:c9:12:b8:06:3f:e6:64:98:5a:bb:f1:b8:d2:24:4b:7b:c3:
77:70:3e:6d:35:20:b1:de:44:a7:dc:2d:94:b9:92:68:8b:a3:
69:5e:4d:34:ac:9a:eb:a3:91:a7:cc:20:b5:51:cc:0a:78:9a:
fa:ad:1c:50:e5:a5:3e:a6:76:84:d8:a4:5e:05:05:e1:31:62:
97:b5:95:5e:51:b4:9c:39:3c:21:db:c8:26:b7:d9:04:8d:a4:
ad:60:e4:b9:cc:65:90:d6:26:5a:de:e7:20:f6:0f:fb:e5:dd:
08:0b:76:30:2f:1e:1c:2f:91:51:0c:91:13:59:eb:00:d4:b3:
dc:3a:09:bd:74:d0:a5:d9:5e:18:dd:e2:42:66:20:f2:d3:8d:
b4:cb:8d:4c:59:70:1e:a7:a3:e1:93:68:cd:95:69:bb:2a:4e:
09:d1:90:51:63:6f:9b:96:36:76:ef:94:1d:34:ff:f3:7f:c7:
8c:d9:8d:7f:67:ee:80:ea:59:af:d7:24:39:d4:80:ab:0a:2f:
23:ae:d9:5f:5f:dd:df:14:c2:a0:cf:73:55:35:68:63:d2:36:
e8:40:5a:af:84:2d:cd:1d:14:08:d1:df:0f:45:bb:1d:b6:0a:
e5:13:e9:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:23:12 2026 by rpki-client