Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/3138352e34302e3233352e302f32342d3234203d3e203336323336.roa
File: 3138352e34302e3233352e302f32342d3234203d3e203336323336.roa (raw, json)
Hash identifier: SLJPE0M60koqneBd0csCM09ewjJFjVCsCGj/kvuh4ro=
Subject key identifier: A2:93:8E:AE:F3:3B:27:09:C7:67:F6:6F:0B:4C:AC:B0:6F:D8:58:C7
Certificate issuer: /CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Certificate serial: 5D54E1F16B64C68EDE29A4ECC8AB5ECD5D44C2D3
Authority key identifier: EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/3138352e34302e3233352e302f32342d3234203d3e203336323336.roa
Signing time: Mon 06 Jul 2026 22:29:09 +0000
ROA not before: Mon 06 Jul 2026 22:24:09 +0000
ROA not after: Mon 05 Jul 2027 22:29:09 +0000
asID: 36236
IP address blocks: 185.40.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.mft
rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:27:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:54:e1:f1:6b:64:c6:8e:de:29:a4:ec:c8:ab:5e:cd:5d:44:c2:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Validity
Not Before: Jul 6 22:24:09 2026 GMT
Not After : Jul 5 22:29:09 2027 GMT
Subject: CN=A2938EAEF33B2709C767F66F0B4CACB06FD858C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1c:f2:30:b2:da:c8:1b:01:ad:2e:e6:0d:bc:
27:65:80:59:b2:c1:2c:3b:1b:d5:14:dc:71:3c:cf:
61:ca:d0:ff:75:27:4d:14:9a:54:ba:2b:55:85:81:
1e:f3:06:d1:8f:bd:42:ac:e2:a0:30:30:60:ff:ae:
af:95:fe:9e:d3:0d:c0:dc:79:0f:b8:a1:31:74:b3:
e4:ae:50:42:a1:88:8f:34:6d:27:b8:62:16:27:c7:
d4:e9:e9:b7:f1:5c:17:fe:7d:d7:94:da:08:38:4b:
62:35:da:ef:78:ee:c7:45:5d:ba:34:28:fa:eb:03:
91:0a:df:48:69:c2:29:d9:43:db:d8:99:dd:55:a1:
35:9c:20:de:a3:91:92:32:d6:37:dc:22:af:00:4a:
de:64:c5:fb:6e:d3:2b:e4:34:c4:b1:fb:c2:99:20:
f1:83:1a:68:3e:d5:f8:83:21:a0:00:bc:b1:ef:9f:
c8:e6:35:4c:d8:6b:b0:83:31:ab:ab:37:21:82:e2:
52:41:66:df:92:2a:38:e3:b9:7f:ef:30:b6:23:7f:
fa:ca:08:3b:b0:f4:58:10:80:d8:68:98:7a:54:32:
05:ba:76:ca:5b:31:1c:46:5b:cf:19:17:1e:8d:ea:
6e:d0:da:54:6b:78:05:8b:ed:d6:0d:d5:5c:9d:01:
da:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:93:8E:AE:F3:3B:27:09:C7:67:F6:6F:0B:4C:AC:B0:6F:D8:58:C7
X509v3 Authority Key Identifier:
keyid:EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/3138352e34302e3233352e302f32342d3234203d3e203336323336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.40.235.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:8b:f7:20:16:db:4c:b9:d4:61:dd:02:f5:c9:07:ff:38:2f:
ec:0f:e8:0b:4d:e0:5d:96:52:9d:f9:13:89:00:11:d1:c5:3b:
16:9e:0a:32:58:82:73:92:04:8d:3a:80:c9:0e:b7:d2:1a:7f:
af:ee:4b:71:a6:c5:f5:2d:50:b1:d3:8e:c0:9c:3b:df:58:4f:
dd:2d:3d:6e:51:4e:99:33:fb:16:47:c8:23:c9:fd:c1:6f:35:
33:81:8d:1c:e3:54:a5:ce:15:94:20:d8:25:fc:4b:09:b6:63:
d9:d9:18:f3:1c:8b:7c:42:fe:58:34:33:a5:60:9e:68:74:74:
e5:07:50:b9:5c:a6:51:13:e0:2c:3d:80:3b:9c:48:e1:f1:60:
0b:21:c8:f3:2b:cd:08:2c:f6:86:01:1d:db:fb:33:4a:dc:c5:
ec:d1:18:bc:9c:04:11:cb:45:31:dc:a2:06:06:8a:99:a6:86:
61:a6:5f:25:0b:ad:c6:60:ce:6c:c5:a3:59:8c:f2:bc:70:e7:
c9:19:3a:f4:d8:91:a8:02:47:a7:d7:05:ef:f6:2b:36:ed:a6:
1d:67:13:4d:f9:15:01:af:ed:13:64:06:48:a0:96:00:cd:ab:
44:9a:a1:ec:e2:91:ee:4f:83:2b:15:69:43:64:06:5b:10:64:
6a:3a:9f:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:19:54 2026 by rpki-client