Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/34352e3135392e39362e302f32332d3233203d3e203336323336.roa
File: 34352e3135392e39362e302f32332d3233203d3e203336323336.roa (raw, json)
Hash identifier: +MZnqbSq9nHtKkU67zMNtHirIcNmEKFyOZQDBLji+jc=
Subject key identifier: FD:8F:7A:F5:42:99:B4:7A:6D:FD:09:15:1A:16:5D:01:B6:29:7B:7A
Certificate issuer: /CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Certificate serial: 69EEDF5E07A76754BF2626ADEED5882C3201C941
Authority key identifier: EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/34352e3135392e39362e302f32332d3233203d3e203336323336.roa
Signing time: Mon 06 Jul 2026 22:29:09 +0000
ROA not before: Mon 06 Jul 2026 22:24:09 +0000
ROA not after: Mon 05 Jul 2027 22:29:09 +0000
asID: 36236
IP address blocks: 45.159.96.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.mft
rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:27:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:ee:df:5e:07:a7:67:54:bf:26:26:ad:ee:d5:88:2c:32:01:c9:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Validity
Not Before: Jul 6 22:24:09 2026 GMT
Not After : Jul 5 22:29:09 2027 GMT
Subject: CN=FD8F7AF54299B47A6DFD09151A165D01B6297B7A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a0:7b:2f:2a:e0:4c:48:95:2c:cc:42:87:a1:
71:c2:d7:d7:95:28:93:e2:90:55:23:9e:c2:31:13:
41:bd:f6:ec:de:85:17:4d:45:5e:97:ef:97:ed:c9:
6a:f8:33:c3:68:7d:99:9c:a2:c7:a3:1d:3c:2a:33:
78:34:58:60:8b:da:13:c4:cb:ff:3c:cd:31:d3:c4:
c0:93:a4:3f:d1:25:f9:f8:43:7d:25:09:b4:b0:e1:
15:64:75:cb:ba:ff:6c:76:24:90:3c:37:8f:60:cf:
c4:d3:f4:f2:cc:ec:7e:b0:20:2f:06:1f:c6:8e:f2:
15:ee:e5:61:06:99:c8:49:ab:af:73:20:c3:99:81:
f0:96:9a:b2:cc:34:c2:f7:6b:cc:eb:c2:21:cd:03:
e2:2d:1d:ea:c4:8a:84:76:aa:4f:75:16:3c:14:64:
e8:4f:f9:5a:45:5e:ff:e6:63:83:24:99:8b:1d:91:
ea:1c:07:e6:6d:be:32:2e:da:30:a9:78:2e:c8:ce:
be:86:e6:a6:9c:4c:20:c8:5e:06:d8:6a:45:7a:84:
73:7d:16:d4:8a:af:15:8f:3b:95:90:c7:26:bf:b0:
85:f1:df:a1:ac:5c:0d:d4:fe:c7:1a:fa:9c:3a:11:
48:13:6d:84:ec:f6:24:dd:31:20:ef:bf:62:22:77:
ff:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:8F:7A:F5:42:99:B4:7A:6D:FD:09:15:1A:16:5D:01:B6:29:7B:7A
X509v3 Authority Key Identifier:
keyid:EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/34352e3135392e39362e302f32332d3233203d3e203336323336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.96.0/23
Signature Algorithm: sha256WithRSAEncryption
14:01:ec:9f:59:29:01:c7:60:af:44:50:65:00:0c:cb:bc:39:
9d:cf:bd:6c:2c:1a:e0:b0:b0:1d:fc:55:c5:30:33:4f:98:16:
73:f9:14:83:38:e6:b2:3e:6f:2b:d6:1d:63:f0:2d:9e:fb:f0:
01:b5:29:53:44:17:f6:7f:20:87:6b:ae:49:73:67:7a:a7:ed:
e3:63:91:4e:57:1c:93:3f:fb:12:d3:53:61:3f:2b:d8:5f:02:
45:97:d4:a7:b7:05:1b:89:a6:41:04:31:b7:77:c5:00:0d:ea:
85:77:ae:6e:1e:11:4a:6f:48:a3:54:73:df:33:93:8f:b3:67:
3a:a1:c9:42:8c:46:3c:2b:57:fa:31:3c:6f:4a:97:49:51:63:
16:39:06:c3:92:3d:bd:6f:8b:d3:d7:20:76:3c:96:79:f2:48:
81:10:5e:23:87:e4:e1:11:3a:e1:74:1c:7a:ca:78:0e:44:ea:
b6:03:7e:b5:9c:40:27:16:8f:9a:ea:5f:e3:53:a3:14:ee:5d:
ee:89:f6:9e:c9:16:e5:d9:d2:2d:02:e0:f8:8f:c9:fd:fb:fd:
66:8a:f7:42:0f:8e:33:05:93:f5:a1:64:8a:bd:9b:2f:a8:87:
c1:0c:e7:59:ed:75:24:ef:1c:d1:92:92:15:a2:6d:f6:b4:6c:
f9:87:5b:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:28:04 2026 by rpki-client