Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/34352e3135392e39392e302f32342d3234203d3e203336323336.roa
File: 34352e3135392e39392e302f32342d3234203d3e203336323336.roa (raw, json)
Hash identifier: eZKUoeObtMUJosU+RTb/dgJGl9J+PPsF3K6nxyL73ts=
Subject key identifier: 40:0D:B7:1F:7F:17:71:E1:B3:CF:06:7C:16:72:F2:9E:E9:0D:46:66
Certificate issuer: /CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Certificate serial: 2D8BDC9E2DF33C36BF2FFDA397F3B881D5800C5F
Authority key identifier: EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/34352e3135392e39392e302f32342d3234203d3e203336323336.roa
Signing time: Mon 06 Jul 2026 22:29:09 +0000
ROA not before: Mon 06 Jul 2026 22:24:09 +0000
ROA not after: Mon 05 Jul 2027 22:29:09 +0000
asID: 36236
IP address blocks: 45.159.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.mft
rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:27:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:8b:dc:9e:2d:f3:3c:36:bf:2f:fd:a3:97:f3:b8:81:d5:80:0c:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Validity
Not Before: Jul 6 22:24:09 2026 GMT
Not After : Jul 5 22:29:09 2027 GMT
Subject: CN=400DB71F7F1771E1B3CF067C1672F29EE90D4666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7b:5a:ed:77:99:94:d0:8f:0d:fc:ed:d4:78:
00:02:60:f7:88:31:be:67:bf:77:61:48:7d:fa:48:
44:11:65:1e:53:d4:5b:bf:2b:fb:49:02:96:72:5b:
ba:b6:21:a8:85:3e:9c:9a:4e:0a:94:74:75:d1:aa:
62:92:9e:cc:9d:0a:5d:b7:28:6d:b9:99:39:85:0d:
a4:e3:f6:b5:dd:a2:55:55:99:bc:ea:5e:7b:89:c7:
0a:81:30:b2:40:16:ff:a2:05:ec:32:1d:dd:55:a9:
fc:59:f3:76:47:7f:4e:8d:5c:53:11:ea:2e:6b:fb:
ac:66:c4:84:b1:d4:f3:ef:c0:23:b9:0b:56:00:47:
a3:72:e8:5a:bf:fb:7f:58:2e:1b:2c:50:48:d1:5f:
a3:38:b6:9d:e4:9e:32:18:dd:80:55:ad:09:ea:07:
b0:bd:6a:33:49:2b:ac:df:71:00:9d:c2:14:fc:fc:
d5:c0:f1:4c:e1:ae:bf:1b:f2:f4:e3:67:e4:0c:3e:
22:fb:32:bc:9b:60:4e:15:6c:63:3e:e4:55:c9:91:
5d:0b:9d:14:23:c3:d3:9e:66:a2:f4:80:5a:9c:9e:
3c:3f:f9:30:ea:8b:35:3a:0f:7b:51:35:3c:dc:74:
62:d6:69:fc:a1:df:de:12:8b:f2:b3:c0:04:f3:59:
cb:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:0D:B7:1F:7F:17:71:E1:B3:CF:06:7C:16:72:F2:9E:E9:0D:46:66
X509v3 Authority Key Identifier:
keyid:EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/34352e3135392e39392e302f32342d3234203d3e203336323336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.99.0/24
Signature Algorithm: sha256WithRSAEncryption
00:d2:b2:dc:54:8d:d3:aa:15:e4:b9:96:35:18:f5:b7:0d:95:
52:dd:49:1d:61:50:0c:8e:b0:9d:47:e0:e9:2c:6e:77:97:d4:
30:b5:35:ed:bb:d1:91:77:d7:4a:5d:47:bf:05:2c:84:54:11:
da:b9:6d:08:1a:a9:7c:92:c6:fb:de:a4:1b:ea:99:b1:40:29:
ee:a3:e1:11:81:71:9b:2d:75:85:17:24:1f:7d:99:20:9d:24:
37:c4:9c:a7:dd:6c:99:98:e0:64:5b:14:2a:85:7a:ea:73:54:
d4:05:b7:6b:88:f5:a5:41:e5:63:59:b8:f8:bf:e2:e4:a4:6a:
1c:0b:4a:1a:d2:9e:5f:c6:50:98:13:b0:09:f5:80:04:8d:2f:
3f:b8:b0:39:8a:58:18:9d:35:be:06:43:22:fc:7e:31:7a:e3:
a9:03:22:18:e6:9f:e5:b2:3d:84:6a:4c:93:73:cd:2e:4b:ea:
ca:76:8c:1c:b2:10:44:ab:95:b7:ad:33:8e:19:53:8c:c3:18:
a4:d9:ba:1f:e1:5c:6d:1e:3a:fc:65:1e:7c:ed:48:56:17:ef:
11:d4:00:05:26:48:fc:58:a3:1b:f8:65:3b:f2:18:97:5c:86:
af:7d:24:90:55:59:32:7e:41:d8:da:46:32:ec:8d:be:5e:24:
7e:43:37:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:32:48 2026 by rpki-client