Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS197569.roa
File: AS197569.roa (raw, json)
Hash identifier: bvWS2z4Mj00LWWFiZEV1OBd6WRQjW/lGk2LWw9onOpI=
Subject key identifier: FF:07:B2:E5:61:D3:38:A1:89:79:46:62:E1:E8:B7:20:EB:E7:F1:06
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 131A926AA80111DAF49393696F99D004C87CBE3F
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS197569.roa
Signing time: Thu 02 Jul 2026 07:32:50 +0000
ROA not before: Thu 02 Jul 2026 07:27:50 +0000
ROA not after: Thu 01 Jul 2027 07:32:50 +0000
asID: 197569
IP address blocks: 167.104.221.0/24 maxlen: 24
185.195.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:1a:92:6a:a8:01:11:da:f4:93:93:69:6f:99:d0:04:c8:7c:be:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jul 2 07:27:50 2026 GMT
Not After : Jul 1 07:32:50 2027 GMT
Subject: CN=FF07B2E561D338A189794662E1E8B720EBE7F106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b3:74:2f:06:34:d2:31:9e:a2:c3:86:cd:b3:
3c:f6:f2:d4:45:00:e4:5a:c6:f4:40:7e:57:ac:71:
6e:99:6e:33:76:33:80:38:54:00:5b:dd:21:c3:50:
d2:f0:11:c5:00:13:07:19:80:08:f0:68:20:68:b8:
62:7c:87:e5:63:96:62:8e:9f:0e:c0:8e:9e:14:72:
7a:3b:07:3a:53:59:f7:f7:e8:38:7f:d1:35:7a:9b:
fc:1b:9d:9a:8d:3f:90:91:7a:64:0f:a9:65:d3:62:
51:95:21:06:22:2a:2a:1b:3e:e5:d4:68:52:a2:55:
11:0a:cc:d0:fb:81:fd:c3:24:3f:4a:5c:95:97:52:
98:79:e2:30:fc:94:c5:62:50:40:c8:b1:64:23:e5:
7b:bb:7d:17:e2:d7:c9:c9:9c:2f:33:b6:cc:08:35:
59:e4:02:ee:24:81:63:f4:b6:83:08:6c:ef:3e:99:
73:84:f3:e1:0f:7a:c7:b4:61:a4:d5:03:22:8a:3f:
4d:28:2b:c6:46:ce:a3:ae:54:88:62:bf:0f:9a:96:
39:74:ac:f7:8c:c2:d7:40:b5:93:bf:17:06:98:86:
46:43:e0:fe:33:2a:24:11:7e:03:fa:7f:d1:9e:e7:
b5:e0:63:6a:57:2b:2f:1c:1b:3e:de:8d:38:78:c2:
9e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:07:B2:E5:61:D3:38:A1:89:79:46:62:E1:E8:B7:20:EB:E7:F1:06
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS197569.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.104.221.0/24
185.195.239.0/24
Signature Algorithm: sha256WithRSAEncryption
89:ea:05:de:13:56:20:61:74:28:9f:0f:40:3a:87:30:c4:4a:
bb:39:57:69:14:05:88:d7:c7:73:66:c1:98:a8:df:65:d5:36:
41:83:88:36:a5:97:43:51:bb:f0:a9:d7:4b:95:43:e2:ca:8c:
03:61:9a:6f:00:f7:da:e6:1e:e3:fc:54:4a:9b:43:ab:80:7f:
ca:6c:de:e9:1d:96:25:f1:19:f3:aa:31:a6:22:39:13:13:dd:
7c:bc:ea:e3:0d:e1:9e:ce:73:fa:d7:d6:57:b4:5b:b8:ea:5d:
87:cd:64:4f:ab:25:54:3e:33:72:b0:72:c4:30:e8:60:e8:3c:
2f:10:b1:18:51:45:d4:7a:93:d8:5e:e0:f7:09:59:c2:73:d5:
6c:ce:17:0a:2d:f9:8f:c2:6c:08:c6:9e:70:43:48:66:f5:0d:
98:23:0f:c5:56:24:fe:4a:1e:fa:ac:70:0d:3b:dd:00:2b:29:
68:f9:d6:b8:94:d2:57:61:89:2a:8c:bf:6a:a5:4d:10:2d:d9:
f1:0a:9a:fe:7e:a2:20:22:95:0f:b4:ca:2c:fa:01:54:3a:ad:
f0:c1:ed:d2:be:98:5b:77:13:4e:90:84:d2:c8:65:1a:02:cc:
e1:c0:0d:57:0d:1f:e3:e1:bc:fb:ae:b4:4e:87:45:1b:6f:7c:
f4:fd:d9:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:17:06 2026 by rpki-client