Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS198125.roa
File: AS198125.roa (raw, json)
Hash identifier: +6Af5pPwxKDFF4IGz3iO7o/xLvujqSvYwZj/TnF+8AE=
Subject key identifier: 53:65:D0:61:F1:2B:D0:81:40:63:03:36:25:F8:84:4D:D2:FA:D7:32
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 2B17338A2EF222A1FB4CF636F2DBAEF9E8E81C7D
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS198125.roa
Signing time: Fri 17 Jul 2026 07:40:35 +0000
ROA not before: Fri 17 Jul 2026 07:35:35 +0000
ROA not after: Fri 16 Jul 2027 07:40:35 +0000
asID: 198125
IP address blocks: 27.0.233.0/24 maxlen: 24
85.155.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:17:33:8a:2e:f2:22:a1:fb:4c:f6:36:f2:db:ae:f9:e8:e8:1c:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jul 17 07:35:35 2026 GMT
Not After : Jul 16 07:40:35 2027 GMT
Subject: CN=5365D061F12BD0814063033625F8844DD2FAD732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:17:f3:c4:13:f0:01:37:bf:bc:1d:85:3c:9d:
a4:15:51:3b:98:93:b0:32:95:95:09:96:e1:2c:d8:
7c:9d:aa:9f:43:f9:2c:32:e7:66:18:94:4a:c2:eb:
a4:ed:d9:ac:54:f9:6e:0e:e3:7e:f9:4f:d6:0d:a7:
30:b1:01:3f:e9:01:23:03:c3:4b:5e:da:aa:1f:6f:
6e:bb:9f:c1:4d:a3:dc:84:35:78:d0:06:da:ee:18:
1a:81:53:8e:a6:e0:b9:c3:ec:09:40:31:6d:53:fd:
22:03:01:63:61:90:d1:67:41:b5:87:59:65:be:e3:
60:4f:4f:ca:a7:14:d7:3b:17:d7:8e:1f:06:32:7c:
17:b4:ac:71:bc:13:4b:1f:f9:75:5b:4f:85:d9:bd:
b5:43:12:ac:86:73:9e:07:78:0e:30:3e:fe:c6:4a:
aa:75:4e:75:4e:74:b0:71:67:a2:fe:bd:ae:1b:c5:
30:7b:ab:1c:5c:78:48:3b:17:68:35:9f:b0:a9:03:
f5:1f:66:65:19:ce:c7:4e:b5:53:81:11:6b:13:81:
fd:59:1e:56:f1:d8:a6:58:96:2b:72:5c:eb:c8:83:
bd:d3:b2:83:9f:af:41:05:94:76:b0:79:ca:23:fb:
b8:da:df:7e:32:1d:c5:9f:63:84:18:52:bb:ba:a5:
43:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:65:D0:61:F1:2B:D0:81:40:63:03:36:25:F8:84:4D:D2:FA:D7:32
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS198125.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.0.233.0/24
85.155.150.0/24
Signature Algorithm: sha256WithRSAEncryption
90:e2:1f:85:7d:c7:b3:95:30:63:b6:59:73:80:36:e4:48:85:
49:ce:e9:c8:35:c5:ff:0d:5a:a7:20:af:a8:d6:74:3a:5d:91:
9e:29:bb:db:f0:8c:d7:8f:bb:42:12:c9:3b:cf:70:89:19:00:
d2:57:28:f7:38:8a:f3:5b:a9:50:ea:a8:f2:65:be:12:76:fe:
87:6c:f3:fa:f7:d2:a5:8c:8e:36:4f:39:07:b5:91:56:8f:fb:
b0:4a:90:49:47:6c:d6:8a:d5:48:f5:43:01:98:64:d8:6a:2c:
1c:08:88:1b:0e:b6:91:c0:b4:28:d4:89:8b:5e:2a:a7:fd:ee:
73:b4:13:23:d7:7d:4e:0e:75:37:a7:15:1d:87:86:5d:ba:bd:
32:c8:90:c1:21:dd:68:f1:a5:a2:12:8f:a0:4b:bd:08:5f:48:
ea:93:48:62:2b:39:27:df:6e:b5:70:9e:33:82:4f:27:cf:8d:
b3:e8:f5:bd:f7:fa:da:8b:ac:40:3b:54:05:92:9e:37:04:9a:
29:d3:b5:32:4a:c9:b0:cd:10:a9:d7:6a:ed:95:4e:26:c7:a0:
89:cf:8a:31:c1:2e:1d:a0:94:2b:7b:d9:38:84:ad:6e:b9:46:
0d:2b:be:66:b2:74:2c:80:01:8e:b9:1c:e7:3e:f1:b1:e4:6d:
2c:f3:56:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:20:06 2026 by rpki-client