Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS206540.roa
File: AS206540.roa (raw, json)
Hash identifier: FCJQpQsX8RAckDuK3bXzxNcBvy0lt6bzxyzkgfDbpyk=
Subject key identifier: 42:E0:58:48:12:02:7C:6B:BC:86:CA:09:2E:27:D7:81:8A:61:BD:18
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 68B06977DD652DD78E9D41409A57FCBD2B406C68
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS206540.roa
Signing time: Tue 12 May 2026 14:31:26 +0000
ROA not before: Tue 12 May 2026 14:26:26 +0000
ROA not after: Tue 11 May 2027 14:31:26 +0000
asID: 206540
IP address blocks: 167.104.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:b0:69:77:dd:65:2d:d7:8e:9d:41:40:9a:57:fc:bd:2b:40:6c:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: May 12 14:26:26 2026 GMT
Not After : May 11 14:31:26 2027 GMT
Subject: CN=42E0584812027C6BBC86CA092E27D7818A61BD18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:a3:20:68:5c:ff:09:c3:8b:f6:77:c2:7e:4a:
bb:fb:72:f9:03:2b:71:54:5c:cb:19:56:ed:c4:b0:
7f:21:64:24:f1:3a:65:bc:a4:50:12:a8:5a:ca:81:
d9:f7:fc:75:59:54:ef:77:09:3f:21:46:1b:53:40:
27:95:1d:e4:70:17:da:61:6a:e4:10:6a:0a:6d:1d:
18:2e:73:3c:3d:d4:54:1d:2e:3e:24:b5:cb:c4:53:
cf:20:1a:b6:61:68:94:a2:ab:fe:27:91:c6:a9:e3:
04:b7:b2:ab:94:74:de:ae:ed:47:a7:6f:c4:df:a3:
6d:af:85:c4:72:d4:d2:00:23:83:ab:a3:30:e6:09:
bd:d3:bf:fd:e2:13:4b:17:37:d0:69:61:ce:71:a9:
ca:ff:f9:f5:a7:f9:af:b2:5b:1b:53:f1:91:53:9b:
59:ee:a1:0d:e4:2f:5b:74:02:b5:44:b4:02:c9:d3:
da:eb:26:ad:f6:85:3a:6a:c8:62:a6:84:e3:2c:d9:
c2:1c:4d:f0:b2:f2:61:3a:02:c6:30:09:0f:93:8e:
b4:75:c1:89:17:ee:f7:cd:08:28:8c:e9:58:ff:b5:
fe:12:55:24:e6:4c:55:f9:68:89:7e:c1:9d:53:3e:
b9:4c:04:e5:23:d7:fb:d9:89:b5:b3:fc:67:61:4f:
1c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:E0:58:48:12:02:7C:6B:BC:86:CA:09:2E:27:D7:81:8A:61:BD:18
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS206540.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.104.223.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:ca:46:ef:58:9c:de:73:91:5c:55:05:96:d2:de:d4:65:e1:
ce:2e:2c:53:44:61:e3:df:58:ab:d7:25:9b:f5:c6:dd:b0:76:
d5:7c:fa:f2:39:72:0c:7b:bf:9c:19:73:35:93:0b:4b:31:2d:
a9:66:bb:79:1f:c9:b7:e9:7f:16:85:57:43:6e:a2:b5:1a:1b:
46:a8:96:0c:ed:d3:d9:43:6c:3f:c0:b2:ce:5b:f5:b3:97:a9:
f5:75:bf:fb:e8:08:35:4c:88:9f:03:93:2a:0c:d9:be:68:5b:
cf:8e:6f:70:c6:3d:b2:07:db:69:0f:89:6d:c6:58:0b:24:a3:
b5:49:42:22:c2:6b:4f:66:fc:01:fc:c1:af:ba:9a:63:85:9c:
a3:2f:cd:31:fb:a9:ed:8c:0b:f2:a4:69:39:b8:4f:cf:18:9b:
b9:fa:5e:f6:1a:b3:b7:95:dd:d5:9f:85:18:4b:66:b6:b4:54:
40:58:a0:e0:eb:f1:ee:23:d3:e2:02:c2:0a:48:53:f6:e0:46:
01:b7:d0:9d:dc:e4:2a:e7:19:64:50:40:de:44:2e:3e:58:99:
65:4e:6a:b6:9d:bb:6f:eb:0b:94:d7:6d:87:81:c2:3f:40:a3:
2a:88:9b:fd:4f:c1:6a:c4:19:e9:c5:1c:1d:8f:65:84:3a:fb:
19:7a:97:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:35:07 2026 by rpki-client