Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS215039.roa
File: AS215039.roa (raw, json)
Hash identifier: 7SrA7ORWXPCa+jXk6snBdAVGLqtCk/KnSj5ZH4JQdFI=
Subject key identifier: 1E:D8:29:5F:DD:A4:A2:83:CC:DE:50:05:42:B1:C6:47:21:EF:B5:FA
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 28B7960956D0CC3EFEAB59E58625B3F48DF85006
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS215039.roa
Signing time: Fri 26 Jun 2026 21:58:55 +0000
ROA not before: Fri 26 Jun 2026 21:53:55 +0000
ROA not after: Fri 25 Jun 2027 21:58:55 +0000
asID: 215039
IP address blocks: 144.48.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:b7:96:09:56:d0:cc:3e:fe:ab:59:e5:86:25:b3:f4:8d:f8:50:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Jun 26 21:53:55 2026 GMT
Not After : Jun 25 21:58:55 2027 GMT
Subject: CN=1ED8295FDDA4A283CCDE500542B1C64721EFB5FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ad:f4:b0:df:c6:d5:d7:e3:b2:6d:99:74:0e:
de:72:61:3d:33:f9:61:3c:bc:61:b4:e7:a6:dc:d2:
a4:27:e7:42:b5:5f:89:4e:ee:71:5f:35:07:96:da:
92:e0:7b:97:3b:e8:f0:65:49:75:3e:0c:cc:8c:6a:
fd:1b:ee:6e:a9:d7:af:f9:98:93:30:f9:d8:f4:3e:
92:6d:8d:b3:09:c4:b1:7c:12:19:70:30:c4:95:94:
82:10:0d:fb:5d:a7:c4:02:61:af:27:70:5d:50:c0:
17:4e:67:6f:ba:5e:b4:e7:dd:8d:9f:f8:7b:bd:6b:
ad:1e:61:90:9a:fe:5e:9c:30:e1:fa:a9:ea:e3:b8:
d8:25:ee:d3:bf:2c:35:69:58:11:42:75:8d:88:bf:
36:0c:0b:97:66:70:b0:ee:93:1e:09:f8:1a:74:56:
bd:ba:ec:af:1d:9a:ce:a3:ee:1a:97:f9:fc:a3:5a:
ca:ba:62:7f:d2:d9:50:9c:e8:b1:b5:d7:9d:97:dd:
f5:77:20:42:f9:cb:ff:27:b7:07:b8:7f:68:d8:ef:
7e:5b:c4:a9:4d:88:f1:68:6c:d1:ea:29:2b:6c:eb:
d9:e8:b8:68:55:8b:28:2c:53:b7:0e:e8:e5:ff:a6:
cb:dd:ce:6b:65:4d:a6:8a:7d:eb:ee:44:1d:87:8b:
68:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:D8:29:5F:DD:A4:A2:83:CC:DE:50:05:42:B1:C6:47:21:EF:B5:FA
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS215039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.48.83.0/24
Signature Algorithm: sha256WithRSAEncryption
91:cb:93:cf:5e:ad:a5:c9:71:ed:13:9a:4a:2a:5e:01:aa:2a:
7d:c6:9a:d4:1e:ee:9f:03:1b:02:e0:87:1f:01:61:8a:6f:ba:
6e:ad:6c:c3:65:5e:d5:e7:e3:d1:23:98:c8:a3:85:5a:0a:58:
c0:b5:74:2f:60:63:60:1d:38:1b:30:43:23:dd:df:13:9d:af:
4e:cb:da:6a:26:0c:e5:57:e2:98:3e:0e:c3:e4:f5:40:49:88:
49:c2:03:f9:c3:a2:f4:9c:06:e8:c3:8a:ba:d1:11:41:72:cf:
b4:d9:c4:8f:0b:ad:67:11:69:29:5a:a7:b4:6b:a3:73:15:81:
47:2c:1c:f4:0e:6b:d4:d3:8b:6f:de:99:fb:12:64:e6:2c:e8:
45:1e:1f:c3:e7:52:3e:e9:91:be:f0:93:b4:b4:2d:c4:d4:af:
74:2c:ab:c4:03:85:7b:ed:e8:6a:dd:d6:67:ab:99:66:2c:0f:
0a:af:75:5a:33:79:df:96:bb:ea:e5:5b:06:30:90:7a:4a:a0:
e1:64:9c:3f:5f:ea:39:07:5b:f5:ac:67:87:c8:fe:9d:64:a7:
8f:82:88:10:1c:9e:96:ca:96:50:ec:87:14:1a:f2:70:09:ae:
37:9b:9f:62:19:ab:b5:4b:71:fc:8a:60:9b:3c:74:c4:b0:38:
8c:0a:ff:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:19:37 2026 by rpki-client