Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS215464.roa
File: AS215464.roa (raw, json)
Hash identifier: GnsFnzljOTnTwio5PEKbbNARDKI+ljT4IXRJ7ABgAKg=
Subject key identifier: 6F:F1:C9:D6:3C:BA:5A:13:9F:10:84:2C:8C:BC:C4:26:2C:26:F8:DF
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 33EACF00619D836AA134C16D9AE721D5D37D5787
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS215464.roa
Signing time: Fri 06 Mar 2026 04:24:51 +0000
ROA not before: Fri 06 Mar 2026 04:19:51 +0000
ROA not after: Fri 05 Mar 2027 04:24:51 +0000
asID: 215464
IP address blocks: 85.155.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:ea:cf:00:61:9d:83:6a:a1:34:c1:6d:9a:e7:21:d5:d3:7d:57:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Mar 6 04:19:51 2026 GMT
Not After : Mar 5 04:24:51 2027 GMT
Subject: CN=6FF1C9D63CBA5A139F10842C8CBCC4262C26F8DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:86:81:92:40:a6:2f:3e:68:90:09:5e:1d:fe:
1b:da:27:49:9a:e9:bd:70:94:f7:85:80:0d:b6:8b:
0e:f3:76:08:48:df:91:e8:ae:97:fe:f1:3c:4f:1a:
58:45:dc:06:ca:21:b4:68:5f:cf:74:3d:a7:5e:1d:
11:6a:90:97:66:53:86:16:86:d4:20:ad:85:65:ff:
45:c0:da:4c:7f:12:25:9a:a7:ff:29:c6:07:c0:20:
5e:07:eb:f7:cc:5a:08:bc:fa:9f:a9:cd:ba:1c:77:
01:26:52:29:7e:e5:bf:10:43:d7:0f:8a:e9:aa:89:
88:5b:4e:3e:25:c6:a3:1e:90:90:8a:47:ff:82:2c:
2d:c5:f3:3b:60:bb:58:4e:dc:ff:38:9e:56:08:b0:
db:bc:68:0b:3d:24:3c:6d:5c:02:76:31:4f:5d:2a:
59:23:8f:8d:81:bf:8d:be:ef:e9:1f:99:88:d2:e3:
c0:16:a3:2e:18:81:25:74:12:ea:40:f2:38:b0:28:
45:8d:f4:1d:c9:2a:38:7f:d7:76:f7:69:22:9a:3e:
58:b8:20:b5:20:02:f5:4e:63:dc:04:35:bc:ab:fd:
0e:52:fa:80:01:3a:1b:91:af:e1:b6:27:68:01:b4:
e7:4f:78:73:a8:67:00:2a:78:06:fc:eb:45:ff:67:
51:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:F1:C9:D6:3C:BA:5A:13:9F:10:84:2C:8C:BC:C4:26:2C:26:F8:DF
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS215464.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.155.227.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:29:59:55:0a:d6:33:0c:2c:cb:4d:0a:c2:8d:66:47:1e:4d:
cd:8e:5e:a7:79:1d:27:0a:c9:26:92:32:ba:6b:8f:b9:ea:90:
2e:29:9b:6a:ac:da:71:f9:24:e8:bb:f9:b6:aa:26:85:10:ec:
fe:57:26:01:5e:d3:fc:85:4d:0e:da:94:76:52:36:6f:b2:cd:
66:ab:70:a1:0e:46:5a:27:4d:ac:a2:ee:80:4d:0e:45:a6:09:
c8:3e:77:75:92:b3:05:53:70:12:b7:5e:d6:25:59:f5:5a:29:
d1:6e:88:0d:7f:15:b1:76:11:b5:5d:a3:ba:9d:7b:2f:1d:db:
83:62:79:ef:b2:c7:12:e6:ec:ca:00:e8:e4:ce:a7:72:fb:85:
ed:85:36:d8:97:aa:dc:e4:64:a5:51:fb:0b:7b:9e:5e:4a:8b:
65:ff:f2:5b:7d:fe:b4:93:37:b8:68:6f:19:7c:d6:db:fc:7c:
fc:e8:00:6d:32:e8:75:e8:ee:dd:cc:da:94:0e:dd:88:2d:c0:
39:0d:e1:1c:e7:47:49:8d:4a:3e:88:5f:fe:1c:a7:e9:5d:06:
f1:21:3b:f7:2d:65:bb:be:e0:01:13:ab:98:6f:2c:9e:58:2f:
6e:9a:dc:a1:ff:dd:51:c6:f3:31:57:f2:4c:6b:cd:e9:81:76:
58:77:62:0d
-----BEGIN CERTIFICATE-----
MIIE5TCCA82gAwIBAgIUM+rPAGGdg2qhNMFtmuch1dN9V4cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDE0YjZmY2YyYjJjNjliZTA4NWU5Zjk1OTg3MmRjYmU4
ZWE1NDE3NzAeFw0yNjAzMDYwNDE5NTFaFw0yNzAzMDUwNDI0NTFaMDMxMTAvBgNV
BAMTKDZGRjFDOUQ2M0NCQTVBMTM5RjEwODQyQzhDQkNDNDI2MkMyNkY4REYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRhoGSQKYvPmiQCV4d/hvaJ0ma
6b1wlPeFgA22iw7zdghI35Horpf+8TxPGlhF3AbKIbRoX890PadeHRFqkJdmU4YW
htQgrYVl/0XA2kx/EiWap/8pxgfAIF4H6/fMWgi8+p+pzbocdwEmUil+5b8QQ9cP
iumqiYhbTj4lxqMekJCKR/+CLC3F8ztgu1hO3P84nlYIsNu8aAs9JDxtXAJ2MU9d
Klkjj42Bv42+7+kfmYjS48AWoy4YgSV0EupA8jiwKEWN9B3JKjh/13b3aSKaPli4
ILUgAvVOY9wENbyr/Q5S+oABOhuRr+G2J2gBtOdPeHOoZwAqeAb860X/Z1EhAgMB
AAGjggHvMIIB6zAdBgNVHQ4EFgQUb/HJ1jy6WhOfEIQsjLzEJiwm+N8wHwYDVR0j
BBgwFoAU0Utvzyssab4IXp+VmHLcvo6lQXcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNy9EMTRCNkZDRjJC
MkM2OUJFMDg1RTlGOTU5ODcyRENCRThFQTU0MTc3LmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMFV0dnp5c3NhYjRJWHAtVm1ITGN2bzZsUVhjLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC83L0FT
MjE1NDY0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAVZvjMA0GCSqGSIb3DQEBCwUAA4IBAQB7KVlVCtYz
DCzLTQrCjWZHHk3Njl6neR0nCskmkjK6a4+56pAuKZtqrNpx+STou/m2qiaFEOz+
VyYBXtP8hU0O2pR2UjZvss1mq3ChDkZaJ02sou6ATQ5FpgnIPnd1krMFU3ASt17W
JVn1WinRbogNfxWxdhG1XaO6nXsvHduDYnnvsscS5uzKAOjkzqdy+4XthTbYl6rc
5GSlUfsLe55eSotl//Jbff60kze4aG8ZfNbb/Hz86ABtMuh16O7dzNqUDt2ILcA5
DeEc50dJjUo+iF/+HKfpXQbxITv3LWW7vuABE6uYbyyeWC9umtyh/91RxvMxV/JM
a83pgXZYd2IN
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:04:52 2026 by rpki-client