Route Origin Authorization
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS402970.roa
File: AS402970.roa (raw, json)
Hash identifier: 09aDTwFLGiplGdyk01vex+VsmJAXtAoSy07rz3YNnSw=
Subject key identifier: 1D:3D:B9:76:49:9E:15:93:76:C6:18:31:56:7C:85:82:D7:70:EC:A7
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 7C129F66A3F178031476CE0AAA763DD009A9D0C1
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS402970.roa
Signing time: Mon 21 Sep 2026 10:59:33 +0000
ROA not before: Mon 21 Sep 2026 10:54:33 +0000
ROA not after: Mon 20 Sep 2027 10:59:33 +0000
asID: 402970
IP address blocks: 136.148.76.0/24 maxlen: 24
2a09:54c6::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:12:9f:66:a3:f1:78:03:14:76:ce:0a:aa:76:3d:d0:09:a9:d0:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Sep 21 10:54:33 2026 GMT
Not After : Sep 20 10:59:33 2027 GMT
Subject: CN=1D3DB976499E159376C61831567C8582D770ECA7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:25:54:f4:48:1f:13:31:ca:c1:49:c7:fc:34:
18:ca:62:8b:5e:47:40:92:66:a0:75:5a:7f:31:f8:
58:ec:14:a1:14:ee:c3:20:31:52:3f:67:eb:f8:28:
a5:4d:0d:e6:32:24:53:38:36:34:62:9e:44:69:a8:
61:d4:30:c8:c1:0b:7c:f6:07:99:bf:6b:4e:ba:3e:
a1:ff:98:00:38:6a:e3:c7:2b:fc:41:01:32:72:d1:
47:bb:0e:ae:05:8a:cf:96:7a:c2:c6:41:aa:5c:73:
56:5e:5f:47:a1:e1:1d:cb:e1:61:61:99:61:2f:84:
14:bc:b8:64:03:bb:ab:e4:4c:7f:ee:f6:e0:0e:76:
b3:d8:a7:b1:07:4a:16:b8:28:47:f0:5b:70:f3:2d:
b2:4b:09:d8:54:c2:ba:de:6c:9b:a2:9d:8c:21:f3:
ce:26:48:f6:ee:57:8f:2d:98:8f:44:c8:0e:c9:b3:
a1:3a:6e:19:10:33:85:43:e9:29:57:06:2b:d4:c7:
46:de:fb:d7:f5:c9:4a:5d:85:e9:e2:ac:03:c8:73:
f7:96:77:df:41:2f:89:c4:09:50:40:bd:a4:98:94:
ee:48:2a:26:77:78:1a:7e:32:cb:cc:f8:3c:0b:d8:
59:a0:20:0c:d9:47:60:c3:95:b4:c4:d2:0d:69:7e:
f5:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:3D:B9:76:49:9E:15:93:76:C6:18:31:56:7C:85:82:D7:70:EC:A7
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS402970.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
136.148.76.0/24
IPv6:
2a09:54c6::/32
Signature Algorithm: sha256WithRSAEncryption
64:2a:87:13:bd:e3:e6:b1:0e:6e:0f:b3:f8:82:cb:49:98:40:
9f:87:f1:1e:60:84:e7:d9:65:59:9c:ae:64:35:08:bb:d1:19:
e4:29:7b:94:f7:93:3a:0e:39:00:49:ce:49:32:97:17:f7:1b:
d7:d3:ff:2b:14:03:7d:b3:41:84:ee:30:35:12:bc:18:ae:3e:
3a:21:6b:8d:1f:81:5b:25:a8:f0:51:05:21:41:d0:49:6b:66:
f2:95:29:dd:b2:4e:19:45:93:6d:03:72:78:83:17:fd:3a:dc:
2d:75:91:3d:18:b0:7a:06:16:7b:98:36:30:c4:55:37:3d:80:
62:7b:87:be:ba:66:aa:40:7b:24:c4:18:bc:18:1c:99:79:e0:
c1:a8:ed:4b:2e:35:42:9b:61:ac:e8:f4:5c:80:d0:2e:4f:90:
32:5c:9a:2b:b1:f9:73:01:50:6b:d1:66:54:6b:2e:08:a4:78:
9e:15:69:a8:b6:fa:e5:96:e9:90:fd:3e:b6:e3:52:be:54:d3:
c1:dc:50:f0:ac:6e:f5:3b:98:a9:de:56:75:9b:0c:cd:10:e1:
91:6a:c2:aa:8f:07:24:d3:3d:ab:aa:b0:67:75:eb:55:87:d7:
db:a0:f1:0d:cd:bf:ba:b6:a3:24:5d:06:85:4b:71:04:44:3e:
af:a9:c8:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:34:43 2026 by rpki-client