This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS203069.roa
File:                     AS203069.roa (raw, json)
Hash identifier:          pgMraKGbfJfszTJavsTBMh3C+cRC67X/oim+ySQ/Pis=
Subject key identifier:   DA:29:B9:6F:48:98:44:3C:0E:66:74:74:9E:5E:41:FE:F4:13:B3:4B
Certificate issuer:       /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial:       2F913D17E82CAF00FDEFD9790946AFBF29514A57
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS203069.roa
Signing time:             Wed 17 Dec 2025 00:48:49 +0000
ROA not before:           Wed 17 Dec 2025 00:43:49 +0000
ROA not after:            Wed 16 Dec 2026 00:48:49 +0000
asID:                     203069
IP address blocks:        2a06:a005:488::/46 maxlen: 48
                          2a06:a005:1b70::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 01:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:91:3d:17:e8:2c:af:00:fd:ef:d9:79:09:46:af:bf:29:51:4a:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
        Validity
            Not Before: Dec 17 00:43:49 2025 GMT
            Not After : Dec 16 00:48:49 2026 GMT
        Subject: CN=DA29B96F4898443C0E6674749E5E41FEF413B34B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:70:15:09:fc:5a:3d:7c:60:d9:24:c1:51:c3:
                    7d:c8:f4:e0:74:e2:1e:84:56:95:f9:89:c8:2f:5a:
                    7c:c9:a1:2f:e1:9a:da:bf:b4:5d:91:cd:c6:45:91:
                    c8:16:62:45:f8:b6:b0:02:25:ef:d4:d9:55:05:91:
                    c3:0b:7b:9b:d3:a8:7c:e1:4e:a9:b4:9f:b0:08:08:
                    df:db:63:20:db:3c:23:be:fa:49:7b:a2:b1:ce:ad:
                    75:57:32:e6:4e:c9:35:a6:59:d7:71:83:85:b8:89:
                    a8:b8:09:12:7f:ad:b2:db:5a:42:8d:f0:a7:8d:88:
                    36:24:39:42:64:bf:41:5a:59:83:27:7b:15:19:08:
                    75:de:28:9b:01:9d:47:be:ec:91:23:96:3d:be:ef:
                    27:2f:92:17:69:81:54:4b:36:1e:2e:4a:f6:98:b6:
                    ec:db:3d:9b:e0:c3:46:92:e1:56:75:8d:2a:40:c8:
                    db:fa:f2:07:11:c6:ec:f1:ba:3d:2c:1f:03:94:47:
                    80:e6:ab:82:34:0f:74:ed:a0:2d:19:5f:79:0f:34:
                    55:47:86:72:0f:4b:01:f0:70:8c:47:5c:6c:dc:24:
                    a3:9e:68:99:a4:0c:84:61:e0:d0:e8:26:c8:76:88:
                    90:e7:b8:d2:0d:9f:94:d0:94:24:47:ab:53:7c:44:
                    e1:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:29:B9:6F:48:98:44:3C:0E:66:74:74:9E:5E:41:FE:F4:13:B3:4B
            X509v3 Authority Key Identifier:
                keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS203069.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:488::/46
                  2a06:a005:1b70::/44

    Signature Algorithm: sha256WithRSAEncryption
         b8:c0:fa:b7:6a:9d:fb:34:d6:f9:66:16:58:7c:30:58:d7:ca:
         94:15:ee:9d:0d:71:5b:71:4a:c9:73:8c:1c:ed:5d:7e:9f:02:
         f6:ac:13:97:f1:f9:9d:fc:2b:30:89:52:96:aa:ff:dc:c8:76:
         f0:26:89:38:dd:77:4d:7c:53:6f:38:a7:30:e5:3c:4c:f0:cf:
         58:d0:90:74:5a:15:c3:88:52:9e:2b:87:eb:4e:7a:d2:5b:72:
         49:3c:53:d9:a4:a7:6c:fa:f6:17:ae:02:f8:3f:02:f6:d7:d7:
         fc:e6:fb:e6:d0:5a:a2:89:18:95:ea:28:93:72:c6:22:3b:df:
         1d:8b:f5:d2:40:96:9a:a6:c3:4d:92:2e:fb:f7:18:84:63:6e:
         67:ac:a1:86:f4:99:b0:4e:8b:5f:2c:ee:76:2d:e0:a9:02:43:
         c2:fd:b1:87:d4:57:29:8d:56:90:de:52:80:bd:ba:d8:c9:62:
         7a:e1:52:cd:9d:67:93:3b:bb:20:8a:d9:08:d4:37:7a:ac:4f:
         d0:64:98:c8:eb:30:a9:7e:19:23:a3:76:f0:25:7d:96:04:70:
         d9:ad:88:f2:45:70:3f:bf:f7:98:99:a5:9e:c9:4c:87:a8:36:
         9e:6a:be:ee:db:ec:1f:3f:0c:be:6e:05:88:d8:b3:a1:21:e1:
         1b:48:a8:ce
-----BEGIN CERTIFICATE-----
MIIE8TCCA9mgAwIBAgIUL5E9F+gsrwD979l5CUavvylRSlcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDE0YjZmY2YyYjJjNjliZTA4NWU5Zjk1OTg3MmRjYmU4
ZWE1NDE3NzAeFw0yNTEyMTcwMDQzNDlaFw0yNjEyMTYwMDQ4NDlaMDMxMTAvBgNV
BAMTKERBMjlCOTZGNDg5ODQ0M0MwRTY2NzQ3NDlFNUU0MUZFRjQxM0IzNEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9cBUJ/Fo9fGDZJMFRw33I9OB0
4h6EVpX5icgvWnzJoS/hmtq/tF2RzcZFkcgWYkX4trACJe/U2VUFkcMLe5vTqHzh
Tqm0n7AICN/bYyDbPCO++kl7orHOrXVXMuZOyTWmWddxg4W4iai4CRJ/rbLbWkKN
8KeNiDYkOUJkv0FaWYMnexUZCHXeKJsBnUe+7JEjlj2+7ycvkhdpgVRLNh4uSvaY
tuzbPZvgw0aS4VZ1jSpAyNv68gcRxuzxuj0sHwOUR4Dmq4I0D3TtoC0ZX3kPNFVH
hnIPSwHwcIxHXGzcJKOeaJmkDIRh4NDoJsh2iJDnuNINn5TQlCRHq1N8ROFRAgMB
AAGjggH7MIIB9zAdBgNVHQ4EFgQU2im5b0iYRDwOZnR0nl5B/vQTs0swHwYDVR0j
BBgwFoAU0Utvzyssab4IXp+VmHLcvo6lQXcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNy9EMTRCNkZDRjJC
MkM2OUJFMDg1RTlGOTU5ODcyRENCRThFQTU0MTc3LmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMFV0dnp5c3NhYjRJWHAtVm1ITGN2bzZsUVhjLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC83L0FT
MjAzMDY5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEH
AQH/BBwwGjAYBAIAAjASAwcCKgagBQSIAwcEKgagBRtwMA0GCSqGSIb3DQEBCwUA
A4IBAQC4wPq3ap37NNb5ZhZYfDBY18qUFe6dDXFbcUrJc4wc7V1+nwL2rBOX8fmd
/CswiVKWqv/cyHbwJok43XdNfFNvOKcw5TxM8M9Y0JB0WhXDiFKeK4frTnrSW3JJ
PFPZpKds+vYXrgL4PwL219f85vvm0FqiiRiV6iiTcsYiO98di/XSQJaapsNNki77
9xiEY25nrKGG9JmwTotfLO52LeCpAkPC/bGH1FcpjVaQ3lKAvbrYyWJ64VLNnWeT
O7sgitkI1Dd6rE/QZJjI6zCpfhkjo3bwJX2WBHDZrYjyRXA/v/eYmaWeyUyHqDae
ar7u2+wfPwy+bgWI2LOhIeEbSKjO
-----END CERTIFICATE-----
Generated at Sat Dec 20 09:31:09 2025 by rpki-client