This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS205398.roa
File:                     AS205398.roa (raw, json)
Hash identifier:          qM4Y+y2USr+2lJefW//hMXsXNMIB5YJFiQTn+0NAEiE=
Subject key identifier:   9D:A0:9A:8A:29:3F:51:DF:82:ED:7A:60:A8:EC:F2:FC:1E:14:E4:3E
Certificate issuer:       /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial:       01A599912D95ED049C7EF55949EBB5F4D8A90702
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS205398.roa
Signing time:             Wed 17 Dec 2025 00:48:41 +0000
ROA not before:           Wed 17 Dec 2025 00:43:41 +0000
ROA not after:            Wed 16 Dec 2026 00:48:41 +0000
asID:                     205398
IP address blocks:        2a06:a005:b6c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 09:56:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a5:99:91:2d:95:ed:04:9c:7e:f5:59:49:eb:b5:f4:d8:a9:07:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
        Validity
            Not Before: Dec 17 00:43:41 2025 GMT
            Not After : Dec 16 00:48:41 2026 GMT
        Subject: CN=9DA09A8A293F51DF82ED7A60A8ECF2FC1E14E43E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:cd:2b:11:c6:4a:f3:b4:84:ea:5e:f0:b4:cb:
                    05:13:84:bf:e5:8c:5c:df:5a:c2:e2:99:8c:bc:5f:
                    f7:eb:e2:cf:6e:7c:f7:c7:c3:71:6f:22:28:5a:15:
                    55:e9:0f:da:16:e3:30:1c:88:60:64:d7:55:45:ee:
                    40:cc:19:b8:85:33:b9:43:cb:5c:45:cf:51:b8:f3:
                    ee:01:62:15:30:55:b7:6e:9e:60:19:8d:13:35:13:
                    db:84:38:fe:4e:c6:09:30:04:cd:b9:09:2d:78:4a:
                    0b:d4:26:e9:3a:df:03:e1:12:87:ef:72:69:ae:a2:
                    0b:df:b5:ec:94:72:b3:8f:e8:d6:55:e1:22:82:1b:
                    39:d8:8a:c9:3f:bc:6d:72:9e:d4:30:3b:15:18:5a:
                    e4:68:8d:d5:a6:d6:a2:b0:bf:78:3b:ab:d1:5a:5c:
                    ee:54:2d:c4:c8:0e:6c:e0:48:9c:71:d4:00:29:8b:
                    d0:68:6b:08:bb:f3:00:4d:40:1f:e6:c9:53:c4:70:
                    72:b8:6e:df:fc:4c:8e:aa:85:31:4a:15:a1:4b:db:
                    7d:24:c6:21:00:f3:2f:a7:82:7d:a7:ec:74:ff:0e:
                    fb:19:0d:d8:9a:4b:cc:7e:90:8e:0a:45:dd:d8:65:
                    a1:f1:f3:5b:1a:dd:75:88:79:d4:eb:4f:25:2e:c7:
                    b9:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:A0:9A:8A:29:3F:51:DF:82:ED:7A:60:A8:EC:F2:FC:1E:14:E4:3E
            X509v3 Authority Key Identifier:
                keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS205398.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:b6c::/48

    Signature Algorithm: sha256WithRSAEncryption
         76:aa:5a:02:f1:62:fe:09:fa:68:96:ae:69:a6:f5:5e:54:dc:
         72:08:c2:1d:31:d0:a4:8e:a0:e0:77:41:8e:ce:17:8a:bc:9c:
         5d:49:3f:6a:b0:f1:a5:44:30:9a:14:1a:04:37:d0:bb:59:08:
         89:fa:92:da:c3:30:d0:b1:73:a9:9d:9f:c7:83:a6:74:e1:1c:
         40:8a:3e:7c:eb:6d:30:45:e5:fd:8e:b9:19:0f:a5:3a:af:e7:
         40:b3:9b:f4:23:d4:2d:58:ee:cf:6a:34:0d:d8:66:e4:08:d5:
         35:b7:ba:f8:51:32:d9:93:78:15:fb:53:a0:3d:d2:45:d6:52:
         c5:71:56:a9:9d:be:5b:36:2f:6b:75:9f:c3:02:c4:d8:73:c5:
         91:9b:4d:01:a1:47:22:66:94:40:44:aa:e2:ad:a8:69:1c:f9:
         7f:cf:bb:b0:b9:2f:67:22:52:5c:9a:cd:6e:e6:61:08:45:6a:
         67:fc:a1:5c:fc:a5:e9:25:c6:52:92:73:17:56:0f:66:d9:66:
         5c:fd:5c:17:d1:47:e1:41:b8:e3:b6:18:36:a6:81:88:5b:ed:
         b1:c3:4f:ca:97:e0:f6:1e:4c:70:35:0d:42:46:6b:87:90:c6:
         dc:1c:11:8e:23:6c:d8:8f:0d:7b:c4:18:8b:54:d4:f0:cb:79:
         ab:f4:21:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 13:12:12 2025 by rpki-client