This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS44570.roa
File:                     AS44570.roa (raw, json)
Hash identifier:          BtL8TkKbdtsenwvkqGEMLit2Ih1psz6P77FT0rAlmbo=
Subject key identifier:   CF:DA:09:A0:8B:7F:53:85:57:FE:23:2A:FD:73:3D:94:43:40:93:5E
Certificate issuer:       /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial:       078653737937983527DE13539B3CB52508C2267D
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS44570.roa
Signing time:             Thu 18 Dec 2025 01:23:57 +0000
ROA not before:           Thu 18 Dec 2025 01:18:57 +0000
ROA not after:            Thu 17 Dec 2026 01:23:57 +0000
asID:                     44570
IP address blocks:        185.121.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 13:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:86:53:73:79:37:98:35:27:de:13:53:9b:3c:b5:25:08:c2:26:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
        Validity
            Not Before: Dec 18 01:18:57 2025 GMT
            Not After : Dec 17 01:23:57 2026 GMT
        Subject: CN=CFDA09A08B7F538557FE232AFD733D944340935E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:89:41:14:54:a9:53:cb:18:74:f0:88:c5:96:
                    a3:fa:7a:7a:5a:71:36:ba:3b:87:59:15:54:32:c4:
                    68:2b:21:28:90:b5:43:f9:33:60:ef:7e:74:71:dc:
                    77:fb:4d:31:fc:42:14:6d:44:dc:53:10:a2:83:00:
                    ef:bd:00:e5:29:ea:3c:6a:36:70:b8:c5:c4:e2:af:
                    3f:41:d1:90:5b:6a:91:13:34:26:e9:4e:45:5d:f5:
                    a8:6f:af:76:3d:6f:3c:14:61:42:44:e2:32:88:de:
                    93:9d:67:f7:00:3a:be:41:1c:97:b6:fe:5d:cb:1e:
                    b4:0a:8d:32:78:26:4d:50:9e:20:95:c9:05:a8:3f:
                    8d:d3:b2:a0:0b:8e:8d:48:9e:00:db:96:7e:5f:33:
                    d5:bd:2a:7c:19:56:cd:30:ef:74:34:d6:5b:23:05:
                    5b:e2:dc:03:46:f1:cd:79:2c:5f:56:45:e9:c8:cd:
                    7d:1a:c5:bd:5f:02:04:46:31:6a:69:5d:98:a4:0c:
                    e5:1f:b1:3e:7a:b4:4f:6a:cc:e7:a1:2c:27:d7:8f:
                    32:92:63:45:6a:52:bf:4c:8e:e4:43:8d:e2:c0:09:
                    86:ec:82:ad:16:52:92:c7:96:b1:b5:da:d7:ef:14:
                    dd:6a:db:51:ab:f1:af:a5:8c:b0:35:5d:b3:61:5b:
                    25:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:DA:09:A0:8B:7F:53:85:57:FE:23:2A:FD:73:3D:94:43:40:93:5E
            X509v3 Authority Key Identifier:
                keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS44570.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.121.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:30:42:55:71:1e:96:a3:0a:ea:90:5d:86:f4:58:dd:fa:48:
         e7:93:a5:a1:52:86:8c:a4:04:c1:bd:61:8e:9e:29:8d:dd:bf:
         ad:be:1c:2a:d6:a7:64:ca:39:5e:83:48:a1:f5:65:86:9c:60:
         8a:52:e9:96:f5:30:ef:6b:6f:8c:f4:be:40:c6:dd:54:5b:2d:
         37:f2:58:77:c2:f5:2c:27:2b:d0:a0:a3:30:37:54:d9:e6:2b:
         a8:f3:59:76:a0:1c:67:44:73:e2:fa:ea:23:67:f2:e0:51:37:
         e4:db:64:de:85:63:47:8a:5f:1e:30:5e:1c:bb:ed:52:aa:90:
         50:04:0f:41:92:6c:ae:4f:4f:98:a3:c5:76:bd:38:ed:1e:c4:
         e7:5e:98:a7:1b:8b:50:68:b9:b1:1b:b9:d6:e8:6d:9e:66:e4:
         7e:86:ec:eb:3d:da:8b:2e:ca:a8:1f:86:9b:e3:85:33:1e:3b:
         0e:65:a8:b9:de:a4:c5:32:4c:ff:3d:35:50:44:14:86:46:73:
         97:ed:06:bd:75:7b:f1:73:de:c9:9d:97:2e:43:2b:8c:cb:24:
         e7:9b:8b:ef:06:73:b3:56:00:fc:bf:2e:88:37:1f:63:57:77:
         f1:b3:27:e0:72:7e:d8:39:df:93:a1:e4:07:bf:47:0f:c3:eb:
         63:a7:5d:e5
-----BEGIN CERTIFICATE-----
MIIE5DCCA8ygAwIBAgIUB4ZTc3k3mDUn3hNTmzy1JQjCJn0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDE0YjZmY2YyYjJjNjliZTA4NWU5Zjk1OTg3MmRjYmU4
ZWE1NDE3NzAeFw0yNTEyMTgwMTE4NTdaFw0yNjEyMTcwMTIzNTdaMDMxMTAvBgNV
BAMTKENGREEwOUEwOEI3RjUzODU1N0ZFMjMyQUZENzMzRDk0NDM0MDkzNUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsiUEUVKlTyxh08IjFlqP6enpa
cTa6O4dZFVQyxGgrISiQtUP5M2DvfnRx3Hf7TTH8QhRtRNxTEKKDAO+9AOUp6jxq
NnC4xcTirz9B0ZBbapETNCbpTkVd9ahvr3Y9bzwUYUJE4jKI3pOdZ/cAOr5BHJe2
/l3LHrQKjTJ4Jk1QniCVyQWoP43TsqALjo1IngDbln5fM9W9KnwZVs0w73Q01lsj
BVvi3ANG8c15LF9WRenIzX0axb1fAgRGMWppXZikDOUfsT56tE9qzOehLCfXjzKS
Y0VqUr9MjuRDjeLACYbsgq0WUpLHlrG12tfvFN1q21Gr8a+ljLA1XbNhWyXbAgMB
AAGjggHuMIIB6jAdBgNVHQ4EFgQUz9oJoIt/U4VX/iMq/XM9lENAk14wHwYDVR0j
BBgwFoAU0Utvzyssab4IXp+VmHLcvo6lQXcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNy9EMTRCNkZDRjJC
MkM2OUJFMDg1RTlGOTU5ODcyRENCRThFQTU0MTc3LmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMFV0dnp5c3NhYjRJWHAtVm1ITGN2bzZsUVhjLmNlcjBvBggrBgEF
BQcBCwRjMGEwXwYIKwYBBQUHMAuGU3JzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC83L0FT
NDQ1NzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAC5eaowDQYJKoZIhvcNAQELBQADggEBABUwQlVxHpaj
CuqQXYb0WN36SOeTpaFShoykBMG9YY6eKY3dv62+HCrWp2TKOV6DSKH1ZYacYIpS
6Zb1MO9rb4z0vkDG3VRbLTfyWHfC9SwnK9CgozA3VNnmK6jzWXagHGdEc+L66iNn
8uBRN+TbZN6FY0eKXx4wXhy77VKqkFAED0GSbK5PT5ijxXa9OO0exOdemKcbi1Bo
ubEbudbobZ5m5H6G7Os92osuyqgfhpvjhTMeOw5lqLnepMUyTP89NVBEFIZGc5ft
Br11e/Fz3smdly5DK4zLJOebi+8Gc7NWAPy/Log3H2NXd/GzJ+Byftg535Oh5Ae/
Rw/D62OnXeU=
-----END CERTIFICATE-----
Generated at Sun Dec 21 17:51:30 2025 by rpki-client