This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS51852.roa
File:                     AS51852.roa (raw, json)
Hash identifier:          2AQUf+zofuomQM32N4/k2cgCOs+gQfxdT20mBIWKWK4=
Subject key identifier:   16:94:83:46:BF:C5:E3:9C:D7:0C:2A:C9:8E:7A:FF:9C:5D:CE:AC:95
Certificate issuer:       /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial:       501FE002BC2B5F0C44EC26BCEB396B4874CB4DF7
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS51852.roa
Signing time:             Mon 08 Dec 2025 10:25:44 +0000
ROA not before:           Mon 08 Dec 2025 10:20:44 +0000
ROA not after:            Mon 07 Dec 2026 10:25:44 +0000
asID:                     51852
IP address blocks:        89.39.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 16:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:1f:e0:02:bc:2b:5f:0c:44:ec:26:bc:eb:39:6b:48:74:cb:4d:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
        Validity
            Not Before: Dec  8 10:20:44 2025 GMT
            Not After : Dec  7 10:25:44 2026 GMT
        Subject: CN=16948346BFC5E39CD70C2AC98E7AFF9C5DCEAC95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:d2:fc:44:f9:49:ef:4f:3a:b2:3b:18:7e:14:
                    4c:96:6b:af:a2:46:90:42:d8:59:1c:12:3a:34:d4:
                    9d:5f:15:ad:85:3e:cc:5c:e2:a9:f6:1e:2f:d8:46:
                    33:d5:47:8e:41:63:2f:9e:3f:7b:a3:d9:0b:d8:af:
                    e0:77:90:9f:b5:64:39:3e:ac:e0:d3:27:03:fd:e7:
                    4c:ca:08:46:0c:31:09:e2:43:fd:c3:c0:21:29:fc:
                    01:11:06:9e:71:45:0b:f2:9d:de:94:f1:42:b6:7a:
                    35:65:4d:12:4e:5b:d5:26:12:3a:2a:c9:89:4c:c6:
                    a5:59:8c:3d:86:71:f8:db:7e:fa:b6:fe:a2:b1:5f:
                    68:4a:d2:dc:55:13:e9:4f:d7:3a:92:aa:8e:49:b8:
                    8c:4f:0c:2a:f5:15:db:b9:62:a7:84:c2:5b:3b:f1:
                    b6:86:1d:5e:51:60:51:e8:19:9a:3a:c4:ff:ec:54:
                    3a:26:09:15:a9:f3:d7:d9:f8:49:a1:4d:64:f9:3f:
                    d7:87:c7:fe:fc:2c:e6:10:17:a6:57:3f:2e:d5:75:
                    82:b2:bd:12:72:34:49:10:3c:92:f2:4b:39:19:8a:
                    35:bc:0e:b7:f9:e1:78:ae:d8:81:80:c6:48:07:21:
                    26:68:0a:6e:98:ad:f7:43:4e:76:55:0a:de:c4:aa:
                    f7:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:94:83:46:BF:C5:E3:9C:D7:0C:2A:C9:8E:7A:FF:9C:5D:CE:AC:95
            X509v3 Authority Key Identifier:
                keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS51852.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.39.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:81:7f:bd:d7:d8:49:0d:54:92:7f:67:d6:f7:ca:ce:40:e2:
         19:6c:86:52:b0:4c:0a:8d:fd:83:44:cd:87:b1:56:a5:25:54:
         92:98:19:6c:b6:0b:c9:e3:59:15:87:32:05:56:b2:2f:38:e6:
         a6:8f:58:44:d1:bd:38:9a:91:a6:17:3a:d3:75:35:da:60:27:
         cc:03:3c:87:07:47:0b:49:10:b5:8e:be:b2:9f:e2:fe:f7:7d:
         e0:12:6f:3f:0d:b5:d3:10:78:fb:f3:5c:2b:c3:80:13:f3:a5:
         f3:f6:a6:e4:2c:fb:8c:0f:8a:de:fb:dd:5b:f5:8b:00:80:26:
         17:b6:6c:5f:7c:f8:bc:13:d9:a5:ed:f4:a8:ec:87:36:ce:d4:
         81:ae:17:d5:6b:98:28:7f:12:0d:da:a2:28:67:48:6a:9c:05:
         53:6b:61:ab:0b:f9:70:01:53:7b:52:39:fa:ee:2e:05:da:4b:
         b3:46:05:4f:e3:45:e3:2c:84:1c:b3:f0:8f:94:59:e4:d1:0f:
         60:40:7c:e7:1b:8f:28:51:01:8a:26:bf:c2:45:d1:ca:d7:73:
         90:75:77:06:30:0b:cc:64:df:4c:c4:48:83:7d:13:92:53:0a:
         7e:9d:99:55:9b:65:d6:b0:57:eb:c9:74:7d:e6:9d:1c:2d:37:
         7e:c7:86:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 22:02:48 2025 by rpki-client