This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/9/3130332e3234342e3232362e302f32332d3332203d3e20313531363432.roa
File:                     3130332e3234342e3232362e302f32332d3332203d3e20313531363432.roa (raw, json)
Hash identifier:          sPyoKorLiK9ByXmoMSNg668zU3RSvi8DBiCLDQzzk34=
Subject key identifier:   E0:BE:40:AF:B7:19:8E:E3:9B:68:81:34:2A:B3:96:C8:FE:F8:B7:E2
Certificate issuer:       /CN=A91A9C1E0000/serialNumber=6ED84CFF4976B923E315096476DD6623E49C8B79
Certificate serial:       7E72F2E60047DAA2ED0E4C60F98376075AD18AA3
Authority key identifier: 6E:D8:4C:FF:49:76:B9:23:E3:15:09:64:76:DD:66:23:E4:9C:8B:79
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bthM_0l2uSPjFQlkdt1mI-Sci3k.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/9/3130332e3234342e3232362e302f32332d3332203d3e20313531363432.roa
Signing time:             Mon 15 Dec 2025 03:40:46 +0000
ROA not before:           Mon 15 Dec 2025 03:35:46 +0000
ROA not after:            Mon 14 Dec 2026 03:40:46 +0000
asID:                     151642
IP address blocks:        103.244.226.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/9/6ED84CFF4976B923E315096476DD6623E49C8B79.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/9/6ED84CFF4976B923E315096476DD6623E49C8B79.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bthM_0l2uSPjFQlkdt1mI-Sci3k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Dec 2025 21:09:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:72:f2:e6:00:47:da:a2:ed:0e:4c:60:f9:83:76:07:5a:d1:8a:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A9C1E0000, serialNumber=6ED84CFF4976B923E315096476DD6623E49C8B79
        Validity
            Not Before: Dec 15 03:35:46 2025 GMT
            Not After : Dec 14 03:40:46 2026 GMT
        Subject: CN=E0BE40AFB7198EE39B6881342AB396C8FEF8B7E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f2:f0:30:18:f6:0c:46:46:35:30:14:f8:2c:
                    95:ab:62:9d:09:a2:65:21:8f:cd:1e:5a:4c:8b:d4:
                    99:b9:97:c3:47:ce:79:95:2a:8f:2c:2a:c2:4f:40:
                    77:63:b2:04:47:9b:e6:b5:2a:d8:78:ff:2f:f9:b9:
                    b5:82:56:94:2f:ed:1e:06:c3:c9:95:63:fc:13:14:
                    a1:a3:86:75:6d:4e:aa:54:58:18:c5:a4:17:d1:25:
                    78:ee:02:a4:b5:cd:52:41:20:22:57:7c:af:37:f2:
                    ba:90:29:85:1d:c0:a3:fa:9a:ea:eb:99:c3:a4:4e:
                    79:59:79:db:a0:7e:15:35:9f:f7:5f:f8:2f:fe:54:
                    d3:c5:25:41:d8:16:c6:bf:12:f1:28:f9:99:ae:07:
                    2b:76:59:0f:2b:f9:7a:94:64:c4:d0:e2:1b:15:76:
                    bf:89:36:16:bc:73:87:87:f5:bf:83:7b:01:48:48:
                    06:c3:b3:d7:62:16:20:ee:5e:4c:61:ab:fc:8c:45:
                    d1:01:31:3a:d1:b7:15:04:5e:97:57:35:08:8e:ea:
                    16:d8:99:d1:89:e8:51:31:6c:c1:07:6a:a0:ff:dd:
                    9d:d5:61:0d:99:bf:0a:6c:c5:55:3b:50:94:db:ad:
                    9d:b8:76:ed:1f:a0:bf:c0:13:ff:79:ef:27:29:b7:
                    c8:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:BE:40:AF:B7:19:8E:E3:9B:68:81:34:2A:B3:96:C8:FE:F8:B7:E2
            X509v3 Authority Key Identifier:
                keyid:6E:D8:4C:FF:49:76:B9:23:E3:15:09:64:76:DD:66:23:E4:9C:8B:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/9/6ED84CFF4976B923E315096476DD6623E49C8B79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bthM_0l2uSPjFQlkdt1mI-Sci3k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/9/3130332e3234342e3232362e302f32332d3332203d3e20313531363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.244.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         49:68:67:d3:13:88:9a:06:e1:a1:04:d8:a5:90:52:e0:6c:41:
         2d:67:4f:f4:77:0e:47:80:e9:93:03:50:41:92:d0:00:cf:bb:
         fa:68:14:7f:0a:ab:49:b8:55:ab:09:3e:b5:a8:9c:f4:0b:1f:
         c0:a7:02:d3:65:a7:5f:7b:65:13:10:6b:f5:05:eb:50:8f:bd:
         e1:bf:b2:7a:cd:4a:b1:53:b2:25:54:66:f4:ed:69:42:1c:b6:
         9f:49:e6:aa:ca:ef:67:1e:24:30:56:dc:ef:e9:9c:85:e8:e6:
         d8:c7:c2:71:35:a1:b5:0a:ea:08:9d:3b:39:f8:b2:95:3b:b9:
         8e:0b:98:0b:ea:85:24:73:ba:48:ad:d7:60:0e:7f:77:7f:80:
         71:b8:88:58:97:d0:6d:f7:8d:a3:ec:f9:5f:88:d0:ba:1c:69:
         da:7a:74:df:25:30:0f:f7:0c:7e:79:98:3c:d3:bf:c2:43:c7:
         b2:60:1c:2b:86:0b:c3:1f:e3:68:ec:9f:4b:ba:1b:39:3f:f8:
         ba:b2:68:6f:87:4d:73:eb:6c:b9:5a:cd:e9:a9:68:3a:89:2e:
         b3:5e:2f:bb:49:3b:67:71:83:2e:f4:09:23:65:fb:53:d6:f7:
         57:89:64:a1:58:2e:34:8b:0f:9e:ea:c7:70:55:18:a0:4b:a2:
         3f:58:d1:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 22:33:09 2025 by rpki-client