This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS29802.roa
File:                     AS29802.roa (raw, json)
Hash identifier:          apkGp5g2DR4xtXSzg4BSgat8K1GUb/r+32RO9m19CuI=
Subject key identifier:   55:36:E6:73:08:6D:4F:85:90:6C:63:F9:7C:A4:F3:BB:C1:28:A7:1F
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       286CB2480C3E559BCA0520416F316C4DC51B6D81
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS29802.roa
Signing time:             Tue 09 Dec 2025 17:33:04 +0000
ROA not before:           Tue 09 Dec 2025 17:28:04 +0000
ROA not after:            Tue 08 Dec 2026 17:33:04 +0000
asID:                     29802
IP address blocks:        157.254.158.0/24 maxlen: 24
                          157.254.182.0/24 maxlen: 24
                          157.254.183.0/24 maxlen: 24
                          157.254.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Dec 2025 02:49:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:6c:b2:48:0c:3e:55:9b:ca:05:20:41:6f:31:6c:4d:c5:1b:6d:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Dec  9 17:28:04 2025 GMT
            Not After : Dec  8 17:33:04 2026 GMT
        Subject: CN=5536E673086D4F85906C63F97CA4F3BBC128A71F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:43:06:eb:8d:f0:51:9b:e1:f2:e0:d9:d3:56:
                    87:2a:00:8d:11:2c:da:91:1e:e4:5f:a9:eb:f4:a9:
                    7c:25:60:1c:54:e3:3a:71:6d:9e:a1:d4:de:20:f6:
                    68:13:ca:29:a5:85:90:ac:c6:89:c6:e9:71:dd:3e:
                    a9:cf:88:53:6d:84:61:2e:f2:2f:e3:cf:e2:97:a5:
                    43:2c:79:ff:7d:cd:94:6c:b6:7d:4e:24:ba:92:2a:
                    c8:95:25:35:59:88:d1:76:c3:d5:46:6e:c4:7e:36:
                    4c:8a:d4:d9:43:f0:f6:7a:26:f7:ff:aa:e2:15:74:
                    df:2b:f7:53:39:f0:8f:20:e3:3e:ca:f1:8a:1f:d8:
                    7c:cc:ed:cc:fa:d4:8c:30:4b:37:4a:0c:d9:5d:2d:
                    e0:4a:4b:78:f9:09:86:2f:d1:a1:f8:9c:b8:ec:31:
                    44:72:36:41:c9:37:f5:8d:c8:25:41:e6:71:91:0e:
                    81:5c:fb:54:1b:7e:d1:16:84:f6:4b:27:4f:7f:af:
                    43:d3:12:84:3c:e4:d9:b5:f4:79:be:01:14:d1:2d:
                    53:25:17:df:5a:0c:f1:60:d8:bf:d2:8e:41:50:62:
                    09:a4:94:3e:59:ea:0c:d0:3d:cb:b4:8a:c0:b0:64:
                    24:91:5a:f5:5c:98:89:36:01:fb:38:34:3d:15:a5:
                    40:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:36:E6:73:08:6D:4F:85:90:6C:63:F9:7C:A4:F3:BB:C1:28:A7:1F
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS29802.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.158.0/24
                  157.254.182.0/23
                  157.254.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:d4:59:29:f5:ac:74:4c:88:16:6e:e6:7f:04:91:33:b6:14:
         12:ef:ae:2a:65:26:ff:bf:aa:4c:8e:da:21:7c:e8:2e:e1:e7:
         a6:ce:bc:24:de:f0:47:20:1a:51:b7:2f:d4:2a:a8:2f:d1:ae:
         1d:12:1f:51:f2:b0:a7:65:99:07:e6:96:b0:9c:57:de:0c:cf:
         e5:2d:fe:12:63:a5:73:89:7a:c5:e5:b4:40:bd:66:25:78:d3:
         81:94:fc:bd:a7:25:71:fc:9d:40:62:73:5e:45:da:58:00:27:
         a3:39:8e:c0:97:30:9a:a6:7c:4c:40:3e:d2:cc:4b:23:ed:19:
         ce:ac:4d:75:f8:30:d6:4b:0d:77:79:77:fb:d7:00:4d:13:0c:
         f3:8b:c1:41:c7:1b:ee:90:81:5d:47:b2:2b:1d:0d:bb:d7:1f:
         ab:f9:e8:5e:8d:a5:fb:8a:d2:22:4a:d2:ac:99:56:8b:ac:c6:
         21:cc:b2:eb:44:a9:2b:4a:da:65:cb:f3:cc:43:fd:5a:fe:e7:
         c3:20:5c:bf:13:7c:7b:65:3c:f2:5a:86:e5:96:76:e9:9a:0e:
         d6:c3:42:b6:c6:08:d8:c8:bd:33:fc:b8:85:a6:5f:62:e0:bd:
         ae:01:10:a4:0f:c5:cb:a4:68:23:e7:7b:38:7b:e5:3b:f7:ba:
         47:1f:8c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 06:06:06 2025 by rpki-client