This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS202610.roa
File:                     AS202610.roa (raw, json)
Hash identifier:          HBJp3ColVAVjm3sl7htmHnCtK32j52aSgLlskEJ75AA=
Subject key identifier:   17:48:DB:F4:3B:AF:40:C0:31:D9:E3:CC:AF:8E:D7:C6:9E:68:CC:71
Certificate issuer:       /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial:       04C7A712CCFE9436F102A00F011ECD1D39B6045C
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS202610.roa
Signing time:             Tue 30 Dec 2025 21:18:11 +0000
ROA not before:           Tue 30 Dec 2025 21:13:11 +0000
ROA not after:            Tue 29 Dec 2026 21:18:11 +0000
asID:                     202610
IP address blocks:        2a0d:d904:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 Jan 2026 12:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:c7:a7:12:cc:fe:94:36:f1:02:a0:0f:01:1e:cd:1d:39:b6:04:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
        Validity
            Not Before: Dec 30 21:13:11 2025 GMT
            Not After : Dec 29 21:18:11 2026 GMT
        Subject: CN=1748DBF43BAF40C031D9E3CCAF8ED7C69E68CC71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:cc:6c:b1:08:cc:93:bb:00:18:88:63:0f:1b:
                    b4:fb:9b:d8:4e:ac:06:b4:be:b3:5c:eb:5e:c0:21:
                    ee:cb:2a:7b:da:25:02:f9:25:28:2f:9d:2a:f8:46:
                    3b:3f:63:f5:12:96:b8:4b:ff:4c:74:04:f6:27:0c:
                    40:b6:59:62:91:9b:ba:e5:39:8a:ea:c2:6f:de:08:
                    9c:90:51:13:da:ab:8e:10:3e:2e:a2:1b:2f:fa:45:
                    2a:67:ef:02:62:1c:4d:b7:97:d8:0a:fb:71:dd:08:
                    3b:c8:4d:47:63:22:d0:63:0f:eb:b3:1a:de:a0:14:
                    60:f5:0f:0c:81:0c:50:6d:84:2c:90:3d:c7:a6:32:
                    f7:52:16:2c:9a:1a:18:e5:54:cc:ee:34:e4:ba:1b:
                    87:97:5b:ea:44:31:65:2a:24:f5:d4:8b:14:ae:de:
                    90:02:b9:19:6b:7c:77:be:d5:84:88:30:c6:98:4a:
                    77:89:b9:3a:80:5a:83:63:fa:61:91:b6:da:fd:20:
                    d8:7e:6f:2c:83:62:1b:da:b8:b2:84:73:3e:9d:a5:
                    b7:55:3c:68:5f:9a:54:29:c0:c9:ee:a7:ce:a8:60:
                    33:48:14:b2:9b:47:f7:b4:52:45:d6:4c:da:ce:f6:
                    b5:c1:dd:7c:a8:cf:ab:04:da:99:a9:1a:fa:b7:ec:
                    0a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:48:DB:F4:3B:AF:40:C0:31:D9:E3:CC:AF:8E:D7:C6:9E:68:CC:71
            X509v3 Authority Key Identifier:
                keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS202610.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0d:d904:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         b7:64:9a:32:3b:7d:f4:7c:be:99:e2:9b:34:0a:e8:32:e1:52:
         11:54:47:10:24:24:65:31:b0:71:e8:c6:97:b7:77:21:54:de:
         65:18:d4:4b:3f:2f:81:fe:e7:5d:9e:1d:b6:17:a1:34:1a:8e:
         81:81:17:1e:48:51:0f:50:58:03:5e:f4:e1:2b:12:b6:88:34:
         1a:0d:90:5e:b3:4f:3e:1e:07:11:e4:c8:8e:14:b2:76:f7:17:
         40:42:08:42:83:a4:7a:b0:c0:e6:e2:fe:4d:79:b1:b6:3e:66:
         d0:cc:f3:74:80:2e:cd:52:0a:29:90:93:a8:f6:b7:6d:63:16:
         34:a8:41:25:61:77:7a:1a:9c:e9:5a:7b:7b:98:6c:38:53:6c:
         bb:f3:5c:0b:5f:aa:b2:03:ba:13:aa:83:a5:f9:a7:81:7d:d7:
         b2:8c:d4:d4:ad:e7:b9:52:ef:c0:51:7e:6e:e8:2f:7e:41:dc:
         ae:06:fd:4f:cf:05:45:6f:40:e5:1c:d7:c4:6c:5e:a4:d5:d3:
         1e:85:09:f1:bd:e4:e2:40:62:a3:3c:de:b1:f9:a1:f0:77:61:
         44:8f:5d:42:e8:1a:1b:1c:7c:54:80:a6:16:04:5c:d7:ad:ce:
         46:a1:a3:26:70:5b:5f:9e:bd:21:36:f2:54:04:81:5f:a9:b8:
         04:f7:31:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 18:11:25 2026 by rpki-client