This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS202673.roa
File:                     AS202673.roa (raw, json)
Hash identifier:          etdGZwogdmqfwSRt/noCmj/YvurrNx6E7fZWzaOHRnQ=
Subject key identifier:   30:CA:89:D8:89:4C:8F:A8:39:80:9B:DA:93:CF:DB:07:FA:B1:72:7D
Certificate issuer:       /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial:       55D433844363EB6DD4773B085F214E47AF9BBCB8
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS202673.roa
Signing time:             Fri 14 Nov 2025 21:42:33 +0000
ROA not before:           Fri 14 Nov 2025 21:37:33 +0000
ROA not after:            Fri 13 Nov 2026 21:42:33 +0000
asID:                     202673
IP address blocks:        206.245.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Nov 2025 12:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:d4:33:84:43:63:eb:6d:d4:77:3b:08:5f:21:4e:47:af:9b:bc:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
        Validity
            Not Before: Nov 14 21:37:33 2025 GMT
            Not After : Nov 13 21:42:33 2026 GMT
        Subject: CN=30CA89D8894C8FA839809BDA93CFDB07FAB1727D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:93:27:d2:0b:bf:e4:b1:9f:ba:32:36:b9:bd:
                    fb:8f:8a:3b:f4:13:cb:1e:9e:d7:e6:3e:25:7f:a8:
                    09:1e:2f:b3:af:ca:f4:4b:b8:a2:6b:59:44:17:ce:
                    a5:e1:2a:6f:70:0c:02:a6:9d:1b:5c:39:69:c2:fe:
                    f9:6a:95:3a:54:81:bf:4e:66:a9:55:ef:a9:b0:16:
                    cd:db:6a:be:14:b4:61:8d:47:0f:fa:94:2d:22:b2:
                    cf:be:67:9a:21:db:30:9b:41:ca:e7:33:ca:5e:fe:
                    7f:55:21:a5:c6:5a:56:65:9a:6d:84:6e:e3:d4:ad:
                    db:b9:70:7c:f1:50:90:c3:d2:da:7c:4d:c2:80:ad:
                    84:65:11:e8:f4:36:f1:e4:d4:01:f8:48:c1:b4:9e:
                    2a:5d:50:eb:f8:f4:79:ce:43:39:42:75:f2:10:e2:
                    7d:c7:f3:d7:2f:5e:9f:68:b9:76:d5:89:a0:02:a0:
                    e9:94:cb:63:83:9e:ff:ff:e9:e6:d4:01:7b:ee:83:
                    71:e3:59:3f:72:b3:fc:e1:02:e3:93:8a:d0:e9:39:
                    2c:c3:8c:c3:72:a6:df:43:54:84:d7:b2:70:15:8a:
                    f8:7c:e7:df:79:c8:dc:e6:d1:5c:f8:d9:b1:b3:de:
                    7b:36:0f:cb:b6:f3:3a:45:b5:64:e8:aa:8f:af:11:
                    b0:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:CA:89:D8:89:4C:8F:A8:39:80:9B:DA:93:CF:DB:07:FA:B1:72:7D
            X509v3 Authority Key Identifier:
                keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS202673.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.245.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:38:dd:e8:0e:a9:ad:e2:ef:73:7e:91:d6:a7:eb:6a:db:13:
         65:a7:49:cb:78:b8:52:09:38:a8:05:81:c0:17:61:75:7f:c4:
         b7:94:5f:d7:f9:a4:22:55:6e:e2:ab:4d:9c:ca:74:df:9a:f1:
         88:b9:01:a6:99:f6:1a:d2:64:e2:ca:5b:11:0c:e0:10:a0:07:
         3a:89:9b:16:bf:00:e1:7a:ca:71:d5:56:9d:82:47:7a:33:40:
         a4:04:8b:8e:0f:0a:e5:e7:1a:79:e4:fc:76:39:ea:35:14:60:
         7f:89:a0:d7:27:fa:40:10:cf:4b:d8:46:65:68:ef:94:d1:a5:
         f4:36:30:3a:4e:26:1a:5d:54:b2:f8:55:c7:0f:0a:d8:71:7e:
         6e:7e:69:44:5c:1b:4b:7b:c8:cd:bb:6d:7e:54:f1:a6:f8:5d:
         c1:c3:ed:e0:78:c9:aa:18:25:75:8f:b7:4c:ce:a8:af:a3:26:
         7e:f1:4e:d8:c3:75:7f:de:88:51:e0:54:be:1e:4f:5c:89:b9:
         c8:62:38:44:39:6b:8b:34:94:b3:ed:b1:9b:9c:ee:19:ff:ca:
         6a:37:4a:96:06:a0:5f:f2:19:7c:22:6e:29:e3:17:84:fe:a4:
         80:05:82:87:60:42:87:4c:34:63:99:49:57:15:3f:49:b4:24:
         47:ea:6d:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 21:48:12 2025 by rpki-client