This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS207196.roa
File:                     AS207196.roa (raw, json)
Hash identifier:          IVsJrSIRmCawLqjkd60NYVTeuDNt4B/HXZX49gqrOC0=
Subject key identifier:   67:A9:82:78:D6:DA:D5:ED:51:5E:47:6E:B1:75:73:4C:FC:DA:02:90
Certificate issuer:       /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial:       611F15E6434628B95B4084ECF8F697CF9F046A7E
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS207196.roa
Signing time:             Wed 19 Nov 2025 21:48:05 +0000
ROA not before:           Wed 19 Nov 2025 21:43:05 +0000
ROA not after:            Wed 18 Nov 2026 21:48:05 +0000
asID:                     207196
IP address blocks:        118.91.184.0/24 maxlen: 24
                          2a0d:d900::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Nov 2025 12:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:1f:15:e6:43:46:28:b9:5b:40:84:ec:f8:f6:97:cf:9f:04:6a:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
        Validity
            Not Before: Nov 19 21:43:05 2025 GMT
            Not After : Nov 18 21:48:05 2026 GMT
        Subject: CN=67A98278D6DAD5ED515E476EB175734CFCDA0290
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:18:28:0d:e8:6c:4b:1a:2c:13:25:04:c4:f8:
                    2f:63:fc:d1:00:c4:1e:f6:24:d8:11:4c:da:2a:37:
                    31:b5:3d:6c:9a:dc:c8:7c:60:1b:e2:c3:35:1c:0a:
                    84:d3:a0:12:94:b6:6f:1c:2f:c3:e8:8f:fe:f7:2a:
                    b1:b2:72:8d:3b:9a:ee:bd:17:bd:b8:47:92:8c:6b:
                    38:5f:55:75:a5:32:8e:91:5e:a1:88:e6:b8:3b:3b:
                    2c:92:b9:68:0b:20:e4:25:76:f9:f9:2e:c5:59:a1:
                    55:39:c8:4f:ad:0e:54:06:94:37:a8:77:c2:11:b0:
                    6a:4f:b0:5a:7f:d7:50:8e:1e:af:5b:b8:ec:e6:cf:
                    20:42:67:7b:92:7f:59:55:27:06:8d:6e:96:0c:77:
                    24:f4:37:77:9f:19:54:29:84:e7:dd:b5:8c:6b:d0:
                    ba:8d:72:d2:00:26:17:86:19:7b:0f:79:e9:2c:11:
                    66:07:24:19:d4:84:24:1f:75:75:2c:fe:83:c4:1b:
                    ac:cb:b6:64:94:18:56:c1:53:db:9d:16:69:b7:30:
                    7b:3b:d6:09:dd:f0:53:a5:bf:53:44:58:d0:21:79:
                    d7:7a:d3:9c:7d:89:52:5d:75:9d:5c:79:e5:70:6e:
                    14:17:94:3d:cc:8f:4e:47:fc:b4:7d:97:81:4e:6d:
                    59:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:A9:82:78:D6:DA:D5:ED:51:5E:47:6E:B1:75:73:4C:FC:DA:02:90
            X509v3 Authority Key Identifier:
                keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS207196.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.91.184.0/24
                IPv6:
                  2a0d:d900::/32

    Signature Algorithm: sha256WithRSAEncryption
         44:51:a4:53:c0:a7:b6:c7:9f:54:b6:10:17:c7:c1:c1:9f:d9:
         c3:52:f2:2a:e6:d0:61:a2:de:00:00:82:c8:df:61:b5:87:a5:
         54:b2:8d:fb:0a:87:b2:5e:98:f4:3a:5c:39:14:a0:44:ba:18:
         d2:d7:21:19:bf:3b:1e:7a:39:86:b0:4f:02:c3:8f:50:55:89:
         64:2a:40:f2:85:63:41:80:5e:68:39:b6:c2:33:cd:d0:cd:25:
         e8:2f:a2:e0:8a:a8:90:81:87:7b:9a:ef:17:aa:5c:c1:c3:a9:
         46:ae:d0:4a:87:7e:64:54:9c:7f:a3:51:ec:48:df:c0:42:18:
         ee:41:7b:12:f7:63:c0:f7:d0:2b:04:7d:8d:47:b9:2e:26:60:
         6b:32:76:19:a2:f2:95:e5:15:4f:7c:fb:33:a4:8b:05:e8:d1:
         da:f2:3a:cb:ad:49:c6:1e:77:b4:4f:8b:b7:85:cc:71:e5:d3:
         49:60:29:7a:45:70:6b:26:4e:a9:35:e9:24:69:da:a8:f4:86:
         2f:f7:ba:a7:25:ff:7b:dd:be:78:9b:1c:0c:22:33:4b:00:cc:
         9b:71:aa:84:96:f5:e0:4b:5e:17:27:f5:0b:d0:5a:77:5a:55:
         8c:ee:3e:db:06:82:04:fb:36:ac:b4:9f:b7:e8:c3:af:a5:bb:
         b2:40:6b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 21:49:05 2025 by rpki-client