This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS207513.roa
File:                     AS207513.roa (raw, json)
Hash identifier:          Fza1aH1ZwOrIkMFsWLaOCY5+D0oMdPcnUg3jCDqw/WQ=
Subject key identifier:   EF:3A:1B:1F:00:D2:0E:2C:13:52:C6:4A:4B:C8:D8:0D:10:DB:BD:7C
Certificate issuer:       /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial:       133FB0F4E082D9CD441D544A4BF0FFE04C437BE8
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS207513.roa
Signing time:             Wed 31 Dec 2025 20:52:09 +0000
ROA not before:           Wed 31 Dec 2025 20:47:09 +0000
ROA not after:            Wed 30 Dec 2026 20:52:09 +0000
asID:                     207513
IP address blocks:        81.31.209.0/24 maxlen: 24
                          83.142.30.0/24 maxlen: 24
                          85.155.124.0/24 maxlen: 24
                          85.155.125.0/24 maxlen: 24
                          103.68.110.0/24 maxlen: 24
                          103.137.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 Jan 2026 12:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:3f:b0:f4:e0:82:d9:cd:44:1d:54:4a:4b:f0:ff:e0:4c:43:7b:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
        Validity
            Not Before: Dec 31 20:47:09 2025 GMT
            Not After : Dec 30 20:52:09 2026 GMT
        Subject: CN=EF3A1B1F00D20E2C1352C64A4BC8D80D10DBBD7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:b8:b2:54:7a:2d:01:a0:e8:2a:15:ef:24:04:
                    82:3a:9a:37:6e:d2:52:da:49:03:75:61:76:ea:1c:
                    49:8c:e7:30:df:a7:2e:01:8f:b8:27:3f:b1:37:7a:
                    e7:8c:e9:37:a8:e9:db:b5:39:50:bd:e1:2e:a8:77:
                    0b:fa:56:86:43:1c:97:b6:ca:f5:b9:33:c9:a9:ec:
                    8a:2d:f8:f9:a7:b4:b2:8c:44:95:8f:0b:bf:30:13:
                    a9:14:4d:47:c7:67:68:82:f3:cd:c5:38:d6:a1:2e:
                    64:ce:b3:23:52:54:16:95:13:d5:75:38:df:a4:89:
                    50:f9:dc:30:9c:ee:41:c2:30:54:f9:93:c3:df:e2:
                    81:2c:ad:47:72:90:1a:55:58:a1:f7:43:ff:c3:4b:
                    70:ed:be:28:62:80:76:94:60:fb:25:64:c7:73:48:
                    8e:2a:4e:1d:1d:69:54:79:70:2a:2a:9e:ee:cd:d0:
                    e2:69:fb:3a:e3:b6:a6:6e:16:e3:72:41:12:c8:d3:
                    dd:11:cf:eb:6b:ea:45:0c:59:56:70:07:d7:d2:ea:
                    44:98:1a:7a:94:29:f5:bb:8c:0b:80:53:e7:f4:35:
                    8d:af:62:5c:4e:0d:ae:3b:92:07:ea:01:81:91:5d:
                    9e:87:b3:ac:6d:a3:bc:d2:3c:c9:34:df:e4:a5:81:
                    48:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:3A:1B:1F:00:D2:0E:2C:13:52:C6:4A:4B:C8:D8:0D:10:DB:BD:7C
            X509v3 Authority Key Identifier:
                keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS207513.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.31.209.0/24
                  83.142.30.0/24
                  85.155.124.0/23
                  103.68.110.0/24
                  103.137.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:db:88:fc:3f:3c:d4:76:f0:15:89:f0:cd:bb:51:18:fb:e8:
         14:6d:ff:52:37:5f:fc:d7:ec:94:bb:b6:72:fc:09:bf:51:ee:
         39:ed:48:4f:44:34:a1:db:33:47:72:b8:45:06:43:1b:82:6d:
         cb:5f:d8:ac:af:06:0f:ca:8c:cf:83:09:6e:79:6b:91:c1:2a:
         35:59:e7:3c:2f:9c:3a:cb:ed:18:a7:c6:1f:74:ae:f1:d7:05:
         f0:89:20:fc:c8:aa:25:37:41:89:49:4a:89:56:c7:36:8f:03:
         99:e4:9e:a6:74:55:47:e6:f8:55:0f:51:48:9e:aa:b3:81:51:
         5e:d4:e7:7c:e1:4b:75:4e:f7:98:37:96:cf:5d:9b:f5:a4:4a:
         0e:5d:93:8f:04:df:23:d7:d6:69:28:a5:c4:37:70:0b:47:33:
         93:a0:35:40:f4:81:da:a0:50:b5:9f:4d:cb:ca:9f:3e:5b:74:
         9d:e9:ab:f1:7e:72:18:4c:5b:9b:51:f7:d9:bf:c2:b7:8d:c7:
         a6:68:3f:4b:b8:76:37:62:ca:7d:95:97:eb:5f:5d:d0:3e:7a:
         1c:28:6c:46:d6:c8:66:05:80:86:81:c8:e6:e0:b4:43:d4:b1:
         52:eb:01:df:a4:55:c6:5a:c7:d4:6d:98:cd:23:14:8d:47:4a:
         cc:0e:11:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 18:12:08 2026 by rpki-client