This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS207567.roa
File:                     AS207567.roa (raw, json)
Hash identifier:          QxUUUutJ6fwGpTqhra9MR1+l0E4VU7Akbx6N42Cm4+U=
Subject key identifier:   A7:3A:25:17:4F:EA:1C:26:46:73:22:C3:60:20:96:0F:8A:63:93:45
Certificate issuer:       /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial:       2A644BAE2E6C7EEEEDB2C9BDA553262B7AA93A1D
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS207567.roa
Signing time:             Sun 21 Dec 2025 19:33:37 +0000
ROA not before:           Sun 21 Dec 2025 19:28:37 +0000
ROA not after:            Sun 20 Dec 2026 19:33:37 +0000
asID:                     207567
IP address blocks:        85.155.230.0/24 maxlen: 24
                          2a0d:d904::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 00:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:64:4b:ae:2e:6c:7e:ee:ed:b2:c9:bd:a5:53:26:2b:7a:a9:3a:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
        Validity
            Not Before: Dec 21 19:28:37 2025 GMT
            Not After : Dec 20 19:33:37 2026 GMT
        Subject: CN=A73A25174FEA1C26467322C36020960F8A639345
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:67:9e:db:9d:39:6e:7e:71:aa:8a:7b:c9:da:
                    5f:f6:1d:27:cb:7a:f7:c7:4a:11:80:55:e0:40:e0:
                    49:5f:80:7d:95:f8:da:8a:47:ff:3e:78:d8:e0:50:
                    18:81:93:e9:6b:e7:23:86:5f:82:c4:9b:69:48:bd:
                    09:3d:e8:ee:7b:70:56:87:ac:e0:f5:ee:9d:ea:82:
                    c3:e8:ab:02:74:56:6b:87:78:3e:9e:ab:51:7c:81:
                    53:2e:fa:99:dc:44:ce:96:31:f0:50:be:75:a7:b6:
                    89:79:52:1a:65:1a:9c:28:d3:e9:c0:dd:64:00:76:
                    66:6b:4b:0c:1f:ac:d1:35:fd:91:c1:68:f1:da:05:
                    c2:73:0c:f2:83:be:06:e1:01:37:bb:32:62:2e:c0:
                    b6:ec:d2:24:6b:5d:b9:ed:02:63:9f:5e:a9:87:c9:
                    63:ff:27:b7:29:4c:a4:8a:ff:1e:08:a3:45:2a:56:
                    ed:7d:99:29:ed:dc:3d:38:e7:3b:23:a2:30:a1:54:
                    24:5d:60:b9:25:fb:17:b1:6e:eb:32:2c:8f:42:90:
                    09:e0:17:fc:29:ac:7e:5c:ef:10:d6:b4:f7:ce:21:
                    9b:f4:dd:84:6b:de:45:a0:db:ee:f8:d4:e1:f9:01:
                    ee:3f:3c:bd:05:d6:df:8a:e5:67:32:31:bd:2a:5b:
                    5d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:3A:25:17:4F:EA:1C:26:46:73:22:C3:60:20:96:0F:8A:63:93:45
            X509v3 Authority Key Identifier:
                keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS207567.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.155.230.0/24
                IPv6:
                  2a0d:d904::/32

    Signature Algorithm: sha256WithRSAEncryption
         c3:16:e0:f1:46:79:b2:85:4d:07:c3:75:d9:84:c8:6d:f8:67:
         73:af:7d:e5:0f:f3:74:66:1c:43:be:6d:1d:9b:ea:1a:13:89:
         a1:0f:06:bd:31:5f:35:b6:0e:e4:9c:48:92:1c:dc:31:a5:99:
         7a:40:dc:ca:b0:f7:8c:31:7a:27:2d:85:10:53:f7:0c:68:ab:
         95:76:f1:79:f8:6c:b9:03:24:27:34:1c:d6:b9:d3:62:68:44:
         f3:91:29:53:c4:c6:47:26:41:5e:4f:87:56:a2:25:3e:f1:f6:
         6d:40:c2:ee:e3:6d:3e:fd:87:72:91:f9:d6:dd:77:bc:9e:f5:
         f6:b0:6f:77:a8:dc:78:86:d3:dc:ac:9e:19:25:05:e6:3d:77:
         fd:29:75:90:a8:44:46:66:64:7f:a8:bf:ac:9b:81:84:fb:fe:
         69:4d:c3:21:7c:8c:7c:59:91:6b:45:bd:fe:49:32:b8:71:6d:
         13:a9:76:29:e6:12:f9:f7:11:8d:58:69:91:26:10:1d:e5:e9:
         79:b7:42:15:4f:e5:9a:e8:f3:5e:23:d7:46:95:c2:2b:32:ac:
         72:37:55:d0:af:ac:ad:35:19:88:9c:5a:92:78:eb:3d:b5:7a:
         de:5d:6e:36:2a:44:a9:cd:13:6e:1f:94:61:57:89:d5:41:bc:
         4a:b8:5f:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 08:22:47 2026 by rpki-client