This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS208328.roa
File:                     AS208328.roa (raw, json)
Hash identifier:          aV4RzVhBfc3M/wmWE3czHtMsfzN7p6EXd8R6aKPG05k=
Subject key identifier:   8C:54:FC:7F:DD:53:59:D3:05:1F:2F:B1:67:94:43:C4:87:C4:34:44
Certificate issuer:       /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial:       2C80E773AAF4FA550DF3563AF357B3B391674490
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS208328.roa
Signing time:             Fri 07 Nov 2025 22:19:57 +0000
ROA not before:           Fri 07 Nov 2025 22:14:57 +0000
ROA not after:            Fri 06 Nov 2026 22:19:57 +0000
asID:                     208328
IP address blocks:        85.155.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Nov 2025 12:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:80:e7:73:aa:f4:fa:55:0d:f3:56:3a:f3:57:b3:b3:91:67:44:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
        Validity
            Not Before: Nov  7 22:14:57 2025 GMT
            Not After : Nov  6 22:19:57 2026 GMT
        Subject: CN=8C54FC7FDD5359D3051F2FB1679443C487C43444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:71:fc:a9:52:e2:9b:15:f8:9b:97:bb:71:c8:
                    4f:80:68:64:9a:1b:fc:e8:a4:d7:38:c8:c4:73:23:
                    88:73:39:24:87:e9:5a:7d:0b:72:df:4f:05:80:6c:
                    2a:67:9a:ea:64:1c:b3:6d:de:52:e5:c8:20:d0:a3:
                    1e:db:22:8d:82:1f:12:78:ea:4a:51:4e:1e:b5:ff:
                    e1:98:aa:62:0e:9b:58:90:f4:1c:a9:b1:65:e3:eb:
                    5f:1e:df:d4:9d:b1:b5:36:9d:ef:d1:eb:39:94:7b:
                    bf:92:67:b8:2b:e5:9b:55:c3:9b:38:20:64:e6:fd:
                    2e:f4:c1:b3:dd:9a:0b:ba:39:e1:d9:15:4e:6b:f1:
                    40:38:20:6a:e2:3f:8b:6a:da:22:88:a6:03:07:89:
                    58:b1:dc:10:04:39:db:4f:1d:bb:6b:50:c7:94:4b:
                    15:3b:86:7f:84:b4:f2:62:95:fa:d3:bc:fe:10:37:
                    1f:04:7e:2e:36:a5:ec:a4:27:ea:13:3e:72:6b:49:
                    5d:8a:97:07:a2:45:de:1d:e8:51:bf:76:56:c6:c5:
                    42:6f:73:bf:96:6a:d5:38:e5:cb:ae:dd:21:85:6a:
                    a9:a6:55:a7:98:a5:d5:2e:4b:27:94:d5:99:e7:dd:
                    0f:c4:bb:64:15:57:fe:08:c5:1d:d6:2b:04:e3:c2:
                    34:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:54:FC:7F:DD:53:59:D3:05:1F:2F:B1:67:94:43:C4:87:C4:34:44
            X509v3 Authority Key Identifier:
                keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS208328.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.155.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:fa:68:13:02:73:a0:ab:e9:6c:72:6e:e2:b3:5b:12:19:c1:
         e4:e1:2f:0c:dc:ce:1c:9c:40:64:04:47:bb:35:71:c5:65:0f:
         8c:bc:88:1a:18:47:97:38:98:90:f7:dd:62:4c:34:27:33:3e:
         b5:d0:8d:6f:4c:3a:3e:10:b0:98:32:3f:18:63:f9:6a:03:17:
         dc:e4:8e:a1:19:86:c9:bc:6b:dd:b2:b0:9f:fc:4f:f5:82:e6:
         f0:2a:4d:07:dc:df:88:63:8f:cc:2d:72:4d:19:ba:25:eb:95:
         9f:aa:58:9f:0c:c4:09:90:8f:24:be:e8:18:d9:95:63:98:88:
         d4:36:55:53:33:de:7a:28:76:34:cf:1e:19:12:6f:39:c1:88:
         f6:28:67:af:72:bd:8b:b9:41:88:67:be:d0:f1:60:a7:e8:8d:
         36:d8:65:79:42:c8:fe:d3:4f:48:00:a6:82:18:6e:53:88:21:
         43:ce:3b:24:b3:e7:b1:49:c8:20:41:e3:eb:4e:c6:d3:d4:ef:
         84:04:76:eb:d4:e0:69:c4:ec:bd:3c:69:29:a0:fb:a0:96:c1:
         cf:84:ac:25:71:06:e4:a0:c2:1d:70:9d:59:da:e6:4f:7a:5d:
         00:43:59:64:73:35:b4:97:28:43:b1:05:24:5c:ef:6a:71:5f:
         29:b8:45:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 21:48:12 2025 by rpki-client