This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS215147.roa
File:                     AS215147.roa (raw, json)
Hash identifier:          v1/4q30e9ziZVm67mrMbt+ie9VaiJBb8Qx5R1Yg6u0o=
Subject key identifier:   43:06:C1:44:94:99:A6:FF:BA:DC:CE:E3:8D:8C:62:CC:F5:70:2F:93
Certificate issuer:       /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial:       2B8B14B2D5687254E4AC8B8409F39515CA6FAD75
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS215147.roa
Signing time:             Mon 15 Dec 2025 09:48:17 +0000
ROA not before:           Mon 15 Dec 2025 09:43:17 +0000
ROA not after:            Mon 14 Dec 2026 09:48:17 +0000
asID:                     215147
IP address blocks:        111.235.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 07:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:8b:14:b2:d5:68:72:54:e4:ac:8b:84:09:f3:95:15:ca:6f:ad:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
        Validity
            Not Before: Dec 15 09:43:17 2025 GMT
            Not After : Dec 14 09:48:17 2026 GMT
        Subject: CN=4306C1449499A6FFBADCCEE38D8C62CCF5702F93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:36:5b:36:25:27:67:c7:7c:f5:2d:fd:10:18:
                    a8:b4:83:e6:19:4d:f4:a3:64:f0:40:e1:26:97:d5:
                    76:3b:05:ec:34:f3:09:7f:f7:1a:c1:8a:62:48:96:
                    dd:72:5d:a5:bd:bc:c6:87:36:08:92:94:c7:ce:3a:
                    84:14:8d:04:59:5e:a5:d7:f0:18:99:37:31:10:ee:
                    6a:14:12:26:a5:09:bc:d3:03:8b:e4:0d:d2:7c:b5:
                    af:1f:da:73:7d:6f:7c:34:9a:44:98:a6:80:ba:f7:
                    33:ee:06:d8:19:59:0a:19:6d:57:b4:e7:16:ec:de:
                    95:08:2e:60:a9:a6:d1:e3:18:75:c8:f2:09:ca:09:
                    80:bc:f2:fc:e1:f1:47:8d:95:8e:cf:1c:53:33:60:
                    f5:e7:72:fb:3e:47:8c:73:f2:22:45:f6:f5:51:70:
                    9e:49:69:78:75:a9:09:8f:17:bc:78:4f:af:a3:88:
                    2d:61:81:7d:9c:b4:e6:f5:99:3d:4f:6e:a6:53:6e:
                    15:cc:57:4d:83:ab:27:b8:c4:b1:e5:95:92:c9:77:
                    f5:c2:1c:4c:3e:03:7e:fc:cf:b5:51:02:97:c6:f7:
                    98:dd:13:91:a6:0c:d0:8b:d4:c5:ac:06:81:5c:f7:
                    ea:98:a8:af:0f:a9:d1:f3:6b:26:5a:00:1c:34:7d:
                    a9:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:06:C1:44:94:99:A6:FF:BA:DC:CE:E3:8D:8C:62:CC:F5:70:2F:93
            X509v3 Authority Key Identifier:
                keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS215147.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.235.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:ca:e7:b9:78:9a:97:a2:cd:c9:de:e8:8d:fd:80:12:ff:c2:
         76:c7:63:bf:20:96:28:2f:d6:2f:53:f9:c9:12:6c:15:37:05:
         19:c9:98:00:64:ab:74:13:7e:35:6a:da:e5:33:32:64:9d:fb:
         3e:8a:b3:cb:60:9d:12:50:10:7f:cf:de:5d:ba:6e:b8:74:ee:
         63:6e:d4:1f:8d:39:0d:4f:7e:68:d3:62:30:96:45:36:e4:2d:
         46:12:2c:14:1f:d2:6c:2d:79:46:3f:50:8f:65:18:be:b2:2b:
         8b:5e:e5:b3:a2:08:45:64:7e:72:bb:6e:5f:77:cf:c8:d0:54:
         c7:93:c7:d4:9c:d9:e3:00:80:1d:88:f8:36:44:5c:a2:2b:5a:
         0c:dc:c6:6c:2b:95:6e:da:3d:02:80:7c:b2:57:88:ca:8c:e0:
         9a:98:15:f2:97:dd:2a:9e:c2:5e:12:12:25:2f:61:56:25:3a:
         04:3b:19:25:44:f6:e1:b9:4c:a4:e0:9e:99:a8:c9:f8:b9:39:
         b2:a6:ea:74:51:7b:94:76:17:cf:89:cd:8e:94:e5:c0:4a:18:
         3f:49:f9:4a:d2:13:1d:5d:21:18:8a:c0:7e:7b:d1:1a:67:9a:
         eb:33:d4:ac:6f:d4:83:a8:b1:97:fa:4d:32:be:c6:9a:3c:59:
         dd:f8:7b:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 12:02:39 2025 by rpki-client