This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS270439.roa
File:                     AS270439.roa (raw, json)
Hash identifier:          32zvefuGzIExkBkC2iNtm/bL/EZJ15cx8d4U3OWhmNM=
Subject key identifier:   4E:B6:4E:D5:54:1D:A0:F6:BA:0A:90:B9:FB:BA:08:F5:C3:F7:2B:DF
Certificate issuer:       /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial:       60A24394E644FB651CA1AD9306AC3EC685E29DC3
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS270439.roa
Signing time:             Thu 13 Nov 2025 09:41:42 +0000
ROA not before:           Thu 13 Nov 2025 09:36:42 +0000
ROA not after:            Thu 12 Nov 2026 09:41:42 +0000
asID:                     270439
IP address blocks:        85.155.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Nov 2025 12:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:a2:43:94:e6:44:fb:65:1c:a1:ad:93:06:ac:3e:c6:85:e2:9d:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
        Validity
            Not Before: Nov 13 09:36:42 2025 GMT
            Not After : Nov 12 09:41:42 2026 GMT
        Subject: CN=4EB64ED5541DA0F6BA0A90B9FBBA08F5C3F72BDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:93:3c:c0:b7:9a:63:4c:ba:b0:47:90:d7:09:
                    43:35:0c:8d:a8:76:51:5a:35:1c:a5:99:a3:25:76:
                    ae:e8:3f:a0:32:99:66:35:c9:3e:87:c3:16:ea:ce:
                    1f:33:4f:44:f7:7b:00:43:3e:29:e3:12:32:e8:55:
                    c4:12:59:1a:21:91:31:1d:bd:82:ed:88:bc:23:9a:
                    1e:82:42:f7:bb:f9:14:86:33:81:be:29:0a:88:e7:
                    85:65:5f:cd:b1:04:fa:ec:28:fd:11:b2:26:5e:86:
                    8e:10:6d:52:f9:bf:69:55:e6:c9:b8:df:9e:14:06:
                    fe:67:63:c2:4d:81:f4:72:2e:7e:b7:14:94:c4:f5:
                    f0:54:aa:39:4f:78:a0:77:5e:5f:ad:ff:5f:11:ac:
                    dd:4f:37:2a:92:5b:10:60:2a:ec:3f:a6:67:66:7f:
                    10:92:38:7e:7f:6f:9c:b8:00:fb:df:1f:77:db:c6:
                    72:c5:a6:94:6a:28:df:d7:1d:46:2a:31:93:0a:73:
                    43:64:75:fa:b4:94:77:e7:c1:4f:08:65:28:36:a3:
                    0c:65:80:4b:15:5a:7e:e5:1e:79:bd:37:ec:6f:dc:
                    25:c8:fb:b4:e6:bb:41:3d:a9:1b:3e:ba:f1:9b:2a:
                    dd:b7:5e:f9:00:b1:08:f1:e7:ab:66:b2:3a:ab:4d:
                    f2:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:B6:4E:D5:54:1D:A0:F6:BA:0A:90:B9:FB:BA:08:F5:C3:F7:2B:DF
            X509v3 Authority Key Identifier:
                keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS270439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.155.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:60:ba:34:70:1f:6a:41:df:cf:a7:6d:3b:24:d6:23:cf:64:
         15:89:68:10:68:af:9b:ee:41:bb:4f:fc:2f:1f:72:c0:cd:a3:
         78:a0:2d:7e:26:52:6a:74:34:d8:24:2a:8a:d1:d6:fa:4d:10:
         14:f5:c3:e3:9f:a2:73:58:37:cc:47:bb:66:c6:d1:a2:47:69:
         ea:e8:cb:f8:e5:83:99:10:4a:59:a8:a9:35:1b:13:46:b0:a8:
         00:6e:29:82:17:3d:1e:4d:c3:d7:df:e1:06:f0:9e:af:71:06:
         a2:b0:7d:c7:b2:07:a1:4b:0d:ee:8f:2a:7d:a8:9b:c4:09:4f:
         e1:68:56:98:d0:a6:90:87:7b:33:5d:42:bf:d1:1c:a2:fb:46:
         56:25:14:07:d4:73:ae:bf:2b:bf:cf:5d:f3:a0:2e:4c:df:37:
         17:5e:50:75:47:2e:65:e0:a2:0d:9f:17:af:42:46:b9:8b:60:
         2c:b2:14:6e:5a:64:64:47:21:7a:ff:6a:30:dc:d0:91:6d:32:
         30:29:10:43:61:96:64:26:47:b2:be:78:57:aa:e7:02:17:b8:
         af:16:18:03:14:47:2e:62:d5:d1:52:03:db:1d:25:60:7d:6b:
         16:54:f4:29:4a:f6:d1:78:1b:60:c9:6e:72:a1:9b:29:5a:da:
         db:24:7b:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 21:48:12 2025 by rpki-client