This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS43641.roa
File:                     AS43641.roa (raw, json)
Hash identifier:          NiRv+4QQz4FumckrhDfJb81xUawoEEj62xDpL7gJ9yI=
Subject key identifier:   69:B0:18:F9:D3:7F:44:5B:32:DA:43:E1:2B:1B:3B:A6:14:A4:FE:6F
Certificate issuer:       /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial:       61B4D787DB04BD8AA7945BDD4F2A5EAC46B92B06
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS43641.roa
Signing time:             Mon 10 Nov 2025 01:29:00 +0000
ROA not before:           Mon 10 Nov 2025 01:24:00 +0000
ROA not after:            Mon 09 Nov 2026 01:29:00 +0000
asID:                     43641
IP address blocks:        2a06:9f47::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Nov 2025 12:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:b4:d7:87:db:04:bd:8a:a7:94:5b:dd:4f:2a:5e:ac:46:b9:2b:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
        Validity
            Not Before: Nov 10 01:24:00 2025 GMT
            Not After : Nov  9 01:29:00 2026 GMT
        Subject: CN=69B018F9D37F445B32DA43E12B1B3BA614A4FE6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:51:1d:b7:2d:55:5c:4a:94:5b:e5:06:e1:cc:
                    aa:1b:86:4a:55:6a:48:a1:82:99:24:bf:fb:52:79:
                    39:df:73:90:86:0b:70:cd:b2:00:44:27:03:7d:17:
                    d0:9f:54:1b:96:75:7e:3d:c0:6a:99:43:7a:52:26:
                    63:a6:b0:9a:ad:7b:e1:95:da:c4:a7:2c:0c:f5:61:
                    7a:a6:8b:ea:d0:8d:f0:5e:a2:85:19:28:61:65:30:
                    d6:8f:71:92:dd:2d:55:c6:b1:15:10:d6:12:10:aa:
                    50:44:ce:a9:b5:c1:0a:db:32:03:cd:6c:27:d2:41:
                    45:1d:00:fd:da:ee:ca:02:6e:34:73:ab:4c:02:d0:
                    8c:e4:51:74:9f:5d:12:fd:a6:ff:80:b0:9f:33:68:
                    6e:85:c2:1f:41:c8:64:3a:ff:74:2f:e3:8d:c9:06:
                    63:94:6a:34:ad:ea:d9:c3:f7:9d:89:25:86:2b:c9:
                    dd:f3:da:32:b0:54:09:d9:f8:35:5f:c1:40:8c:50:
                    c9:71:56:5f:20:ba:14:fa:75:be:5f:63:60:52:31:
                    04:ea:f4:3d:39:ec:c7:b2:80:0b:bb:e5:72:c8:e6:
                    ab:10:4c:11:09:42:4b:69:02:fd:a2:02:1b:27:fc:
                    05:0c:2b:fd:8a:3c:2e:9e:97:3a:56:68:93:46:20:
                    e2:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:B0:18:F9:D3:7F:44:5B:32:DA:43:E1:2B:1B:3B:A6:14:A4:FE:6F
            X509v3 Authority Key Identifier:
                keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS43641.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:9f47::/32

    Signature Algorithm: sha256WithRSAEncryption
         23:41:82:db:bc:a2:65:86:ca:9c:c7:32:1b:7c:0f:74:5d:fa:
         48:39:36:2e:2a:d5:67:95:11:33:ee:dc:e7:03:a2:06:05:27:
         13:0a:8a:58:be:27:8a:1c:60:67:a9:9f:74:cc:3e:a1:d9:20:
         2b:20:d2:bf:72:39:6b:ce:b9:07:57:1c:46:8f:c0:63:f9:e0:
         02:1f:ca:35:99:87:cf:05:a2:5b:d4:f3:78:1c:13:7a:ac:c2:
         ec:65:94:11:02:8e:46:24:2b:f0:4f:a9:b9:34:91:50:92:4e:
         fa:8d:c1:de:7e:ae:99:9b:5e:72:15:fb:9a:78:85:69:75:fa:
         b8:4e:fc:1d:cf:2c:4d:4c:4d:55:cc:50:78:ae:25:e3:af:85:
         9f:43:a3:27:7e:83:90:6f:be:87:14:71:cb:70:53:0d:8a:77:
         64:25:8a:57:fc:e5:b6:ee:ba:30:4a:37:fb:be:b2:9b:e1:1d:
         9a:fd:4e:c8:05:ee:a5:7e:79:b7:af:7b:22:e0:f4:6a:12:ba:
         9d:07:df:b1:3a:19:91:18:fd:80:39:3f:04:73:14:ad:fd:52:
         e0:d9:81:37:fb:b2:17:d8:a2:c5:95:2b:bb:cd:15:6f:a7:79:
         9a:ff:42:37:2d:c6:aa:ba:4d:02:ae:96:42:a4:40:0f:de:5b:
         30:d5:d0:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 21:48:12 2025 by rpki-client