This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS50104.roa
File:                     AS50104.roa (raw, json)
Hash identifier:          9u1051gK+QCu5fevICFm1tGzitgiz8M2wEoONkRg6Xg=
Subject key identifier:   B1:04:42:8E:FE:5F:54:3E:41:82:20:66:B7:94:31:3D:6A:C9:EA:F9
Certificate issuer:       /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial:       20FBFD7F64079417FFD5B2D4C04BEDCB3AD4FEBD
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS50104.roa
Signing time:             Mon 10 Nov 2025 05:40:35 +0000
ROA not before:           Mon 10 Nov 2025 05:35:35 +0000
ROA not after:            Mon 09 Nov 2026 05:40:35 +0000
asID:                     50104
IP address blocks:        85.155.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Nov 2025 12:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:fb:fd:7f:64:07:94:17:ff:d5:b2:d4:c0:4b:ed:cb:3a:d4:fe:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
        Validity
            Not Before: Nov 10 05:35:35 2025 GMT
            Not After : Nov  9 05:40:35 2026 GMT
        Subject: CN=B104428EFE5F543E41822066B794313D6AC9EAF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:3e:3a:d2:26:33:a8:a7:cd:12:1b:1f:15:e4:
                    fe:39:7f:82:41:98:65:48:71:94:3a:ae:6f:99:15:
                    be:3b:71:ac:dc:1d:46:9b:20:11:fa:fd:8a:6d:8e:
                    c9:53:cb:3a:81:a4:74:99:e6:00:dc:93:90:34:79:
                    9a:31:70:e2:28:dd:0d:8c:89:35:5b:3a:71:d5:d2:
                    7e:49:b1:60:8b:1b:8f:2d:96:64:75:37:05:62:0d:
                    48:30:e3:42:43:2a:b6:5e:e6:da:db:ee:0f:55:ac:
                    a2:5f:fc:5e:e5:6d:c8:cb:33:68:59:75:c9:68:66:
                    f1:e9:dc:6e:30:7e:f9:ac:9e:94:b8:38:ed:cc:a5:
                    ef:f6:e7:a0:5f:66:6b:f0:ed:15:a6:f8:86:b0:3a:
                    bf:dc:31:5d:0c:a0:9a:ad:ff:8f:d7:6e:d9:2e:b2:
                    fd:be:01:21:c2:bd:f2:54:d9:ba:00:c8:27:2f:bf:
                    aa:61:26:2a:f3:0e:e3:92:d0:7c:10:b7:39:f8:d8:
                    47:cd:db:56:99:58:bb:b5:d3:ac:0c:b7:dc:50:87:
                    5c:e3:9a:d2:ea:55:1f:fb:f9:37:d9:b7:2a:45:62:
                    62:69:eb:a7:4b:71:65:c1:40:5e:8e:b7:b9:0f:86:
                    37:20:24:4d:3d:9c:b1:5e:1d:a4:9e:14:7c:d7:23:
                    5d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:04:42:8E:FE:5F:54:3E:41:82:20:66:B7:94:31:3D:6A:C9:EA:F9
            X509v3 Authority Key Identifier:
                keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS50104.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.155.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:bf:ad:5a:7f:e5:9c:43:44:f7:f0:80:c9:a0:db:98:d1:4b:
         38:93:48:e2:ec:55:95:08:0b:89:45:ff:5d:5a:59:46:a7:2e:
         7d:f7:b0:29:f8:cf:ce:72:8a:26:1b:92:08:70:cc:56:69:af:
         bf:e6:ba:88:11:3b:3c:9e:78:5d:aa:cc:d4:71:01:e8:1b:52:
         fe:f3:6c:04:b7:6c:89:a0:9b:e6:ec:0e:ab:f9:39:6d:f0:5c:
         d4:b7:ab:38:61:4b:03:85:1c:41:ce:be:79:6c:45:b8:85:2d:
         f4:6e:be:ac:ce:99:38:dd:4b:70:de:4e:a9:d2:7e:f7:b0:53:
         a5:3b:a5:9c:85:d6:f2:a7:a2:ba:7a:34:41:0f:b9:ad:eb:5b:
         d8:dd:e1:8d:89:e8:54:3c:51:88:b6:27:65:ba:32:31:b5:5f:
         92:f9:ec:2b:9b:7f:88:a3:b2:78:ff:fe:2d:ab:6b:e9:92:4b:
         e4:13:58:2a:98:ab:ce:d4:47:27:b4:c5:3a:c6:5c:94:89:3c:
         61:3b:39:85:c2:1c:be:aa:3f:32:cf:35:f0:a1:8b:33:b7:a7:
         a3:b6:16:ca:26:3f:5d:4f:7c:e7:34:99:7b:a9:dc:94:74:7b:
         a9:b4:95:5f:b5:ba:df:17:2a:c0:5b:b4:63:23:8f:d9:39:51:
         c9:6d:ad:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 21:48:13 2025 by rpki-client