This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS135103.roa
File:                     AS135103.roa (raw, json)
Hash identifier:          UxtrWlJ+bX0dHMZyjOyIJUxqKH4V6vLnbaygalzXdPU=
Subject key identifier:   66:9D:58:20:F5:32:11:89:AF:A0:9D:42:57:9E:A6:E9:AC:0A:2B:1C
Certificate issuer:       /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial:       1CFC8B041E7FD39AC2068060E6DF8FB6913F63A4
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS135103.roa
Signing time:             Sun 30 Nov 2025 19:26:21 +0000
ROA not before:           Sun 30 Nov 2025 19:21:21 +0000
ROA not after:            Sun 29 Nov 2026 19:26:21 +0000
asID:                     135103
IP address blocks:        2a06:9f45::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:fc:8b:04:1e:7f:d3:9a:c2:06:80:60:e6:df:8f:b6:91:3f:63:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
        Validity
            Not Before: Nov 30 19:21:21 2025 GMT
            Not After : Nov 29 19:26:21 2026 GMT
        Subject: CN=669D5820F5321189AFA09D42579EA6E9AC0A2B1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:0d:ff:41:07:df:84:9f:1f:2e:3c:ae:14:bc:
                    f0:6f:1a:23:77:41:3a:be:e9:e1:09:87:0c:1f:ee:
                    bb:4b:4c:78:2a:62:91:29:42:24:40:0e:09:3a:36:
                    a2:f8:7f:b0:8f:53:2f:dc:c7:5b:a0:36:f5:64:89:
                    81:22:ce:ac:c4:48:08:41:5b:72:91:de:d2:ca:c1:
                    48:84:d0:e7:04:00:1b:fc:1c:6c:35:8e:d7:89:ab:
                    b6:4e:86:a4:e3:47:ee:0c:89:47:c9:31:d5:7e:15:
                    72:49:c6:ab:3f:44:64:a9:0e:c6:7b:5e:0a:9d:fd:
                    b5:86:12:f4:f7:db:9f:63:d8:3d:fb:f6:bf:2d:02:
                    0f:b3:8f:dc:55:73:48:47:c0:04:50:67:11:d6:79:
                    f5:72:83:77:d7:e7:7b:cb:23:d4:7b:49:a6:c2:58:
                    3a:f8:aa:81:fb:cf:ab:c6:a2:ff:93:59:c7:9d:c2:
                    3a:68:ad:f7:5d:62:ec:1a:a7:02:dc:64:43:f8:3b:
                    c1:c2:f6:30:ed:ce:26:57:4b:f4:5c:8f:bf:39:b9:
                    a8:12:63:80:e9:f9:cc:9f:82:bd:93:2a:ff:10:64:
                    b1:68:21:1d:97:c5:5d:c8:69:10:b3:bf:32:6c:36:
                    79:d5:72:dc:58:a5:02:e4:e8:8c:fc:7f:b3:09:bc:
                    0b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:9D:58:20:F5:32:11:89:AF:A0:9D:42:57:9E:A6:E9:AC:0A:2B:1C
            X509v3 Authority Key Identifier:
                keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS135103.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:9f45::/32

    Signature Algorithm: sha256WithRSAEncryption
         ad:53:bc:e5:a8:8f:34:81:d7:b5:60:7c:7d:7b:61:76:ce:cd:
         6d:4c:f3:9b:fe:0f:f3:f9:06:31:9b:9d:97:af:0d:f1:78:65:
         2c:0c:81:ab:02:09:bf:59:ec:de:b9:8e:85:0d:37:db:d5:e8:
         95:00:13:da:41:ad:d1:2d:2e:b8:94:d6:e1:5c:55:dc:4c:8b:
         c8:e9:21:35:89:c0:52:0f:7d:9e:1b:fb:4f:b2:1a:9d:d1:15:
         1f:cb:fc:2f:6e:e7:b7:7a:a2:f3:db:65:fa:29:e1:3a:13:02:
         1c:ed:dd:48:82:42:9c:c2:31:81:8c:57:72:10:5f:a4:2e:ba:
         94:fb:76:08:af:93:50:1c:ed:77:98:4a:e8:44:e2:71:66:10:
         bc:a5:76:88:23:d6:02:90:c5:b9:d0:1f:9c:c7:6f:60:ef:ad:
         11:2f:85:2a:62:96:87:a2:84:ba:09:25:5e:69:6e:07:30:17:
         ab:ab:f8:7f:ed:dc:37:52:10:08:8a:74:5b:a7:4c:7a:1f:e4:
         59:10:7b:85:5a:a0:55:e0:26:6c:27:7e:83:ee:8d:24:44:ff:
         c7:dd:6d:f8:be:b9:fd:08:5f:22:4d:ae:20:39:99:c1:d2:a0:
         c8:c5:8d:8b:17:da:ee:67:96:2f:b4:79:b4:36:cf:be:9a:d2:
         be:6a:68:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:54:12 2025 by rpki-client