This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS151817.roa
File:                     AS151817.roa (raw, json)
Hash identifier:          eT1RVKgd2heYlwJgBX8/WbAhx8sbD8hNmxDrbk3RZAw=
Subject key identifier:   AC:FC:E7:B8:4A:57:50:87:EC:A5:FC:B7:5B:29:48:38:84:77:DA:69
Certificate issuer:       /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial:       1CD82149D8402812D7C106EC83C836076A49074B
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS151817.roa
Signing time:             Wed 26 Nov 2025 10:40:52 +0000
ROA not before:           Wed 26 Nov 2025 10:35:52 +0000
ROA not after:            Wed 25 Nov 2026 10:40:52 +0000
asID:                     151817
IP address blocks:        103.68.108.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:d8:21:49:d8:40:28:12:d7:c1:06:ec:83:c8:36:07:6a:49:07:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
        Validity
            Not Before: Nov 26 10:35:52 2025 GMT
            Not After : Nov 25 10:40:52 2026 GMT
        Subject: CN=ACFCE7B84A575087ECA5FCB75B2948388477DA69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:06:5a:d8:00:02:07:57:99:ef:bd:d8:af:de:
                    13:03:62:d2:20:1a:76:24:87:8a:ad:99:b0:a6:a5:
                    5a:07:ea:77:b3:e7:23:48:8f:6c:7c:29:61:29:00:
                    c4:f5:19:b3:bf:39:6f:67:90:99:ac:55:84:e4:ee:
                    9c:43:59:e1:23:4a:dc:11:fa:b0:61:b3:39:d2:17:
                    fa:25:ce:40:37:f8:c5:25:1c:ef:bb:27:3b:fc:34:
                    47:e0:80:b3:5e:93:f2:a3:69:e7:06:de:8c:c1:dc:
                    39:73:cb:8b:3a:21:bc:6c:7b:78:5b:14:3e:13:db:
                    2f:08:46:c9:e4:dd:4a:2a:10:35:98:9c:1d:7f:1d:
                    71:18:58:0a:2e:ed:75:3c:e7:3e:1c:65:9b:ab:96:
                    d5:8b:d2:ff:e3:0a:18:38:ef:96:7b:2d:c1:1b:46:
                    8e:9d:a8:ad:f6:b1:91:21:cf:41:9d:c1:6f:76:5f:
                    f7:9f:97:26:27:fb:5f:7b:82:5e:95:60:6f:65:ba:
                    17:67:6d:aa:8d:5e:b2:9b:13:98:f8:5a:c1:b6:7a:
                    cb:5b:2f:9c:8c:b7:34:ab:80:28:5e:b6:1d:a2:81:
                    08:92:4c:e8:c2:05:e9:b7:63:60:e2:3d:3b:bc:3c:
                    2d:7b:db:94:4c:be:96:b3:5e:54:b6:c2:5a:aa:e2:
                    0b:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:FC:E7:B8:4A:57:50:87:EC:A5:FC:B7:5B:29:48:38:84:77:DA:69
            X509v3 Authority Key Identifier:
                keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS151817.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.68.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:de:59:eb:0e:79:f1:3a:11:c1:40:0c:64:ed:6a:67:99:98:
         22:eb:4b:f8:67:26:bb:2a:3b:bd:cf:62:05:22:4a:b8:6d:57:
         f8:0b:28:5e:1e:3e:c7:36:bb:8e:2c:51:15:d2:3a:33:54:97:
         47:13:a2:f8:6a:b8:6a:f3:36:8c:8e:1c:a8:fe:8d:c0:c9:3f:
         ce:77:bc:22:3a:e8:94:56:e6:3a:86:80:54:d6:4a:84:aa:22:
         bd:67:66:d6:e9:81:62:21:77:55:9f:aa:39:7c:27:81:0e:21:
         69:94:d2:1e:0d:5f:f8:d5:0e:94:39:5c:69:ad:0d:d8:28:b4:
         aa:db:29:0a:9f:32:e2:0b:ef:ea:ac:0a:fe:96:5e:d4:48:f3:
         1a:46:bf:cf:a2:5e:6d:77:9f:f7:7d:da:a7:c4:f4:c0:70:7e:
         41:21:9a:6c:aa:c8:f2:22:a8:62:dd:4d:7d:0e:01:c1:4b:77:
         ae:a0:b6:0f:c9:3d:49:63:f5:21:ae:db:2f:92:55:7e:ed:25:
         0b:1c:e7:a7:d0:d5:d4:70:f1:28:bd:8f:2f:80:c3:5f:46:f2:
         45:bd:4b:6e:d7:b4:c7:5f:cf:53:f1:ab:7d:cd:fa:38:0e:8b:
         50:77:18:a3:c5:90:59:f2:0c:9f:82:5c:e9:5e:80:10:1b:1f:
         44:00:56:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:39:06 2025 by rpki-client