This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS203588.roa
File:                     AS203588.roa (raw, json)
Hash identifier:          bB15G/M/kuYIrBEfgMhRxvVseheEkhpPQMou1Q++ERE=
Subject key identifier:   90:E5:1D:BF:5A:BF:58:3E:C6:CC:9A:C5:C8:20:E2:EC:1A:47:DD:40
Certificate issuer:       /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial:       68BE60DEA6CA05F96772C2CD3261E954FAC57C52
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS203588.roa
Signing time:             Thu 22 Jan 2026 13:29:28 +0000
ROA not before:           Thu 22 Jan 2026 13:24:28 +0000
ROA not after:            Thu 21 Jan 2027 13:29:28 +0000
asID:                     203588
IP address blocks:        85.155.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:be:60:de:a6:ca:05:f9:67:72:c2:cd:32:61:e9:54:fa:c5:7c:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
        Validity
            Not Before: Jan 22 13:24:28 2026 GMT
            Not After : Jan 21 13:29:28 2027 GMT
        Subject: CN=90E51DBF5ABF583EC6CC9AC5C820E2EC1A47DD40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:ee:aa:6c:3a:85:27:b4:8c:4a:b4:3b:44:9c:
                    30:8b:a3:d0:c5:4f:5c:7f:18:65:a0:25:a8:7f:78:
                    52:d2:91:7e:8a:2f:da:cf:92:7d:86:99:1a:9d:4f:
                    ab:1f:a2:f0:78:6b:ac:3a:73:d1:95:0f:a1:1d:12:
                    2a:e4:65:e9:b0:73:0a:74:b4:59:62:2f:33:53:c5:
                    ab:76:8c:62:06:1a:6c:6f:d2:01:79:58:c7:1f:17:
                    be:d2:40:5f:6d:9e:bf:7f:9c:92:e8:26:ed:4e:e7:
                    65:2b:14:60:87:0b:a3:d8:7c:d1:67:e8:e2:a1:fb:
                    55:a6:f3:6f:99:ea:4e:15:12:f7:40:90:01:9b:cc:
                    fe:73:c2:b8:05:35:d2:e1:96:86:87:64:60:91:18:
                    48:3f:7c:14:ad:63:9f:ae:d3:45:e7:bb:6e:38:b9:
                    f8:71:d0:8c:2a:54:5b:69:1c:a0:8e:29:8e:e1:db:
                    75:92:81:dc:5c:c9:a0:93:18:1b:15:2f:19:3b:5c:
                    a6:47:ea:ba:6e:a4:a3:17:33:81:66:b8:e2:c8:bc:
                    d5:dd:53:1b:85:95:de:4f:52:96:2d:b8:38:32:4c:
                    68:29:22:29:f2:2f:60:2e:aa:f3:4b:56:d1:b3:ee:
                    a1:e7:a5:72:59:9c:9d:52:df:13:3d:57:fe:6d:58:
                    d0:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:E5:1D:BF:5A:BF:58:3E:C6:CC:9A:C5:C8:20:E2:EC:1A:47:DD:40
            X509v3 Authority Key Identifier:
                keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS203588.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.155.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:86:cd:ef:5a:05:ad:12:3a:df:cd:1e:2e:95:8b:be:4d:b4:
         6e:61:4d:a9:0d:6f:95:bf:59:3d:60:b0:68:c5:1f:be:d7:c9:
         72:b9:06:44:99:ad:a5:19:c5:ab:d5:a1:71:7a:67:8d:2c:5d:
         64:bb:3c:89:44:76:74:15:89:81:44:01:a7:3f:2a:40:05:34:
         2c:cf:25:28:f8:76:5b:00:10:6f:9f:64:d6:46:40:1a:48:d0:
         96:f7:79:8b:9a:ce:4b:7f:6b:4e:1c:ef:71:63:8e:3f:63:c8:
         15:44:72:a1:c8:a0:a5:a2:61:18:8f:56:cd:d6:77:29:49:47:
         62:f0:27:df:50:bc:1c:d6:84:1b:0d:22:13:0d:96:2b:3d:02:
         85:57:00:48:f4:92:66:ce:0f:95:96:0f:34:20:27:23:79:6f:
         f2:81:98:19:0d:bf:ed:b2:61:d8:8f:bb:43:6a:a2:c3:1f:ad:
         98:a0:78:15:84:ab:5e:16:b2:db:4d:0e:ca:0a:1b:91:43:7e:
         de:71:22:c8:e4:98:45:27:09:3c:3b:eb:63:35:e2:e7:a0:c3:
         44:cb:4a:d2:19:03:97:19:bd:e9:d8:40:68:f2:22:4e:cf:0a:
         73:0a:b2:4e:76:b1:80:7f:f4:e1:2d:b1:b8:c9:ac:fb:a7:d5:
         4b:8e:da:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:10:33 2026 by rpki-client