This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS204044.roa
File:                     AS204044.roa (raw, json)
Hash identifier:          VH2scQ5uM7IhN3dGwQSDVde8Qhph/UUjVPe4qRGtg84=
Subject key identifier:   6C:3C:40:9C:FC:86:EA:DA:6F:A9:A4:0E:C3:F3:C3:5E:D1:B6:34:E7
Certificate issuer:       /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial:       4E3DD75596275257E3001F34F2DCAB22D9AB3A97
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS204044.roa
Signing time:             Wed 26 Nov 2025 20:53:43 +0000
ROA not before:           Wed 26 Nov 2025 20:48:43 +0000
ROA not after:            Wed 25 Nov 2026 20:53:43 +0000
asID:                     204044
IP address blocks:        185.90.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:3d:d7:55:96:27:52:57:e3:00:1f:34:f2:dc:ab:22:d9:ab:3a:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
        Validity
            Not Before: Nov 26 20:48:43 2025 GMT
            Not After : Nov 25 20:53:43 2026 GMT
        Subject: CN=6C3C409CFC86EADA6FA9A40EC3F3C35ED1B634E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ae:21:a9:0a:56:22:40:f2:4c:d1:1c:99:c5:
                    d8:05:01:60:b7:c0:34:98:ac:62:fd:c6:97:b3:94:
                    e6:01:f3:fd:1f:87:fc:d6:45:44:69:b0:3c:9c:b0:
                    2b:da:85:9e:c3:da:d7:1b:13:99:8f:a6:ca:00:7b:
                    c7:bf:1a:47:b1:bf:2f:f0:64:65:fb:4c:2f:41:1f:
                    e0:dd:59:76:96:40:0f:94:42:97:01:d6:04:ea:b1:
                    f1:2d:d5:16:10:72:2b:a5:2c:dd:e1:93:a1:5b:76:
                    3d:e2:fb:e6:83:36:cb:42:53:02:ea:15:6c:43:39:
                    89:03:93:7d:b9:e8:aa:fd:fe:de:7c:9b:f9:58:ed:
                    9f:8a:be:24:56:85:21:c7:b6:d3:fc:f6:98:6a:71:
                    e9:4a:5a:e9:38:8d:87:d6:2b:3c:21:33:52:00:49:
                    90:bb:c7:cc:40:45:59:14:28:1b:bf:48:dc:a4:25:
                    0b:c6:94:fa:4f:31:8b:20:4d:dc:cf:19:d9:ae:1e:
                    ab:27:61:db:0c:c1:9b:81:28:12:0d:b2:7f:1d:d9:
                    10:4c:a5:44:a1:67:d2:e0:5c:21:8d:15:50:11:96:
                    39:e9:88:ac:24:95:02:b0:12:85:d7:ee:2d:7d:56:
                    24:ab:d2:05:79:2b:b7:eb:45:e4:87:88:49:68:a8:
                    03:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:3C:40:9C:FC:86:EA:DA:6F:A9:A4:0E:C3:F3:C3:5E:D1:B6:34:E7
            X509v3 Authority Key Identifier:
                keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS204044.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.90.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:4e:60:99:41:aa:17:ef:d3:05:74:b5:47:24:e3:b9:6e:84:
         1b:de:33:fc:b0:da:9a:c9:36:69:b1:38:1f:bf:80:4d:5f:c6:
         b1:9d:e1:11:86:44:6d:1d:f9:a2:49:6f:a6:7a:67:92:c3:71:
         a2:b2:a0:88:00:59:25:8a:7e:f9:bd:89:b0:0d:b3:90:ad:57:
         12:00:51:4a:7d:d9:85:3b:a5:5e:5d:85:fa:69:75:19:dd:d2:
         cf:44:5c:94:17:56:bf:82:72:44:e8:27:72:68:57:ba:ee:af:
         a2:69:ba:49:64:2c:ae:45:cd:dc:a3:19:0e:e9:6f:86:42:61:
         48:07:58:4b:67:be:88:77:0c:4d:0a:79:9d:78:1f:d3:df:2c:
         b9:09:82:03:dd:86:aa:70:76:63:66:f7:83:cc:d8:23:b7:c5:
         df:91:ba:fa:d4:77:86:2b:02:a5:6e:5d:cf:d7:1c:d8:6b:91:
         10:e4:7c:58:94:1e:38:61:ee:6c:9f:e8:64:f9:69:d8:df:d7:
         b8:e4:da:82:7a:ef:9a:2c:de:24:8e:a8:3f:13:83:45:21:d5:
         bf:f5:d4:aa:0d:76:e1:76:79:76:5e:5d:dd:b8:64:56:ac:73:
         d2:5b:57:be:2a:38:0f:fa:03:d6:47:5f:b9:e2:09:bc:44:06:
         dd:65:5f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:54:17 2025 by rpki-client