This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS207513.roa
File:                     AS207513.roa (raw, json)
Hash identifier:          +w6rXXjYUMTy02LGl9LTjMnwnWWWgoJwx2v8qFk4FT0=
Subject key identifier:   5A:FA:2D:A8:FF:85:78:82:78:29:2C:BD:58:4A:38:51:1C:CD:61:85
Certificate issuer:       /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial:       027FDFDA60365A58E3574B56A35FE057478D0E51
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS207513.roa
Signing time:             Wed 14 Jan 2026 23:08:47 +0000
ROA not before:           Wed 14 Jan 2026 23:03:47 +0000
ROA not after:            Wed 13 Jan 2027 23:08:47 +0000
asID:                     207513
IP address blocks:        81.31.209.0/24 maxlen: 24
                          83.142.30.0/24 maxlen: 24
                          85.155.96.0/24 maxlen: 24
                          85.155.101.0/24 maxlen: 24
                          85.155.124.0/24 maxlen: 24
                          85.155.125.0/24 maxlen: 24
                          103.68.110.0/24 maxlen: 24
                          103.137.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:7f:df:da:60:36:5a:58:e3:57:4b:56:a3:5f:e0:57:47:8d:0e:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
        Validity
            Not Before: Jan 14 23:03:47 2026 GMT
            Not After : Jan 13 23:08:47 2027 GMT
        Subject: CN=5AFA2DA8FF85788278292CBD584A38511CCD6185
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:3f:32:96:f9:8f:1e:37:44:06:53:80:e3:05:
                    9e:d0:ce:90:4d:92:07:cd:3e:c0:b0:41:6f:f3:d9:
                    27:66:a3:de:e9:bf:fb:33:c3:bd:21:cd:cd:9c:4d:
                    58:f8:f2:7d:ec:3b:a3:2e:fe:0c:43:37:77:ce:85:
                    4e:23:1b:47:c9:95:f3:61:04:f3:5f:6c:69:34:47:
                    53:11:02:e5:56:c7:9f:0a:d7:5d:69:38:58:6c:59:
                    bc:f7:a7:3b:c4:6c:14:65:1c:10:d8:f2:7f:24:e3:
                    d1:3d:a7:78:df:f5:b4:f5:13:59:db:68:46:9b:68:
                    79:c8:d8:74:1a:7b:5e:28:a0:77:3f:ae:aa:ee:46:
                    99:e0:45:e4:ef:46:6d:68:19:0d:77:7b:6b:c7:dc:
                    e7:ab:3a:8c:cd:fa:52:32:b5:1e:5e:16:f6:ea:e6:
                    7f:fc:00:51:5f:70:b4:60:28:67:75:a7:62:76:d0:
                    f7:aa:67:8d:ea:56:71:8e:79:02:8c:f5:f0:45:8a:
                    5d:ed:80:b0:17:37:92:2c:39:f9:30:23:2b:fb:c5:
                    c9:24:9b:ae:68:26:4a:73:b8:4b:78:64:fa:23:ed:
                    41:5e:21:32:eb:6d:3a:88:1f:ed:b6:84:09:cf:01:
                    97:32:8b:f3:d5:58:cc:e4:26:9d:00:90:bf:fc:11:
                    b9:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:FA:2D:A8:FF:85:78:82:78:29:2C:BD:58:4A:38:51:1C:CD:61:85
            X509v3 Authority Key Identifier:
                keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS207513.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.31.209.0/24
                  83.142.30.0/24
                  85.155.96.0/24
                  85.155.101.0/24
                  85.155.124.0/23
                  103.68.110.0/24
                  103.137.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:f0:79:b1:6e:7e:3f:ce:6f:65:ce:8b:bc:e8:76:d9:bb:29:
         6d:7e:7e:14:5c:df:56:3d:18:ec:79:26:41:a1:f2:56:eb:e9:
         32:9b:80:9b:76:7a:08:06:98:ce:30:21:c4:dc:a5:2e:a8:e1:
         e7:cf:32:70:67:a3:a5:22:7b:65:e8:ea:5b:a7:a8:30:e0:57:
         be:62:81:20:b7:86:64:3e:94:a8:dc:91:18:e4:2b:b3:23:a4:
         9d:64:ba:6f:8d:e1:9d:85:0f:e7:c2:48:26:9e:34:b1:d8:57:
         1a:22:4d:94:77:e5:f3:42:94:4f:9a:48:30:c2:19:dd:e0:d5:
         c8:5c:a8:c7:ae:01:0e:24:83:c5:54:42:e1:38:1e:61:80:7e:
         dc:58:79:dd:63:f7:99:ff:c0:ca:77:0e:35:f2:fb:8c:55:c2:
         94:89:7c:06:d3:4a:4e:a7:79:aa:2d:8c:82:03:3d:70:9c:b1:
         bb:49:21:cf:81:6a:f8:d6:41:32:ff:09:26:c6:c1:3a:6a:d1:
         97:c1:86:19:9b:7b:58:6d:25:b9:46:1e:31:b5:db:ff:0e:77:
         f6:bb:6f:9f:08:c6:d8:a1:67:5a:da:ea:ae:3a:d4:d0:b0:95:
         d1:de:72:6e:3c:01:28:f5:4d:7f:d6:22:f8:42:14:6e:f4:dc:
         41:ce:52:8a
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgIUAn/f2mA2WljjV0tWo1/gV0eNDlEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDE0YjZmY2YyYjJjNjliZTA4NWU5Zjk1OTg3MmRjYmU4
ZWE1NDE3NzAeFw0yNjAxMTQyMzAzNDdaFw0yNzAxMTMyMzA4NDdaMDMxMTAvBgNV
BAMTKDVBRkEyREE4RkY4NTc4ODI3ODI5MkNCRDU4NEEzODUxMUNDRDYxODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPPzKW+Y8eN0QGU4DjBZ7QzpBN
kgfNPsCwQW/z2Sdmo97pv/szw70hzc2cTVj48n3sO6Mu/gxDN3fOhU4jG0fJlfNh
BPNfbGk0R1MRAuVWx58K111pOFhsWbz3pzvEbBRlHBDY8n8k49E9p3jf9bT1E1nb
aEabaHnI2HQae14ooHc/rqruRpngReTvRm1oGQ13e2vH3OerOozN+lIytR5eFvbq
5n/8AFFfcLRgKGd1p2J20PeqZ43qVnGOeQKM9fBFil3tgLAXN5IsOfkwIyv7xckk
m65oJkpzuEt4ZPoj7UFeITLrbTqIH+22hAnPAZcyi/PVWMzkJp0AkL/8EbntAgMB
AAGjggITMIICDzAdBgNVHQ4EFgQUWvotqP+FeIJ4KSy9WEo4URzNYYUwHwYDVR0j
BBgwFoAU0Utvzyssab4IXp+VmHLcvo6lQXcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNy9EMTRCNkZDRjJC
MkM2OUJFMDg1RTlGOTU5ODcyRENCRThFQTU0MTc3LmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMFV0dnp5c3NhYjRJWHAtVm1ITGN2bzZsUVhjLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC83L0FT
MjA3NTEzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEH
AQH/BDQwMjAwBAIAATAqAwQAUR/RAwQAU44eAwQAVZtgAwQAVZtlAwQBVZt8AwQA
Z0RuAwQAZ4nBMA0GCSqGSIb3DQEBCwUAA4IBAQAI8Hmxbn4/zm9lzou86HbZuylt
fn4UXN9WPRjseSZBofJW6+kym4CbdnoIBpjOMCHE3KUuqOHnzzJwZ6OlIntl6Opb
p6gw4Fe+YoEgt4ZkPpSo3JEY5CuzI6SdZLpvjeGdhQ/nwkgmnjSx2FcaIk2Ud+Xz
QpRPmkgwwhnd4NXIXKjHrgEOJIPFVELhOB5hgH7cWHndY/eZ/8DKdw418vuMVcKU
iXwG00pOp3mqLYyCAz1wnLG7SSHPgWr41kEy/wkmxsE6atGXwYYZm3tYbSW5Rh4x
tdv/Dnf2u2+fCMbYoWda2uquOtTQsJXR3nJuPAEo9U1/1iL4QhRu9NxBzlKK
-----END CERTIFICATE-----
Generated at Sun Jan 25 08:52:51 2026 by rpki-client