This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS207513.roa
File:                     AS207513.roa (raw, json)
Hash identifier:          cGX0D7+kEaME+2y47hU3sR8EZ4OREtt9ncYe0oGma+c=
Subject key identifier:   DE:8E:8F:7B:C5:3E:C9:6B:23:81:30:C4:16:24:6D:89:72:82:02:60
Certificate issuer:       /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial:       7FBDAA59CF7CCF62F9CF938D7DE76F61CE6152D0
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS207513.roa
Signing time:             Wed 26 Nov 2025 23:01:33 +0000
ROA not before:           Wed 26 Nov 2025 22:56:33 +0000
ROA not after:            Wed 25 Nov 2026 23:01:33 +0000
asID:                     207513
IP address blocks:        81.31.209.0/24 maxlen: 24
                          85.155.124.0/24 maxlen: 24
                          85.155.125.0/24 maxlen: 24
                          103.137.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:bd:aa:59:cf:7c:cf:62:f9:cf:93:8d:7d:e7:6f:61:ce:61:52:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
        Validity
            Not Before: Nov 26 22:56:33 2025 GMT
            Not After : Nov 25 23:01:33 2026 GMT
        Subject: CN=DE8E8F7BC53EC96B238130C416246D8972820260
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e6:bf:b8:61:b6:8a:77:75:84:ee:16:96:cd:
                    5d:40:12:79:cd:a8:09:49:5b:4a:a2:92:3d:cd:02:
                    52:1b:f6:5c:ab:ef:b7:fb:7e:e4:d0:db:49:76:9a:
                    70:b6:68:67:b8:cf:ff:5e:3e:0e:b1:e6:00:0d:89:
                    64:5b:28:d0:4b:f3:30:45:22:e5:23:86:f7:75:0d:
                    56:b7:67:54:70:08:b8:0e:3c:39:d4:e2:25:ae:21:
                    35:0f:d0:29:ae:e6:11:b9:bf:66:36:7d:21:c3:5d:
                    33:59:c8:b7:84:9a:3d:1a:fa:f2:f3:f9:cb:3d:70:
                    43:cd:e8:e0:16:77:0a:73:c9:d0:3f:59:0f:94:c7:
                    a3:95:17:41:41:88:3f:75:16:05:50:ff:63:89:1f:
                    cb:d7:c7:37:52:08:20:65:67:84:2a:fd:83:27:91:
                    3c:d3:48:3e:e1:2c:7f:37:01:50:54:68:74:31:6e:
                    d3:2d:c9:69:c3:71:b2:2e:26:81:56:db:44:00:ed:
                    dc:93:36:17:a3:18:41:07:46:a9:22:1e:78:05:2c:
                    15:88:75:16:5f:6a:4d:38:9f:be:5b:8d:c6:fd:05:
                    fe:14:ff:7c:95:5c:26:46:32:1e:10:bd:09:5f:fb:
                    bb:79:fb:60:5c:d6:aa:60:39:26:7d:54:9d:3b:16:
                    7d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:8E:8F:7B:C5:3E:C9:6B:23:81:30:C4:16:24:6D:89:72:82:02:60
            X509v3 Authority Key Identifier:
                keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS207513.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.31.209.0/24
                  85.155.124.0/23
                  103.137.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:40:73:0c:6b:d1:20:68:33:ac:ca:c3:40:2b:90:b2:9b:a2:
         cd:a8:d4:6f:52:ce:86:f2:c6:fd:60:1e:a8:13:e7:a2:a6:42:
         c0:68:a6:1a:1b:63:35:11:61:45:ed:e8:4e:3d:2d:ab:16:65:
         6a:5d:fa:34:b8:0f:93:f0:86:4e:12:48:2a:e5:38:5d:bc:ce:
         c8:9c:2b:f3:55:28:f0:6e:16:fe:cb:c3:7e:3e:f6:62:9b:57:
         3a:2a:5c:94:59:bc:95:84:4a:a0:0a:a8:66:47:cd:38:83:00:
         84:6d:35:e0:e0:51:68:94:2d:d2:53:9d:d2:c4:2d:9a:0d:0f:
         f5:a0:f8:33:2d:e2:94:f4:94:5c:ac:75:66:3b:00:eb:8b:7e:
         6e:d5:25:5e:f3:d1:b4:bf:b1:6b:af:66:7c:9b:b3:75:a4:0c:
         8a:6a:da:b9:1c:a0:60:72:80:95:67:8a:02:9c:e2:d3:11:50:
         b5:ad:da:10:81:22:44:eb:8f:7d:45:3c:7f:30:32:7f:cc:70:
         7c:67:dd:30:b6:34:9a:2c:14:6c:b1:0c:ef:78:66:b7:e5:4f:
         6f:1a:bc:4e:67:c9:1c:86:9f:1f:50:a6:e7:9c:81:c9:d8:56:
         38:a8:3f:58:11:0b:92:1a:46:61:20:83:f4:93:b6:70:ad:03:
         99:da:85:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:46:56 2025 by rpki-client