This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS211305.roa
File:                     AS211305.roa (raw, json)
Hash identifier:          39l12LSfGb6W8FB6CNzOmpHUzuQ63vIgoDiPk61U8tU=
Subject key identifier:   20:40:D0:2D:E6:43:10:FA:E5:EC:A5:02:6A:E7:EC:70:E2:0F:6E:F6
Certificate issuer:       /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial:       137853DF64ECE890B13118A0DC37F797A566155D
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS211305.roa
Signing time:             Mon 01 Dec 2025 23:09:20 +0000
ROA not before:           Mon 01 Dec 2025 23:04:20 +0000
ROA not after:            Mon 30 Nov 2026 23:09:20 +0000
asID:                     211305
IP address blocks:        85.155.127.0/24 maxlen: 24
                          103.204.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:78:53:df:64:ec:e8:90:b1:31:18:a0:dc:37:f7:97:a5:66:15:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
        Validity
            Not Before: Dec  1 23:04:20 2025 GMT
            Not After : Nov 30 23:09:20 2026 GMT
        Subject: CN=2040D02DE64310FAE5ECA5026AE7EC70E20F6EF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:be:b0:e5:e8:50:82:0b:3a:f6:bf:e0:19:f0:
                    a2:ba:1d:48:e9:01:76:2c:79:48:ca:f9:11:69:50:
                    5c:d6:18:4f:e7:c6:d8:4a:0d:e0:5f:23:19:fb:9f:
                    48:1a:d4:fd:f9:7e:13:08:0d:fa:d6:83:14:b4:58:
                    39:98:80:9c:2c:17:4b:ad:31:e5:d0:13:a2:0c:42:
                    da:7e:47:a6:5c:2d:99:17:0c:7d:5c:9e:6d:d2:91:
                    10:5a:0b:90:25:2a:86:6d:d5:76:33:9c:15:21:df:
                    49:0e:68:cf:c6:83:c7:f3:2e:1d:be:a9:02:04:01:
                    69:6e:45:3e:a9:f4:c1:c1:43:09:50:ba:e6:22:c1:
                    87:b3:f3:ea:de:47:32:cb:a0:fa:45:44:b0:b8:c6:
                    1d:fd:7d:ad:48:96:1b:c5:0e:9a:ad:53:c9:38:77:
                    c2:83:98:d9:6d:3d:93:ed:3a:3b:a1:bb:e9:05:32:
                    d0:75:97:51:5f:a0:61:2e:94:7b:5b:a2:ae:b8:c3:
                    57:7d:bf:35:45:dc:e2:bb:8d:55:1b:6c:68:0b:be:
                    54:58:d8:77:d0:ec:d5:9d:a0:bc:8c:d1:3d:fc:4c:
                    89:81:93:8a:01:93:0a:43:f3:23:47:07:05:55:c0:
                    83:b2:45:62:c1:03:30:f9:be:fd:43:62:13:45:e9:
                    8e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:40:D0:2D:E6:43:10:FA:E5:EC:A5:02:6A:E7:EC:70:E2:0F:6E:F6
            X509v3 Authority Key Identifier:
                keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS211305.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.155.127.0/24
                  103.204.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:88:e1:45:82:8a:5a:a7:2b:da:f1:5b:e9:f0:f2:0b:56:4d:
         a6:72:08:9e:47:53:26:a3:08:2d:57:9b:c7:fc:7c:a8:75:74:
         9a:d2:77:fe:df:80:d8:88:be:b5:06:c8:bf:35:36:43:1f:46:
         a9:5d:49:53:e9:95:03:77:38:53:0a:b4:61:9f:34:2e:49:23:
         01:db:57:34:44:f8:c2:21:18:b4:94:72:52:c6:6a:5c:65:2b:
         78:7b:38:b2:47:33:92:d7:2a:e8:d7:4a:11:09:64:08:55:33:
         c7:8a:e5:df:ea:47:b9:5c:29:27:ae:a8:4e:c0:e1:ac:f6:07:
         61:99:38:18:67:5b:5a:3e:f1:09:89:ee:46:92:46:b3:96:64:
         77:d3:fe:29:2c:37:ab:31:62:2c:a0:d8:80:c5:26:79:75:8f:
         bd:1d:b6:76:c6:fe:f3:8b:f0:95:ae:6b:c4:30:54:26:0e:8d:
         4c:a1:0b:46:e3:b8:01:0e:9f:c9:24:ab:37:5b:29:41:81:06:
         50:21:14:9b:2e:cc:8d:fe:a1:9b:46:ff:58:82:d2:28:e4:ba:
         33:9b:b4:ea:c6:0a:6c:e6:3d:ef:b9:97:40:f5:42:f0:5d:9c:
         9c:2d:ae:9b:13:3d:50:45:b7:38:01:86:4e:c5:e5:43:cc:ff:
         2a:7c:80:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:59:16 2025 by rpki-client