This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS215212.roa
File:                     AS215212.roa (raw, json)
Hash identifier:          +OhQxrOgyO0r1oTPfukUvSRxWqBKCDPrJJ/ucLmnqbk=
Subject key identifier:   49:5C:4E:49:2D:3C:73:86:62:01:64:23:34:8C:EE:3F:07:B6:CD:57
Certificate issuer:       /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial:       25A0BFC2762B98FAB83EAF00CFD70638BCD4A9B6
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS215212.roa
Signing time:             Sun 18 Jan 2026 07:37:45 +0000
ROA not before:           Sun 18 Jan 2026 07:32:45 +0000
ROA not after:            Sun 17 Jan 2027 07:37:45 +0000
asID:                     215212
IP address blocks:        85.155.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:a0:bf:c2:76:2b:98:fa:b8:3e:af:00:cf:d7:06:38:bc:d4:a9:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
        Validity
            Not Before: Jan 18 07:32:45 2026 GMT
            Not After : Jan 17 07:37:45 2027 GMT
        Subject: CN=495C4E492D3C738662016423348CEE3F07B6CD57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:cb:e5:67:cf:59:37:d9:dd:fc:6e:4a:d5:e1:
                    29:ce:ec:fb:eb:09:e4:35:9d:6a:a7:c3:37:b9:23:
                    9d:82:6c:e9:f9:ad:71:89:72:95:a0:d1:78:e2:0a:
                    b9:ce:73:2d:d1:6d:63:11:ff:62:56:dd:6f:d5:77:
                    6f:99:25:2c:43:1f:48:e8:ff:35:05:14:13:60:c6:
                    cb:cd:f6:7a:ef:29:88:51:55:09:a9:06:1f:c7:c0:
                    c2:f7:45:ed:c7:7c:c1:1d:b1:ba:1c:c7:b9:1a:7e:
                    a3:fd:12:73:97:41:ac:6b:ee:79:cc:12:c7:52:bc:
                    34:05:92:75:29:59:89:6d:5d:d6:29:07:63:94:80:
                    ad:75:fd:79:e1:b4:cf:0c:e5:43:24:24:52:71:6c:
                    08:7e:c1:f7:41:b3:fc:32:14:ba:21:4b:e5:17:8c:
                    b8:a6:a9:b8:cf:bb:9b:41:39:d1:35:67:f4:ad:9a:
                    13:f7:38:6a:97:95:a6:4d:8a:25:f0:e9:10:fe:db:
                    4c:21:2e:a8:4f:22:65:5f:ef:f0:bb:f3:94:99:3c:
                    8c:d6:4a:d2:44:87:0e:b8:0e:82:a9:da:46:82:60:
                    b5:a0:58:c2:8c:36:4f:06:0e:a8:94:b7:bf:d2:1c:
                    51:3e:85:fa:bd:d9:3c:b4:0b:45:34:ce:fb:a9:d1:
                    33:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:5C:4E:49:2D:3C:73:86:62:01:64:23:34:8C:EE:3F:07:B6:CD:57
            X509v3 Authority Key Identifier:
                keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS215212.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.155.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:07:02:12:86:6e:29:3e:bd:19:e8:15:22:f0:60:22:65:8e:
         a5:52:f2:9d:03:27:d6:ea:f8:d1:f4:da:56:d6:d2:5b:ae:ba:
         79:db:1b:80:98:f6:45:11:b8:67:f8:07:d1:a1:f7:8d:78:d1:
         fc:05:4e:16:bb:82:25:09:13:9f:b1:83:15:59:fa:ea:3b:92:
         f2:c2:e2:0c:f8:6b:b6:9b:aa:bb:60:e3:3a:8f:d8:bf:06:d5:
         aa:41:b6:f3:d6:6d:62:86:e8:25:bd:44:10:85:d4:59:f2:dd:
         a7:00:e0:30:cf:88:e9:1b:a6:69:6e:36:20:3d:b2:20:00:db:
         ef:3b:ad:f2:d0:b3:60:95:b6:9e:10:fd:01:70:88:83:56:c1:
         58:e8:93:6d:10:3f:88:0c:85:01:01:c9:a6:3b:e8:68:c7:1f:
         b6:e4:9b:fe:a0:eb:27:db:f7:1b:64:a0:83:15:03:a6:fa:28:
         d9:a6:5a:d0:66:20:0c:f1:38:c5:4f:97:2a:0e:08:07:df:15:
         db:0a:70:8b:3b:76:c0:30:31:5c:ae:00:d4:67:80:2a:90:48:
         89:17:bb:c0:95:4b:a1:46:cf:17:9a:3e:37:9e:72:58:90:9b:
         76:4e:20:95:de:96:3d:5e:9a:a3:c8:b9:de:1c:36:57:15:e0:
         c9:94:ca:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:10:36 2026 by rpki-client