This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS47272.roa
File:                     AS47272.roa (raw, json)
Hash identifier:          9iJdQtwe8xrPl3k6x3MNMOeQfvJbUkZjzLmRpdTN1S4=
Subject key identifier:   6B:73:12:A3:C6:1E:87:3C:EE:52:B0:C8:04:58:C7:A8:27:1F:88:EF
Certificate issuer:       /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial:       07023918527222E41EC38DE8A068C9C341CA4928
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS47272.roa
Signing time:             Mon 15 Dec 2025 09:49:27 +0000
ROA not before:           Mon 15 Dec 2025 09:44:27 +0000
ROA not after:            Mon 14 Dec 2026 09:49:27 +0000
asID:                     47272
IP address blocks:        199.47.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Dec 2025 14:45:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:02:39:18:52:72:22:e4:1e:c3:8d:e8:a0:68:c9:c3:41:ca:49:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
        Validity
            Not Before: Dec 15 09:44:27 2025 GMT
            Not After : Dec 14 09:49:27 2026 GMT
        Subject: CN=6B7312A3C61E873CEE52B0C80458C7A8271F88EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:cf:97:ab:dd:76:1d:fd:19:be:0a:d0:32:bd:
                    1c:8e:85:a2:e5:10:4d:ab:e2:07:ae:6c:a4:07:fc:
                    99:47:a0:be:82:4d:f6:df:da:db:34:97:e3:a5:bc:
                    72:08:6f:8b:5c:ac:77:71:79:09:81:b7:2c:d5:8c:
                    34:21:05:71:be:ae:a2:23:69:b7:e6:ee:8f:04:27:
                    5b:7a:2c:71:ce:09:ef:7e:76:8a:02:86:d5:be:40:
                    ff:f3:46:66:60:e3:6e:d8:0d:3f:bd:d2:69:0f:8c:
                    73:0b:c8:00:af:2a:95:18:30:4c:ee:c7:0d:4b:a1:
                    42:ce:80:5c:7e:03:9c:8a:8d:5b:a8:c5:9c:ec:a1:
                    60:1a:3b:57:8f:21:21:4b:67:fb:5a:5c:f4:34:55:
                    cb:a5:92:04:02:6c:f0:e9:41:5b:e0:15:37:19:3e:
                    82:7d:38:8a:53:a6:01:68:d5:0f:1c:1b:cd:ab:7e:
                    1c:11:6d:a8:6a:ad:37:94:3c:42:da:ed:56:a8:89:
                    bd:85:03:d2:43:e2:6f:a0:3c:06:eb:fc:1a:98:94:
                    15:23:87:af:2e:26:00:a3:ac:7c:56:e8:ff:ea:fa:
                    cf:eb:e7:bb:4b:a3:7c:01:34:de:27:63:21:eb:e0:
                    90:1a:1a:74:f6:69:6b:cc:26:ec:c2:04:0a:f5:11:
                    32:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:73:12:A3:C6:1E:87:3C:EE:52:B0:C8:04:58:C7:A8:27:1F:88:EF
            X509v3 Authority Key Identifier:
                keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS47272.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.47.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:7b:0b:a4:b6:3c:3d:c1:9c:25:ff:bc:7e:4e:0d:54:c4:b9:
         b1:46:ed:f4:db:fc:4f:e9:e9:10:92:af:f5:a9:cc:35:e8:0a:
         06:cd:d9:69:f8:74:79:f7:f5:b5:29:96:3f:f1:c3:0e:06:d0:
         e1:04:13:4f:81:11:20:8c:44:18:67:8f:db:90:12:a4:72:e2:
         1b:81:c4:85:99:74:de:3e:d5:55:73:fe:b0:10:24:43:5b:69:
         81:8d:a5:dd:5d:64:62:43:97:dc:80:99:b6:05:45:cd:16:c3:
         8e:93:76:48:c2:90:30:5b:90:b0:c2:eb:15:3a:e0:92:79:9d:
         d5:30:fe:68:dc:25:b0:17:77:e7:97:9c:1f:40:1b:19:bc:f0:
         f0:de:b3:33:f8:50:85:f0:1b:8d:cb:92:f7:7e:df:e6:17:fc:
         d8:b7:e9:47:48:ec:3e:70:01:a3:c6:3c:06:b8:0b:73:08:5a:
         66:98:e8:e1:56:4d:74:98:4d:32:76:89:df:10:c4:70:2b:b6:
         f1:b4:35:cb:36:9c:40:37:b1:42:2a:34:a8:62:48:49:f3:b8:
         88:6d:e3:0b:86:4c:7d:fa:63:0a:5d:19:7f:e6:bd:97:03:2b:
         6f:48:70:4a:12:9b:c3:21:ab:5e:a7:ab:b4:b7:37:3f:25:0e:
         ff:65:fd:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 20:39:02 2025 by rpki-client