This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS49581.roa
File:                     AS49581.roa (raw, json)
Hash identifier:          Wh5hgrA9L6Jqb4udgyIjFLRBWEq09khbox01mwMehKE=
Subject key identifier:   D4:77:56:9E:6E:A3:08:86:55:E6:58:A7:40:B7:A2:BC:E1:CF:D3:E6
Certificate issuer:       /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial:       3D6E9AFC3412C086D22B8D7F43E6D82D76577ABC
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS49581.roa
Signing time:             Wed 10 Dec 2025 17:57:32 +0000
ROA not before:           Wed 10 Dec 2025 17:52:32 +0000
ROA not after:            Wed 09 Dec 2026 17:57:32 +0000
asID:                     49581
IP address blocks:        85.155.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Dec 2025 19:20:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:6e:9a:fc:34:12:c0:86:d2:2b:8d:7f:43:e6:d8:2d:76:57:7a:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
        Validity
            Not Before: Dec 10 17:52:32 2025 GMT
            Not After : Dec  9 17:57:32 2026 GMT
        Subject: CN=D477569E6EA3088655E658A740B7A2BCE1CFD3E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ef:ba:13:13:c4:80:5d:39:0f:b5:12:7c:55:
                    33:44:8d:86:59:0f:a2:05:fe:a5:5a:a8:e7:72:27:
                    dd:12:f1:52:bf:14:87:53:12:51:12:43:fd:dd:27:
                    ed:e3:a6:3e:f7:90:05:36:e6:da:ea:84:c6:6d:b2:
                    d5:d7:95:71:8f:af:3d:3d:a1:80:4c:06:f1:1e:93:
                    07:7d:5b:6a:91:e1:ca:27:fe:65:4d:92:5a:bd:cd:
                    b6:77:f5:73:20:b1:cb:19:83:e2:d6:60:32:d9:0f:
                    66:83:ba:99:ae:43:3d:47:b2:2e:13:21:78:d3:2b:
                    80:db:3b:e5:09:8b:96:5e:93:85:12:6b:3b:79:3b:
                    96:85:9c:8e:ae:6f:09:7f:a6:2d:c4:f5:7b:eb:4d:
                    bc:2a:88:5a:30:17:d6:c0:79:8d:6b:03:af:74:48:
                    a3:2b:66:54:84:a3:ea:c2:df:1b:f4:05:5c:0a:4a:
                    b7:64:c4:a6:d3:b1:78:37:65:3d:bc:0c:e1:db:32:
                    07:0f:6a:e2:d9:6e:ab:ed:db:b8:69:df:7b:9d:2c:
                    ad:8d:2d:ae:3a:54:14:66:c1:65:0f:e3:9b:4c:89:
                    b9:dc:82:2f:6c:91:b9:58:ea:36:cc:04:52:cd:39:
                    1b:fc:95:94:73:2d:15:67:bf:fa:94:4d:c3:a2:28:
                    03:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:77:56:9E:6E:A3:08:86:55:E6:58:A7:40:B7:A2:BC:E1:CF:D3:E6
            X509v3 Authority Key Identifier:
                keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS49581.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.155.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:0c:7c:4d:5f:14:cf:ea:fb:c5:39:e1:71:32:82:45:cb:c3:
         42:ae:6a:16:be:0f:48:84:9f:32:b9:26:27:89:6f:14:c1:cf:
         b7:b2:0e:5a:4a:44:3e:08:1e:6d:52:d4:9b:64:83:bf:36:51:
         9f:00:3e:c3:7f:3d:0f:76:1d:de:b7:db:28:f3:52:cc:0d:d7:
         10:ac:de:22:f0:95:a1:61:93:d4:1c:c3:1e:5b:c7:56:d5:30:
         e4:dd:e9:71:92:1d:5b:7d:51:2a:0f:7b:b7:e1:e4:76:76:e4:
         aa:3e:91:8f:5d:e7:1c:c3:9d:c5:ff:b6:88:1f:75:ea:95:51:
         41:e8:9c:51:95:08:51:c7:d1:cc:ca:c1:20:77:14:38:40:c8:
         44:e3:8c:bf:a1:a0:b7:36:f5:59:a6:38:6b:1a:62:42:01:fc:
         f4:77:24:e0:bf:4c:94:c8:06:07:ab:aa:95:11:6f:bd:46:0f:
         46:73:1f:77:f0:44:c3:47:09:84:d0:7c:1e:2f:4c:c6:78:74:
         6f:ec:70:43:2d:b7:7e:0b:0f:f8:4f:12:1b:f0:c9:ae:8d:7c:
         b3:e4:b9:7d:11:ae:77:71:9d:bc:47:c6:97:3b:22:3b:89:05:
         b6:31:9b:f6:c6:dc:ea:ec:84:2d:43:9d:fa:eb:9b:d2:d3:4d:
         47:64:f1:60
-----BEGIN CERTIFICATE-----
MIIE5DCCA8ygAwIBAgIUPW6a/DQSwIbSK41/Q+bYLXZXerwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDE0YjZmY2YyYjJjNjliZTA4NWU5Zjk1OTg3MmRjYmU4
ZWE1NDE3NzAeFw0yNTEyMTAxNzUyMzJaFw0yNjEyMDkxNzU3MzJaMDMxMTAvBgNV
BAMTKEQ0Nzc1NjlFNkVBMzA4ODY1NUU2NThBNzQwQjdBMkJDRTFDRkQzRTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC777oTE8SAXTkPtRJ8VTNEjYZZ
D6IF/qVaqOdyJ90S8VK/FIdTElESQ/3dJ+3jpj73kAU25trqhMZtstXXlXGPrz09
oYBMBvEekwd9W2qR4con/mVNklq9zbZ39XMgscsZg+LWYDLZD2aDupmuQz1Hsi4T
IXjTK4DbO+UJi5Zek4USazt5O5aFnI6ubwl/pi3E9XvrTbwqiFowF9bAeY1rA690
SKMrZlSEo+rC3xv0BVwKSrdkxKbTsXg3ZT28DOHbMgcPauLZbqvt27hp33udLK2N
La46VBRmwWUP45tMibncgi9skblY6jbMBFLNORv8lZRzLRVnv/qUTcOiKAMVAgMB
AAGjggHuMIIB6jAdBgNVHQ4EFgQU1HdWnm6jCIZV5linQLeivOHP0+YwHwYDVR0j
BBgwFoAU0Utvzyssab4IXp+VmHLcvo6lQXcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNy9EMTRCNkZDRjJC
MkM2OUJFMDg1RTlGOTU5ODcyRENCRThFQTU0MTc3LmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMFV0dnp5c3NhYjRJWHAtVm1ITGN2bzZsUVhjLmNlcjBvBggrBgEF
BQcBCwRjMGEwXwYIKwYBBQUHMAuGU3JzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC83L0FT
NDk1ODEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBABVm+YwDQYJKoZIhvcNAQELBQADggEBAIAMfE1fFM/q
+8U54XEygkXLw0Kuaha+D0iEnzK5JieJbxTBz7eyDlpKRD4IHm1S1Jtkg782UZ8A
PsN/PQ92Hd632yjzUswN1xCs3iLwlaFhk9Qcwx5bx1bVMOTd6XGSHVt9USoPe7fh
5HZ25Ko+kY9d5xzDncX/togfdeqVUUHonFGVCFHH0czKwSB3FDhAyETjjL+hoLc2
9VmmOGsaYkIB/PR3JOC/TJTIBgerqpURb71GD0ZzH3fwRMNHCYTQfB4vTMZ4dG/s
cEMtt34LD/hPEhvwya6NfLPkuX0RrndxnbxHxpc7IjuJBbYxm/bG3OrshC1Dnfrr
m9LTTUdk8WA=
-----END CERTIFICATE-----
Generated at Wed Dec 17 01:26:08 2025 by rpki-client