This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS54728.roa
File:                     AS54728.roa (raw, json)
Hash identifier:          GvemxsaJDPiUHoSZq7Bpd7kz1riHLkVBvI2kupA7Scc=
Subject key identifier:   30:0F:E6:72:8F:FF:B9:03:10:54:05:44:58:BD:41:13:AA:91:C6:00
Certificate issuer:       /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial:       2C63AE17BDB7AA128C7F1171BD901EB7E839D0EB
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS54728.roa
Signing time:             Sat 29 Nov 2025 09:58:22 +0000
ROA not before:           Sat 29 Nov 2025 09:53:22 +0000
ROA not after:            Sat 28 Nov 2026 09:58:22 +0000
asID:                     54728
IP address blocks:        118.91.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:63:ae:17:bd:b7:aa:12:8c:7f:11:71:bd:90:1e:b7:e8:39:d0:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
        Validity
            Not Before: Nov 29 09:53:22 2025 GMT
            Not After : Nov 28 09:58:22 2026 GMT
        Subject: CN=300FE6728FFFB9031054054458BD4113AA91C600
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:22:31:5b:8b:bf:37:fa:db:f0:b2:8f:75:aa:
                    16:72:3e:dc:18:c2:dd:90:c4:c3:fc:2f:f7:b0:be:
                    58:f7:d3:7a:0a:f7:c3:34:51:bc:46:21:b4:da:92:
                    38:12:a3:3f:05:5c:04:34:2a:75:86:ed:c2:66:d8:
                    ac:d6:fd:80:63:f3:b7:66:99:63:fe:fa:ab:ca:31:
                    9f:98:af:d2:87:46:5b:bc:d6:5b:08:3c:c4:da:f7:
                    0c:80:96:bc:da:02:38:33:76:30:f4:31:51:4e:17:
                    dd:7a:30:39:c3:ef:c7:98:cc:51:46:29:fe:0b:c7:
                    c8:1b:09:8e:6a:3c:1b:bb:a9:04:b7:40:ba:99:81:
                    68:62:9a:44:90:0a:d6:64:44:cf:f8:58:af:83:eb:
                    f2:06:2c:26:d3:b6:d3:bd:c7:ba:23:57:20:52:db:
                    9e:2f:33:1e:43:a2:2d:0c:81:7c:ed:0d:8f:f6:47:
                    72:5a:8e:e4:f5:1c:11:d6:6e:c9:2d:b7:a9:d4:05:
                    4d:1e:96:69:09:55:e7:06:f6:d0:89:97:bd:be:86:
                    27:27:f7:d8:37:cb:ec:79:d3:b3:c1:ef:95:63:6e:
                    93:a1:42:3c:0c:dd:5c:6e:77:db:c6:36:a0:0e:61:
                    c2:9b:57:8c:1b:e5:1a:c7:d8:2c:9d:64:0e:c2:39:
                    a1:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:0F:E6:72:8F:FF:B9:03:10:54:05:44:58:BD:41:13:AA:91:C6:00
            X509v3 Authority Key Identifier:
                keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS54728.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.91.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:f6:bf:73:f4:8a:57:b7:3e:26:56:89:4f:6b:1d:ec:b1:21:
         27:96:53:d4:36:6b:f3:53:33:51:b8:fc:34:2b:70:36:5c:dc:
         d4:8d:ea:41:18:96:c2:a1:17:11:6d:9f:19:53:2e:bb:a3:18:
         4d:6f:ee:e7:72:a7:fe:04:4a:22:40:9d:73:9b:c9:f6:d1:21:
         a9:bd:99:38:f6:bd:89:d5:5f:a7:28:7c:7a:2c:4d:b5:db:b0:
         29:1b:04:30:1c:80:a0:f9:d8:3c:1b:f8:3c:bc:0f:33:17:ba:
         c1:84:f7:f8:53:19:e8:a0:65:5b:d3:7e:45:ab:b5:26:cb:f1:
         7b:ee:84:b1:68:b3:0e:36:0e:71:e2:41:ef:51:98:eb:83:a3:
         ae:f2:61:a8:d5:03:78:7e:7b:c0:16:fa:be:a0:ab:1f:b1:da:
         25:b8:4c:e4:98:d3:b6:4e:01:ec:57:0a:2e:f3:29:f9:e6:fa:
         26:d4:ab:e1:9f:4b:de:31:74:2a:77:ee:69:e6:b3:46:c6:8b:
         eb:1b:78:bf:b8:c5:5a:03:d0:ca:48:4e:4d:2d:30:02:29:40:
         52:78:67:0b:44:85:ec:e3:c3:0e:f1:e1:d4:a9:35:e4:5e:9a:
         f9:17:87:40:9f:e4:ff:19:c7:1d:ad:04:94:39:90:9d:c3:92:
         62:74:48:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:54:15 2025 by rpki-client