This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS58212.roa
File:                     AS58212.roa (raw, json)
Hash identifier:          mHOxICqs5GveH0XBDXLjJGgegnTOs8GKITSD4m+M2jA=
Subject key identifier:   F3:CE:E2:5F:4A:F5:F6:7E:A4:88:F7:E1:C5:CE:21:3E:BF:A1:B9:02
Certificate issuer:       /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial:       0D3ECB963897BE3C2062CFB4964AA66892FE4CAA
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS58212.roa
Signing time:             Mon 24 Nov 2025 20:52:48 +0000
ROA not before:           Mon 24 Nov 2025 20:47:48 +0000
ROA not after:            Mon 23 Nov 2026 20:52:48 +0000
asID:                     58212
IP address blocks:        2a05:dfc7::/32 maxlen: 48
                          2a06:a000::/32 maxlen: 48
                          2a0a:6046::/32 maxlen: 48
                          2a0d:d907::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:3e:cb:96:38:97:be:3c:20:62:cf:b4:96:4a:a6:68:92:fe:4c:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
        Validity
            Not Before: Nov 24 20:47:48 2025 GMT
            Not After : Nov 23 20:52:48 2026 GMT
        Subject: CN=F3CEE25F4AF5F67EA488F7E1C5CE213EBFA1B902
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:21:7d:07:47:ad:72:50:83:32:50:f3:12:4c:
                    be:7a:2a:67:4a:94:bd:fd:4f:e9:60:b5:01:8b:62:
                    e2:b0:ae:18:ab:b3:a7:33:a6:7d:b2:7a:00:26:2d:
                    1a:6c:e4:24:c4:89:e4:c1:c3:1c:23:6d:d1:7a:66:
                    82:38:58:42:30:68:81:22:18:66:3d:bd:7d:44:c8:
                    0f:1d:f4:5c:25:6a:9b:ed:89:98:c7:ad:15:47:2c:
                    e0:a2:28:48:df:e6:61:b6:ca:55:df:60:1b:87:df:
                    35:c8:ef:e1:ab:dd:e0:e2:73:4b:c3:1c:bd:fd:90:
                    53:7f:87:0b:fa:61:d9:fb:1d:70:80:b3:50:b3:4f:
                    3a:61:92:4e:39:23:ba:c3:5d:b1:e1:39:28:77:e4:
                    3c:e7:1a:1c:96:9f:1f:c8:4f:cb:d8:b0:64:c2:ff:
                    7e:8d:ee:f2:10:18:1a:af:6b:40:27:bf:24:2b:b3:
                    75:53:9b:f2:15:58:00:2d:81:e9:4d:b5:e5:74:f7:
                    73:ce:a0:ec:22:bc:0e:59:80:74:82:fa:03:b4:61:
                    cc:fb:f5:53:16:c5:bd:b0:0a:67:ef:b5:6f:9c:9d:
                    a5:9c:0f:c8:8a:55:34:fe:b1:75:96:f1:06:c3:84:
                    4e:f9:64:9e:d9:27:ba:ed:5f:b5:ab:11:c0:74:55:
                    26:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:CE:E2:5F:4A:F5:F6:7E:A4:88:F7:E1:C5:CE:21:3E:BF:A1:B9:02
            X509v3 Authority Key Identifier:
                keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS58212.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7::/32
                  2a06:a000::/32
                  2a0a:6046::/32
                  2a0d:d907::/32

    Signature Algorithm: sha256WithRSAEncryption
         9c:4c:61:d2:d9:ba:17:4a:d1:8a:18:a0:c5:10:e6:52:d4:f0:
         a6:4a:3a:e5:68:67:50:57:d5:b8:78:1d:96:b6:71:d9:e0:e2:
         68:cc:21:1d:c5:bd:cb:2d:59:51:53:a7:9a:8b:7c:3e:7d:86:
         02:8c:cc:7e:22:34:eb:ac:86:e7:8e:64:33:11:04:4e:04:d2:
         2d:09:19:91:e4:92:f1:3b:d2:ba:18:da:ff:b8:90:75:57:b0:
         78:f2:dd:6e:cc:0a:9c:4b:cb:c2:7f:18:a0:7b:c7:6a:a8:83:
         33:53:c7:5e:4c:32:3c:10:a2:6c:7b:44:b3:ed:0f:df:63:4c:
         8f:f6:ec:ce:84:ac:22:c8:26:a5:04:05:2f:0a:92:a5:1d:21:
         6e:1e:76:e8:64:09:03:25:d2:a0:86:a2:5e:29:4a:4c:f3:23:
         54:50:50:08:3a:6f:57:a0:b9:fa:ba:ba:93:b3:2b:77:a1:2d:
         01:cb:84:0e:01:eb:bd:d0:bb:6f:3c:b4:e2:9f:a5:76:d4:47:
         83:07:7e:f3:de:5d:fc:62:87:17:20:7f:75:50:8d:ac:81:5f:
         11:ae:f5:6e:cc:ad:ee:a1:97:24:f8:58:74:fd:24:ae:40:38:
         61:34:0f:97:66:52:23:70:ff:44:52:83:00:ac:4a:63:2c:de:
         ba:de:80:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:58:51 2025 by rpki-client