This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS212400.roa
File:                     AS212400.roa (raw, json)
Hash identifier:          WC7nsJ5uTQb/OphJ6snHNDRGI1wOQE0A5TLYiurgmMA=
Subject key identifier:   AE:61:B6:EF:AE:1C:B3:C4:B7:FF:AF:44:C8:43:47:F0:71:FE:A5:A0
Certificate issuer:       /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial:       44EC986BAA050B85597CAE016DBB5E6907A95B86
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS212400.roa
Signing time:             Thu 12 Feb 2026 23:57:00 +0000
ROA not before:           Thu 12 Feb 2026 23:52:00 +0000
ROA not after:            Thu 11 Feb 2027 23:57:00 +0000
asID:                     212400
IP address blocks:        148.135.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Feb 2026 13:56:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:ec:98:6b:aa:05:0b:85:59:7c:ae:01:6d:bb:5e:69:07:a9:5b:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
        Validity
            Not Before: Feb 12 23:52:00 2026 GMT
            Not After : Feb 11 23:57:00 2027 GMT
        Subject: CN=AE61B6EFAE1CB3C4B7FFAF44C84347F071FEA5A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3a:11:b0:de:71:0f:34:0d:3f:5a:07:b9:95:
                    6b:58:fb:8b:54:b4:49:ef:9d:8b:5a:05:d4:6f:82:
                    25:6c:a1:76:b7:39:2e:fe:f7:55:7a:63:10:11:2a:
                    04:12:19:a7:3b:42:27:4e:d8:87:e4:45:0d:52:8b:
                    4a:94:db:f5:cd:64:3d:cd:ed:77:c6:d8:1c:8a:1c:
                    77:ba:a1:19:c4:e2:6b:89:ff:c8:a5:08:7a:dd:9a:
                    42:f4:70:13:87:ef:2c:41:bf:9f:2f:3c:87:de:95:
                    f6:d2:ca:88:83:ac:c4:36:47:91:75:e8:21:3c:8a:
                    e4:5f:73:1b:28:79:e5:a3:74:26:0f:66:8b:d7:e6:
                    8e:be:3b:b3:e7:2a:85:eb:ab:c4:02:a3:8b:7c:fe:
                    56:a4:d2:62:b5:68:d5:5d:b3:6f:04:1c:a3:f5:89:
                    59:72:09:49:61:a9:9b:59:24:3e:30:33:86:bd:8c:
                    e2:66:c1:7e:7f:2c:41:1b:3c:d6:97:b4:30:36:c3:
                    38:7d:64:56:d9:f4:70:ce:96:2f:43:9f:61:e8:5a:
                    45:ae:ac:5b:c6:49:ea:3b:93:ff:7a:11:3d:c0:45:
                    71:5f:99:a2:5b:ac:91:df:7e:f5:7a:8b:50:68:10:
                    c9:17:8b:75:29:db:a0:27:92:62:2a:ae:de:52:01:
                    5e:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:61:B6:EF:AE:1C:B3:C4:B7:FF:AF:44:C8:43:47:F0:71:FE:A5:A0
            X509v3 Authority Key Identifier:
                keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS212400.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.135.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:cb:15:54:7d:a8:01:c1:eb:25:e3:20:07:35:e6:20:e5:3c:
         47:ae:c5:52:bd:13:49:be:dc:7c:fd:7a:fe:ad:01:c9:36:af:
         fb:cc:b5:e3:de:71:d3:fb:4f:bc:7a:1e:74:36:ab:8b:f1:95:
         ae:be:0c:34:4a:1a:76:b8:d8:94:05:da:84:c2:fb:32:73:e6:
         1e:3a:a8:51:40:7d:c9:98:cd:d7:06:c6:85:37:fa:b2:a4:17:
         25:4e:5f:bc:71:44:ed:71:d4:76:85:4e:22:13:cd:9d:38:e0:
         99:fd:cc:d0:fc:af:10:ad:7b:a5:64:3c:0b:0c:58:c9:85:32:
         eb:a0:90:1e:c9:dc:dc:9d:aa:aa:1e:e0:e9:87:ce:74:17:5f:
         5c:4d:cf:9b:45:2f:f3:02:95:78:fb:16:cd:44:a5:9e:dd:bb:
         10:de:61:d2:49:15:a9:36:28:d2:a6:0b:12:3d:86:bb:4f:c8:
         7a:95:07:db:24:2f:37:d3:5f:46:be:10:1b:cf:9c:06:2c:e8:
         c9:b4:26:cd:5b:4a:6e:1f:7d:d7:a0:6f:97:c5:c6:87:47:a1:
         f5:3e:d3:02:b1:aa:40:c6:94:40:76:30:51:32:f2:1f:98:e6:
         64:bd:cb:8b:e3:ab:d5:e6:98:93:39:ec:b4:c3:98:77:5b:fc:
         86:e7:90:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 14 22:25:28 2026 by rpki-client