This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS211440.roa
File:                     AS211440.roa (raw, json)
Hash identifier:          EZq/pLBaRRa0Vs08DdgSy5/n3n4qcLXph6SBoTWqh/w=
Subject key identifier:   97:7B:5C:AF:93:31:17:B6:6A:16:F3:8E:AE:2C:EC:F3:38:88:11:DB
Certificate issuer:       /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial:       34421AAB0533AF6B22100A0BE1152D5150516D6F
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS211440.roa
Signing time:             Wed 05 Nov 2025 14:46:32 +0000
ROA not before:           Wed 05 Nov 2025 14:41:32 +0000
ROA not after:            Wed 04 Nov 2026 14:46:32 +0000
asID:                     211440
IP address blocks:        179.61.250.0/24 maxlen: 24
                          181.214.188.0/24 maxlen: 24
                          191.96.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 10:42:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:42:1a:ab:05:33:af:6b:22:10:0a:0b:e1:15:2d:51:50:51:6d:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
        Validity
            Not Before: Nov  5 14:41:32 2025 GMT
            Not After : Nov  4 14:46:32 2026 GMT
        Subject: CN=977B5CAF933117B66A16F38EAE2CECF3388811DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ca:fa:e0:19:1e:b1:0e:1f:17:32:46:81:68:
                    fb:6f:3f:41:28:eb:03:2a:d5:51:68:4f:69:21:3f:
                    6c:d7:a9:7e:1e:e7:a1:b7:40:44:20:c3:78:ca:f7:
                    44:06:67:65:c3:26:c4:94:1c:26:93:08:de:49:6e:
                    af:3c:2b:54:4d:d7:39:c9:99:ad:81:2e:08:2c:f0:
                    0e:46:93:88:60:12:79:5a:f2:f0:b0:73:14:74:1b:
                    b7:c2:6e:93:09:e6:f3:ec:46:ae:ce:34:16:f5:5c:
                    18:15:2d:75:a7:8d:fa:a3:33:43:04:03:58:0f:ff:
                    59:65:a0:2c:4e:32:06:43:26:72:be:81:06:ab:a2:
                    51:b4:0d:ed:69:f4:4d:48:96:44:66:0e:e5:dd:99:
                    fa:52:18:3f:b5:7f:cb:b6:dc:d3:47:dc:fb:82:bf:
                    fd:30:88:b2:f7:7a:72:79:d2:d7:18:63:0c:0f:5d:
                    1a:e7:6b:29:18:d3:39:a3:5a:6a:d6:88:44:27:cd:
                    79:c7:29:f7:3a:c1:ba:68:81:97:8d:d3:90:71:90:
                    50:6b:e4:ae:7b:64:11:cd:40:bc:5a:7c:a1:f4:63:
                    03:90:6f:06:5e:51:79:a2:22:f8:be:04:b6:97:51:
                    69:ea:57:40:93:55:47:0e:58:9f:5f:d2:99:74:5e:
                    e6:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:7B:5C:AF:93:31:17:B6:6A:16:F3:8E:AE:2C:EC:F3:38:88:11:DB
            X509v3 Authority Key Identifier:
                keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS211440.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.61.250.0/24
                  181.214.188.0/24
                  191.96.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:38:d0:1d:41:40:21:5d:23:57:f7:d3:94:13:aa:4b:94:2b:
         9a:a4:c2:67:7c:66:80:b8:86:e5:b2:fb:98:25:be:ae:8b:89:
         9e:de:21:f8:f6:9b:8e:dc:51:70:0d:92:ff:3c:ca:bd:33:16:
         ca:4d:5b:54:0f:26:b1:d1:5b:83:67:4e:f7:4a:ce:16:21:39:
         58:16:e0:35:59:72:23:f1:57:4f:81:56:aa:14:df:0d:f3:b9:
         a5:f2:14:cd:db:33:da:65:af:6f:bc:ad:f8:05:4d:bd:62:9f:
         99:97:04:e2:85:74:3e:15:4f:68:9c:e2:5d:62:56:9b:bb:3a:
         c2:1a:f0:bd:3d:f3:ba:2c:92:c8:86:fd:d2:11:6c:d7:63:c1:
         44:86:c2:bc:d6:30:76:75:46:94:10:60:28:56:7a:9a:a4:30:
         dd:1e:34:47:bf:cc:4b:c6:3c:35:8c:1e:33:67:81:b6:a5:f9:
         a1:ca:58:ea:ca:e9:9c:32:62:a1:02:3b:09:af:e3:28:37:d6:
         98:87:7d:4c:e7:d9:42:dc:ed:f3:93:35:c3:6f:85:e9:81:75:
         0c:b1:10:63:7c:b9:62:df:0d:21:17:bb:ec:da:fa:1b:78:78:
         3b:ed:0d:39:6b:da:0f:73:f2:18:7d:5b:70:ba:6d:8d:8f:92:
         0f:c8:f2:5c
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIUNEIaqwUzr2siEAoL4RUtUVBRbW8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yNTExMDUxNDQxMzJaFw0yNjExMDQxNDQ2MzJaMDMxMTAvBgNV
BAMTKDk3N0I1Q0FGOTMzMTE3QjY2QTE2RjM4RUFFMkNFQ0YzMzg4ODExREIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuyvrgGR6xDh8XMkaBaPtvP0Eo
6wMq1VFoT2khP2zXqX4e56G3QEQgw3jK90QGZ2XDJsSUHCaTCN5Jbq88K1RN1znJ
ma2BLggs8A5Gk4hgEnla8vCwcxR0G7fCbpMJ5vPsRq7ONBb1XBgVLXWnjfqjM0ME
A1gP/1lloCxOMgZDJnK+gQarolG0De1p9E1IlkRmDuXdmfpSGD+1f8u23NNH3PuC
v/0wiLL3enJ50tcYYwwPXRrnaykY0zmjWmrWiEQnzXnHKfc6wbpogZeN05BxkFBr
5K57ZBHNQLxafKH0YwOQbwZeUXmiIvi+BLaXUWnqV0CTVUcOWJ9f0pl0XubJAgMB
AAGjggIWMIICEjAdBgNVHQ4EFgQUl3tcr5MxF7ZqFvOOrizs8ziIEdswHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMjExNDQwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAsz36
AwQAtda8AwQAv2D6MA0GCSqGSIb3DQEBCwUAA4IBAQAiONAdQUAhXSNX99OUE6pL
lCuapMJnfGaAuIblsvuYJb6ui4me3iH49puO3FFwDZL/PMq9MxbKTVtUDyax0VuD
Z073Ss4WITlYFuA1WXIj8VdPgVaqFN8N87ml8hTN2zPaZa9vvK34BU29Yp+ZlwTi
hXQ+FU9onOJdYlabuzrCGvC9PfO6LJLIhv3SEWzXY8FEhsK81jB2dUaUEGAoVnqa
pDDdHjRHv8xLxjw1jB4zZ4G2pfmhyljqyumcMmKhAjsJr+MoN9aYh31M59lC3O3z
kzXDb4XpgXUMsRBjfLli3w0hF7vs2vobeHg77Q05a9oPc/IYfVtwum2Nj5IPyPJc
-----END CERTIFICATE-----
Generated at Fri Dec 5 15:59:59 2025 by rpki-client