This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS10753.roa
File:                     AS10753.roa (raw, json)
Hash identifier:          kQheCR+UkrIiw/25RwQVW/H3vVZ8xcn4NH72ZC0SRBk=
Subject key identifier:   B3:29:39:BE:3A:8F:C0:D7:D4:9D:69:3F:63:0F:6D:87:95:8C:57:56
Certificate issuer:       /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial:       5766D3401E76466204136ED20BDFCFCF8C80EAB4
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS10753.roa
Signing time:             Tue 02 Dec 2025 10:21:31 +0000
ROA not before:           Tue 02 Dec 2025 10:16:31 +0000
ROA not after:            Tue 01 Dec 2026 10:21:31 +0000
asID:                     10753
IP address blocks:        82.22.26.0/24 maxlen: 24
                          82.38.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Dec 2025 00:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:66:d3:40:1e:76:46:62:04:13:6e:d2:0b:df:cf:cf:8c:80:ea:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
        Validity
            Not Before: Dec  2 10:16:31 2025 GMT
            Not After : Dec  1 10:21:31 2026 GMT
        Subject: CN=B32939BE3A8FC0D7D49D693F630F6D87958C5756
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6f:24:05:a3:aa:ad:98:6c:e6:25:99:42:77:
                    ee:4c:99:e4:96:5e:fe:17:7c:64:22:cb:b3:f9:f1:
                    9b:18:f8:b7:b6:7f:74:80:87:a6:2e:05:91:88:b3:
                    8f:dd:cf:ba:29:62:08:27:41:b9:65:3e:84:75:63:
                    2c:43:00:d2:34:62:7b:81:ef:37:b9:35:75:fd:ce:
                    54:fc:b8:55:57:d8:05:ae:e3:eb:ef:b8:1c:ca:51:
                    05:ce:c4:c2:81:5c:1c:fb:c9:0a:a5:ce:4c:b5:80:
                    5a:73:8e:7c:0f:06:9b:13:3e:cd:22:d8:5c:cc:c9:
                    8a:06:69:65:84:25:bf:c5:b0:c7:f5:ca:16:ba:dd:
                    72:0b:d0:a1:90:9e:c0:8b:87:ce:7f:3e:fa:fc:77:
                    d4:79:10:6d:8e:c7:ab:9b:91:7c:3a:d0:a2:69:97:
                    85:10:7f:e0:94:a9:33:8f:50:28:55:bd:02:c9:87:
                    10:c8:b4:1e:54:0e:2a:59:91:cf:56:00:2d:8c:ad:
                    44:92:e6:30:ad:54:86:52:f5:c4:14:ea:eb:27:4d:
                    1b:c7:69:42:c0:24:e3:64:2b:3b:aa:ec:17:de:9f:
                    a8:e5:0e:28:25:e2:db:16:0f:ba:bd:b7:77:bd:c4:
                    15:f7:7e:67:25:9f:78:97:ed:a3:00:71:8d:aa:38:
                    9c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:29:39:BE:3A:8F:C0:D7:D4:9D:69:3F:63:0F:6D:87:95:8C:57:56
            X509v3 Authority Key Identifier:
                keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS10753.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.22.26.0/24
                  82.38.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:b3:cb:1c:35:79:5a:7a:fe:59:2d:ab:1d:59:3e:d4:c0:47:
         bf:df:1f:29:fa:90:a6:bb:9b:aa:a3:cb:9d:0a:c6:00:65:29:
         19:52:80:78:c6:f1:09:c4:2f:92:73:13:b7:32:2c:7d:40:f6:
         71:e8:8c:3f:f7:87:b6:ad:8b:71:12:17:17:73:77:6c:e9:e0:
         6a:6a:f7:41:e6:1b:9a:09:a3:d7:7f:8e:e8:81:5d:16:67:02:
         1b:38:f3:34:38:33:68:f4:ea:d7:88:9f:8e:71:fe:7d:a4:27:
         f5:78:68:8b:43:52:fc:79:fd:54:3a:de:61:cb:1f:db:42:c0:
         00:4e:a5:ac:d7:bb:44:e0:74:89:4c:35:23:5e:8d:c4:68:f3:
         6c:cf:9c:74:96:72:e0:2e:a1:c7:ea:ed:91:6f:47:a1:91:e1:
         bd:87:75:25:5d:29:c6:99:af:d3:3a:34:03:ff:89:e9:7a:d7:
         7e:1e:5d:fa:a4:6a:e7:8b:d3:fc:9e:7e:66:3d:69:af:cc:8f:
         63:57:d8:07:f8:d2:a4:6a:47:50:77:74:3b:a4:25:be:80:f5:
         ce:29:05:8f:ef:8b:bb:d6:25:67:b6:07:13:3e:a4:18:15:c5:
         cf:d0:94:3d:ac:b8:e1:21:55:de:a5:12:00:10:9d:b1:6d:6e:
         bc:8d:80:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 4 05:59:18 2025 by rpki-client