This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS11439.roa
File:                     AS11439.roa (raw, json)
Hash identifier:          D6PHQ+Fc7b/Q5sRSIK09W/BY4CWiT66gpE09idug8BE=
Subject key identifier:   7D:60:E9:32:A9:7C:64:7D:CE:9A:11:DD:0A:10:CD:C7:BA:24:77:EB
Certificate issuer:       /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial:       15300927D70E38CC75A72AE753402DEB8FB39969
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS11439.roa
Signing time:             Mon 22 Dec 2025 09:06:57 +0000
ROA not before:           Mon 22 Dec 2025 09:01:57 +0000
ROA not after:            Mon 21 Dec 2026 09:06:57 +0000
asID:                     11439
IP address blocks:        82.22.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 26 Dec 2025 20:25:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:30:09:27:d7:0e:38:cc:75:a7:2a:e7:53:40:2d:eb:8f:b3:99:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
        Validity
            Not Before: Dec 22 09:01:57 2025 GMT
            Not After : Dec 21 09:06:57 2026 GMT
        Subject: CN=7D60E932A97C647DCE9A11DD0A10CDC7BA2477EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:fe:c9:41:c4:a3:bd:09:b9:7c:85:4e:ed:55:
                    5a:26:54:bc:8e:1b:80:f6:8c:ec:9f:81:27:b7:b5:
                    b5:26:0d:a1:c8:c5:f6:6a:74:00:96:0a:05:e5:b3:
                    26:bc:d8:3f:58:23:80:c2:cd:b4:64:9d:e8:1e:2c:
                    2f:f4:e9:c6:80:67:db:7a:8f:6d:e1:24:07:d5:e7:
                    9f:dd:49:ea:ec:76:c0:af:03:43:5d:40:a6:1e:d2:
                    df:e8:9b:fb:fd:ac:8a:be:d8:ae:28:c1:19:62:8f:
                    4a:35:16:64:7f:72:3e:3a:43:0e:0a:1b:94:91:27:
                    a5:cb:fd:b8:25:0c:b5:96:79:e3:8c:90:e1:74:ab:
                    11:bb:68:ef:e5:dc:37:cd:58:5c:12:6f:df:13:f5:
                    b4:e3:73:f3:f8:fa:53:a2:f6:cc:14:c3:11:3e:7d:
                    e0:3e:a2:f6:bb:7d:8d:65:e0:ed:e2:07:80:15:18:
                    38:3b:63:81:5c:9d:c0:3d:5d:e8:fd:f4:83:c4:6d:
                    4d:45:19:bb:fc:9e:a7:48:74:78:af:b8:6f:23:3c:
                    66:b0:8f:8f:35:3a:e9:60:35:ab:2d:fc:dc:3b:ca:
                    62:b2:39:96:3d:7c:fe:50:1f:f9:48:75:48:79:e8:
                    77:f9:d1:8c:3b:9e:00:e7:3b:55:25:5d:dc:c9:86:
                    ff:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:60:E9:32:A9:7C:64:7D:CE:9A:11:DD:0A:10:CD:C7:BA:24:77:EB
            X509v3 Authority Key Identifier:
                keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS11439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.22.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:17:ec:bb:65:a8:80:2b:93:00:98:2a:4c:4e:6f:76:e1:34:
         a8:39:c3:8c:ef:0d:d3:45:b1:b3:b2:50:5f:64:b1:db:cc:09:
         05:ee:ab:87:0d:b8:6b:a2:a5:94:15:c9:bd:05:97:18:86:ce:
         c5:d3:de:d9:e8:5e:8b:e1:47:07:c1:f0:0f:10:85:95:87:fe:
         c2:3d:9e:e2:1c:18:62:9c:8b:0d:2b:ed:c2:2d:8c:67:2c:18:
         06:4c:1c:e7:89:77:31:d6:30:98:a8:2b:94:0f:4e:87:c5:9d:
         f7:64:53:36:fd:6c:7e:da:1e:12:63:92:57:18:8e:b1:d7:60:
         30:13:22:a9:8f:78:01:18:61:07:51:fb:75:df:c6:6f:d6:0d:
         d8:27:af:6a:1c:87:68:94:0c:89:b5:65:8b:cd:a6:67:e1:ba:
         f6:95:96:d2:a0:8b:fc:2b:6b:8e:ee:1f:6d:fc:06:bc:f5:39:
         c8:04:bd:1a:06:6c:1d:e0:61:02:46:2b:35:40:0f:c7:dd:ec:
         13:78:e7:3d:21:55:b1:17:26:19:67:11:a6:70:e6:8e:40:2b:
         6f:ff:34:e5:7c:3d:27:81:5b:ab:d1:bc:08:b1:3b:3a:ba:dc:
         44:00:57:ff:bd:bf:93:ee:66:42:71:bb:d1:05:5d:46:ad:de:
         8f:dc:81:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 06:31:47 2025 by rpki-client