This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS135402.roa
File:                     AS135402.roa (raw, json)
Hash identifier:          aLP1p0QCZBbQMHf+F2KAtX+E9y5yzuX9OqsPhezMsE8=
Subject key identifier:   99:47:67:C8:2D:D1:76:84:EC:74:A3:61:BA:B4:DA:71:D8:23:40:3D
Certificate issuer:       /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial:       38CAB873A5FF4A267BC1D7BF41B4D0586AD5B00B
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS135402.roa
Signing time:             Mon 12 Jan 2026 03:32:54 +0000
ROA not before:           Mon 12 Jan 2026 03:27:54 +0000
ROA not after:            Mon 11 Jan 2027 03:32:54 +0000
asID:                     135402
IP address blocks:        82.21.204.0/24 maxlen: 24
                          82.24.120.0/24 maxlen: 24
                          82.39.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 18:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:ca:b8:73:a5:ff:4a:26:7b:c1:d7:bf:41:b4:d0:58:6a:d5:b0:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
        Validity
            Not Before: Jan 12 03:27:54 2026 GMT
            Not After : Jan 11 03:32:54 2027 GMT
        Subject: CN=994767C82DD17684EC74A361BAB4DA71D823403D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:2a:46:04:f0:9a:9a:15:56:aa:c0:4a:fe:00:
                    29:a2:f4:6a:5a:d6:15:6a:cc:b3:f9:37:07:07:57:
                    ee:72:ae:94:b8:98:91:f1:49:e9:17:27:db:6d:9f:
                    87:38:71:0d:3c:fd:72:0d:fc:3c:b6:bc:d0:9a:7d:
                    f7:a2:36:17:87:f3:30:31:54:6e:6a:de:b1:31:ac:
                    93:3a:67:e6:76:62:8b:c4:04:e4:bf:f9:f9:78:bc:
                    6e:7d:c5:19:5f:98:49:08:18:f7:2f:9b:15:0f:2d:
                    f2:1c:42:be:ea:04:1a:c8:63:b7:d2:81:f5:b7:cd:
                    bd:37:c9:e5:c7:ef:38:93:bf:5b:86:67:8c:c8:95:
                    b8:7d:d7:fc:c3:1e:c4:c7:9c:ab:20:b0:df:db:9d:
                    21:c7:ab:7b:83:b7:70:48:a5:65:4a:0a:0a:78:84:
                    2e:a2:7e:58:54:31:5c:00:34:8c:ef:8e:f0:bc:25:
                    16:7b:42:67:a6:90:72:69:39:e1:e3:b7:1b:3f:b1:
                    f2:d6:cd:10:df:91:47:d4:41:c9:bd:ae:3c:a3:87:
                    44:c1:1d:14:4f:cd:f2:4b:f1:ef:86:77:a3:d3:ba:
                    6a:6f:13:8e:04:f5:a4:f1:b8:7d:5d:69:70:18:27:
                    2e:36:9c:35:96:62:11:ff:c2:29:c0:c1:e1:94:be:
                    ef:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:47:67:C8:2D:D1:76:84:EC:74:A3:61:BA:B4:DA:71:D8:23:40:3D
            X509v3 Authority Key Identifier:
                keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS135402.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.21.204.0/24
                  82.24.120.0/24
                  82.39.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:3f:1d:96:fe:07:8f:d0:9e:a7:c0:50:da:95:04:43:f6:59:
         25:4c:4a:52:fa:d0:29:6c:39:0c:7b:e4:42:22:42:a5:5c:c7:
         16:8d:55:70:80:99:60:00:a0:fa:98:af:43:c2:65:ab:23:50:
         8b:3b:f8:b7:cc:14:0b:17:ab:92:ac:dd:97:17:c2:c4:ed:58:
         02:51:39:4a:5e:51:ad:30:61:da:01:ba:86:9b:bd:34:77:07:
         41:76:03:af:39:db:a4:81:24:04:47:2f:4e:7f:ff:80:0b:02:
         9a:c9:f3:71:b3:ef:d9:a0:0f:f2:c2:da:52:f2:20:64:63:71:
         48:31:7c:cf:06:63:d3:c4:29:13:9a:04:cf:77:f6:08:4e:bb:
         85:9c:6a:7d:8d:61:d4:51:79:68:a9:18:36:db:13:32:57:e7:
         b3:52:29:77:90:f5:d3:12:d1:87:41:6b:d5:1c:64:ec:c3:cd:
         08:f4:95:74:1b:de:90:9c:8d:46:ee:ef:b4:8e:90:4d:b0:83:
         97:b1:75:81:4c:5c:cd:8d:65:c1:03:c2:af:d0:3b:17:f7:ab:
         80:8f:b0:8c:44:ce:f2:d5:03:30:5f:1d:80:a8:23:d9:8e:ef:
         14:19:e8:9b:4c:9c:b5:f4:a9:8b:f2:8e:94:dd:dc:a2:61:d1:
         32:e7:46:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 23:24:00 2026 by rpki-client