This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS150526.roa
File:                     AS150526.roa (raw, json)
Hash identifier:          IEQZobf7OFOT7B+vx4x+CM3g2HR6raMcp/VBnYI/N7c=
Subject key identifier:   F9:05:B8:CA:21:93:69:85:1F:B1:8C:82:9D:FB:25:26:67:54:3E:AD
Certificate issuer:       /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial:       0AA3C275FC684434823C6BC1D65AF6CDD78ADA9B
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS150526.roa
Signing time:             Mon 29 Dec 2025 13:45:16 +0000
ROA not before:           Mon 29 Dec 2025 13:40:16 +0000
ROA not after:            Mon 28 Dec 2026 13:45:16 +0000
asID:                     150526
IP address blocks:        82.41.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Jan 2026 04:45:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:a3:c2:75:fc:68:44:34:82:3c:6b:c1:d6:5a:f6:cd:d7:8a:da:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
        Validity
            Not Before: Dec 29 13:40:16 2025 GMT
            Not After : Dec 28 13:45:16 2026 GMT
        Subject: CN=F905B8CA219369851FB18C829DFB252667543EAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:65:03:5a:88:0c:66:9e:26:96:86:58:3f:15:
                    2f:be:bc:3c:08:5f:fa:b2:fc:8f:8c:1c:54:53:a0:
                    f5:2f:d8:0c:5d:4b:71:57:9c:6b:3f:ae:fe:65:bf:
                    f6:ff:83:b9:e2:5e:e8:af:83:d1:3f:a8:63:f1:b8:
                    44:86:90:65:00:f2:7d:e4:0e:61:cf:0f:ec:6c:0e:
                    e4:0f:07:87:6a:9b:33:40:0e:d0:76:b1:e4:02:f9:
                    f7:61:ae:18:51:78:68:70:0f:5e:48:4a:4a:d4:0b:
                    d3:ee:c4:dd:fa:86:d6:81:74:f5:ba:09:d4:33:9f:
                    16:b8:e2:58:20:81:4f:0d:1c:cd:42:d2:ab:32:9d:
                    d5:e7:14:1c:5d:22:e3:6d:64:46:aa:b3:60:b3:94:
                    cb:29:7d:3e:7c:94:1b:65:45:b6:95:94:58:2a:be:
                    cb:cc:a0:3c:fe:da:6b:6a:ba:84:e2:cb:a3:e0:4b:
                    ea:b8:a6:1f:27:40:7c:58:af:34:f2:d6:71:31:20:
                    95:de:12:fa:61:e6:e6:2a:ad:d7:08:4d:c5:80:58:
                    96:0f:f1:d6:53:dc:37:0f:1e:a3:cb:9e:d7:46:18:
                    eb:d7:d9:b9:c7:ff:b3:c2:99:88:0c:26:14:38:b0:
                    27:26:eb:3b:e8:b6:d9:9b:e3:9f:46:ad:41:1f:e2:
                    22:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:05:B8:CA:21:93:69:85:1F:B1:8C:82:9D:FB:25:26:67:54:3E:AD
            X509v3 Authority Key Identifier:
                keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS150526.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.41.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:0c:a8:4e:b7:cb:10:cb:e9:83:fb:74:33:0f:f6:1d:bb:45:
         e4:47:91:0c:c6:49:47:8d:ef:5c:82:bf:fc:e8:0b:a2:dd:74:
         76:cb:5a:be:0d:40:ac:8c:41:a5:5c:a3:32:d0:a5:ac:d6:06:
         4c:af:a9:3f:c3:c3:2b:c3:84:17:95:4a:ce:81:4b:69:51:51:
         e2:1f:3d:04:de:57:ce:6b:6d:c4:68:21:88:6a:fd:06:37:c9:
         42:17:8a:1f:24:74:82:20:c1:90:9b:4c:0b:cd:54:ec:4d:15:
         bc:38:d6:e1:86:b0:02:52:71:b2:ac:66:ef:c7:b3:6a:55:dd:
         74:38:02:53:14:66:e1:f5:29:50:4f:b4:86:3d:f1:84:9f:9c:
         bb:26:ca:f9:e4:cb:86:7d:84:ad:01:45:06:17:41:e2:33:25:
         de:19:69:c1:d8:10:56:2c:8f:71:a8:5a:50:c8:1e:52:46:56:
         ed:71:6b:c5:ca:17:bb:d3:be:03:15:8a:27:8b:13:a1:41:03:
         35:0b:28:96:85:31:2c:d7:3b:2f:36:87:c2:18:f9:1f:d9:7e:
         96:4a:da:39:12:b3:fd:f5:06:56:bf:b9:5d:6c:97:a5:70:72:
         a5:74:d6:67:1f:f9:44:7f:cf:53:ed:b8:15:c5:c8:39:39:7a:
         02:39:b2:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 08:53:21 2026 by rpki-client