This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS154373.roa
File:                     AS154373.roa (raw, json)
Hash identifier:          kcc5XIUrmJQE/3D6tacUeksFApyKZ4R3pbczbYJ6LHw=
Subject key identifier:   8D:BB:F1:E5:AA:D6:0F:8F:2D:84:38:83:BA:DA:D8:D8:57:43:27:52
Certificate issuer:       /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial:       7602FB3828CA5497392CEEE705480D789FD5ECE4
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS154373.roa
Signing time:             Sun 23 Nov 2025 03:58:11 +0000
ROA not before:           Sun 23 Nov 2025 03:53:11 +0000
ROA not after:            Sun 22 Nov 2026 03:58:11 +0000
asID:                     154373
IP address blocks:        82.29.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 04 Dec 2025 15:08:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:02:fb:38:28:ca:54:97:39:2c:ee:e7:05:48:0d:78:9f:d5:ec:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
        Validity
            Not Before: Nov 23 03:53:11 2025 GMT
            Not After : Nov 22 03:58:11 2026 GMT
        Subject: CN=8DBBF1E5AAD60F8F2D843883BADAD8D857432752
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:6f:84:56:c7:9b:48:57:06:66:92:ca:14:87:
                    3c:03:11:6b:ab:31:51:60:a6:48:98:9f:ac:98:d8:
                    77:af:1b:f4:db:91:1a:da:cd:1a:3b:b9:c6:a0:09:
                    ad:33:61:0a:01:4a:fd:91:8d:63:6b:98:7f:82:8f:
                    10:bb:e1:c3:c0:74:a3:6e:91:e8:af:ae:3b:93:a5:
                    c1:be:95:d1:e9:93:fb:3c:cc:87:c5:cd:52:dc:fc:
                    5d:bf:07:b3:12:7b:94:2a:dd:f0:72:88:5f:3d:38:
                    9f:ae:26:82:d1:8d:5d:66:ed:34:62:8a:9e:79:b7:
                    23:79:0f:88:fc:96:8a:dc:49:2d:43:04:7d:3b:3d:
                    f3:f6:cc:c5:0d:a0:f9:24:fe:31:8b:80:b7:47:f7:
                    77:0b:18:f4:89:a5:f2:c3:88:6e:f8:93:c4:f5:83:
                    75:6a:74:34:79:5c:62:e6:27:5e:d0:c3:4b:d9:48:
                    86:3a:d8:eb:88:a7:0e:35:27:8f:03:36:a1:7c:9e:
                    ca:5a:3b:cf:ab:0a:0a:ab:f8:2c:cf:3d:18:42:e3:
                    cb:8c:79:30:92:3a:cd:9c:b2:f7:28:77:d3:c7:38:
                    9d:97:0d:41:5d:29:1a:53:79:76:ae:60:6a:9f:36:
                    bc:41:0c:7a:1b:6d:ad:64:44:05:9a:1e:47:9a:e8:
                    41:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:BB:F1:E5:AA:D6:0F:8F:2D:84:38:83:BA:DA:D8:D8:57:43:27:52
            X509v3 Authority Key Identifier:
                keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS154373.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.29.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:e8:0f:ec:1c:04:11:60:b9:e1:07:29:1d:08:1e:f8:57:eb:
         75:ed:6e:56:52:65:cc:45:46:b3:a9:69:ec:b6:ac:7c:06:db:
         ab:ad:84:f1:e4:67:33:37:84:13:1c:06:9f:cc:31:63:c7:b7:
         7e:85:aa:6d:db:ac:87:09:c4:63:77:36:a5:05:e4:9e:7b:6b:
         b4:01:af:0e:9c:f9:32:2d:93:c3:52:8f:6b:d9:a7:5c:95:67:
         a1:3c:81:1d:10:ca:57:94:79:09:4b:1a:a7:cb:c4:67:27:73:
         d6:f5:06:88:b2:0c:1a:c8:00:84:d8:2e:b5:2d:a3:87:fa:15:
         17:81:b2:6c:d6:bc:1c:ae:69:11:23:a1:72:b3:0d:32:69:60:
         19:12:22:7b:11:fc:3c:b2:2a:87:55:b2:5f:16:ea:da:88:a7:
         14:eb:b7:af:22:48:38:32:03:f4:d3:ee:3c:57:04:1d:1d:0a:
         aa:26:c1:2a:42:96:3d:74:cd:eb:d9:30:a0:1b:37:aa:93:98:
         7a:05:a4:27:3c:b5:85:1d:1f:f8:20:7e:05:81:82:7e:e2:93:
         2d:ba:a9:20:86:82:10:69:97:04:e7:19:ba:14:c3:4c:33:54:
         29:54:1d:97:6b:35:6a:08:4f:5c:44:5e:09:84:cd:72:03:f9:
         73:31:f9:da
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUdgL7OCjKVJc5LO7nBUgNeJ/V7OQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNTExMjMwMzUzMTFaFw0yNjExMjIwMzU4MTFaMDMxMTAvBgNV
BAMTKDhEQkJGMUU1QUFENjBGOEYyRDg0Mzg4M0JBREFEOEQ4NTc0MzI3NTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWb4RWx5tIVwZmksoUhzwDEWur
MVFgpkiYn6yY2HevG/TbkRrazRo7ucagCa0zYQoBSv2RjWNrmH+CjxC74cPAdKNu
keivrjuTpcG+ldHpk/s8zIfFzVLc/F2/B7MSe5Qq3fByiF89OJ+uJoLRjV1m7TRi
ip55tyN5D4j8lorcSS1DBH07PfP2zMUNoPkk/jGLgLdH93cLGPSJpfLDiG74k8T1
g3VqdDR5XGLmJ17Qw0vZSIY62OuIpw41J48DNqF8nspaO8+rCgqr+CzPPRhC48uM
eTCSOs2csvcod9PHOJ2XDUFdKRpTeXauYGqfNrxBDHobba1kRAWaHkea6EExAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUjbvx5arWD48thDiDutrY2FdDJ1IwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMTU0MzczLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUh1Y
MA0GCSqGSIb3DQEBCwUAA4IBAQCE6A/sHAQRYLnhBykdCB74V+t17W5WUmXMRUaz
qWnstqx8BturrYTx5GczN4QTHAafzDFjx7d+hapt26yHCcRjdzalBeSee2u0Aa8O
nPkyLZPDUo9r2adclWehPIEdEMpXlHkJSxqny8RnJ3PW9QaIsgwayACE2C61LaOH
+hUXgbJs1rwcrmkRI6Fysw0yaWAZEiJ7Efw8siqHVbJfFuraiKcU67evIkg4MgP0
0+48VwQdHQqqJsEqQpY9dM3r2TCgGzeqk5h6BaQnPLWFHR/4IH4FgYJ+4pMtuqkg
hoIQaZcE5xm6FMNMM1QpVB2XazVqCE9cRF4JhM1yA/lzMfna
-----END CERTIFICATE-----
Generated at Wed Dec 3 16:30:43 2025 by rpki-client