This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS197537.roa
File:                     AS197537.roa (raw, json)
Hash identifier:          9eAlo08aCf6D4KL0xzLIXE9xx40B5h2GiAPmqvdhw1s=
Subject key identifier:   DF:8F:EE:A7:51:6D:63:60:91:D6:59:19:02:B6:CB:EE:B3:54:1C:0A
Certificate issuer:       /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial:       46AF77E297F59A0211CBBE9CC1D74FA7335C7FBF
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS197537.roa
Signing time:             Sat 10 Jan 2026 05:30:32 +0000
ROA not before:           Sat 10 Jan 2026 05:25:32 +0000
ROA not after:            Sat 09 Jan 2027 05:30:32 +0000
asID:                     197537
IP address blocks:        82.21.77.0/24 maxlen: 24
                          82.22.176.0/24 maxlen: 24
                          82.23.148.0/24 maxlen: 24
                          82.24.84.0/24 maxlen: 24
                          82.26.194.0/24 maxlen: 24
                          82.39.154.0/24 maxlen: 24
                          82.39.196.0/22 maxlen: 24
                          82.39.248.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Jan 2026 04:45:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:af:77:e2:97:f5:9a:02:11:cb:be:9c:c1:d7:4f:a7:33:5c:7f:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
        Validity
            Not Before: Jan 10 05:25:32 2026 GMT
            Not After : Jan  9 05:30:32 2027 GMT
        Subject: CN=DF8FEEA7516D636091D6591902B6CBEEB3541C0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c3:50:e9:ba:92:03:e7:63:8e:78:29:3f:ec:
                    ba:8f:3a:1c:9c:e8:98:9c:2a:6d:be:55:74:4b:ec:
                    03:33:72:65:9f:c4:48:79:7f:4a:35:cf:58:78:3d:
                    8e:6d:82:77:06:0a:1f:c0:c9:0c:63:03:c9:a9:ca:
                    86:b2:75:b5:9b:ab:a2:a9:a8:8a:a6:34:8c:56:95:
                    f7:47:b7:dd:a4:4c:ad:e4:b2:af:37:05:13:14:21:
                    0d:ec:99:ba:6e:f7:c9:5e:8a:80:91:6d:9d:6b:e9:
                    df:68:23:3f:e0:95:6e:f8:7c:35:b8:2b:44:5e:10:
                    85:e2:8b:32:95:2b:34:63:29:a3:d6:e6:67:16:b6:
                    c7:5d:14:30:f9:8e:90:da:d6:be:99:ca:ca:1c:84:
                    72:79:d5:fe:49:33:25:c4:39:0e:f0:f8:44:71:3b:
                    2c:0c:88:7a:59:ae:b8:87:09:24:f9:b0:d2:1f:e1:
                    a1:22:90:2d:83:4e:23:af:4c:a7:34:98:c0:bb:ab:
                    1a:69:b1:75:b1:2c:0c:62:33:8a:d6:53:2e:6a:ff:
                    d7:0f:7b:d7:55:9a:a9:32:3e:cf:c5:25:23:89:12:
                    e0:66:a3:53:ab:12:bb:da:e9:f4:aa:ef:ef:f8:85:
                    20:b3:b4:83:89:72:c6:ba:5f:15:0c:b8:6a:74:92:
                    c6:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:8F:EE:A7:51:6D:63:60:91:D6:59:19:02:B6:CB:EE:B3:54:1C:0A
            X509v3 Authority Key Identifier:
                keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS197537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.21.77.0/24
                  82.22.176.0/24
                  82.23.148.0/24
                  82.24.84.0/24
                  82.26.194.0/24
                  82.39.154.0/24
                  82.39.196.0/22
                  82.39.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5a:74:46:12:cf:61:a8:f2:41:51:2a:f8:70:98:51:53:10:12:
         73:9d:d3:b8:cf:e7:a9:5b:21:4c:91:13:11:d3:f6:7e:53:ed:
         07:8c:0d:e0:92:10:5b:f1:0d:bc:8f:ab:89:a8:f0:4e:4a:b3:
         cb:23:20:fd:2e:1a:74:7d:e1:95:4f:47:70:34:b5:26:60:4d:
         c4:61:6e:02:f4:ce:d6:0c:c3:43:a4:58:9d:6a:be:5b:31:f3:
         c1:d5:07:63:48:4e:d3:d4:88:1d:8a:ae:a2:4e:58:20:84:32:
         eb:78:a5:9e:de:bf:cd:77:fb:2d:2c:95:d7:71:25:d6:de:cc:
         40:cf:ab:ea:bd:4a:44:97:01:98:e2:60:a4:a5:a7:50:b5:6e:
         6c:43:d9:3a:59:94:e5:d7:b2:f8:9c:c4:f6:a2:5d:a3:ef:1e:
         34:b3:71:55:15:47:e9:59:30:25:91:08:99:8b:6f:10:0d:c4:
         e6:2e:76:c3:b0:5d:e0:39:86:23:70:92:51:18:0c:82:29:e9:
         2f:f8:46:f5:17:14:15:f1:fb:25:17:8a:ad:1d:4e:50:09:18:
         84:17:e5:03:2e:9d:01:25:62:21:07:3b:ab:9a:e2:65:1b:2c:
         01:24:af:4e:ba:4e:d7:de:f8:93:b9:41:c3:15:36:f5:ca:93:
         ab:d9:ed:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 08:57:01 2026 by rpki-client