This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS197795.roa
File:                     AS197795.roa (raw, json)
Hash identifier:          XCL9HSsTzgTiKEdUgbJJGeHwxsW67qvz3KByW2IYPz4=
Subject key identifier:   6A:DB:DC:F0:A8:83:7D:09:AB:47:8C:B9:78:C2:D0:0C:4C:6E:F8:00
Certificate issuer:       /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial:       05A06ACF34595FAF0C781EFBA4B2E9D6C12F63DC
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS197795.roa
Signing time:             Fri 14 Nov 2025 21:13:54 +0000
ROA not before:           Fri 14 Nov 2025 21:08:54 +0000
ROA not after:            Fri 13 Nov 2026 21:13:54 +0000
asID:                     197795
IP address blocks:        82.38.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Dec 2025 00:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:a0:6a:cf:34:59:5f:af:0c:78:1e:fb:a4:b2:e9:d6:c1:2f:63:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
        Validity
            Not Before: Nov 14 21:08:54 2025 GMT
            Not After : Nov 13 21:13:54 2026 GMT
        Subject: CN=6ADBDCF0A8837D09AB478CB978C2D00C4C6EF800
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ca:30:35:b0:d1:91:b9:f0:d1:90:7d:a8:82:
                    e3:3b:b5:32:70:e0:51:4e:7b:33:fe:f4:99:89:77:
                    ee:41:7b:19:e9:0e:0c:f4:d5:91:88:72:9f:89:fe:
                    d0:b6:52:cf:5c:43:fe:31:d9:2f:64:ef:18:d2:0d:
                    af:0f:dd:13:9a:94:05:c8:d6:37:f2:b4:33:b3:b6:
                    55:73:be:3e:ca:3c:c0:1d:5e:03:09:fe:52:98:ee:
                    14:05:a6:b2:93:ba:ec:93:e5:c0:58:92:aa:fe:c4:
                    3f:87:13:63:d8:8a:9f:62:76:36:d9:b3:19:32:9e:
                    dd:e1:0b:cd:ff:8e:50:6b:e4:f9:b7:8f:7d:83:bf:
                    b6:f4:45:80:83:2f:2d:60:95:6a:e1:43:f6:b5:9a:
                    ca:c6:e3:59:23:76:b9:57:33:b5:35:89:b1:3f:6e:
                    de:71:a5:d1:2f:a2:33:49:72:f7:e9:3c:93:dd:92:
                    78:53:fe:3e:48:01:81:b0:8f:af:20:ab:6e:ab:e8:
                    2d:3d:08:8c:10:76:72:7e:25:4e:a1:cc:46:5c:3c:
                    f4:95:12:3f:85:66:3a:46:41:e1:76:66:0a:ce:b1:
                    19:e8:c0:08:27:4f:22:12:62:83:33:d5:3a:67:fa:
                    dd:a5:5e:f5:a2:a3:79:1f:7a:1c:22:10:77:d7:87:
                    97:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:DB:DC:F0:A8:83:7D:09:AB:47:8C:B9:78:C2:D0:0C:4C:6E:F8:00
            X509v3 Authority Key Identifier:
                keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS197795.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.38.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:28:e3:0a:8a:8d:91:0b:5b:9a:bf:d6:87:b3:79:f8:cb:93:
         33:07:4d:df:8d:af:77:31:5b:6f:01:f9:41:8a:d0:de:3e:ad:
         75:e2:d4:47:16:57:99:82:10:a6:a0:5b:95:1a:70:a9:25:d2:
         89:e1:14:1e:b3:d1:52:bb:e9:5f:be:5d:7c:ae:ab:8a:1a:e2:
         d4:08:80:67:c8:a0:f1:50:08:d3:c2:ee:2c:ee:4e:d9:b3:8b:
         fc:32:28:ec:74:f8:48:29:63:fd:e6:39:db:ff:bf:5e:82:fe:
         1c:6e:7d:44:c3:75:a1:47:3f:19:15:05:7b:0d:2c:fe:c6:d0:
         6d:4a:c8:ff:16:1f:13:d6:41:11:a1:76:35:b8:98:b3:c2:f0:
         a0:86:ae:e2:ce:95:bf:17:f4:6c:ea:4e:8f:61:7d:a5:36:6b:
         43:9c:fa:1e:9a:b8:2e:05:01:71:88:3e:fe:ec:89:65:f6:78:
         4a:f3:8c:4b:14:69:dc:99:b4:d2:a1:77:2f:e5:f9:00:e6:1d:
         09:9b:96:fe:1a:2d:83:07:13:21:66:9c:3d:f5:6f:74:a4:d4:
         fd:61:f5:4b:08:24:ad:a9:a8:50:14:0f:a1:11:73:7a:b0:69:
         8b:4c:5f:bc:3e:c3:1b:b1:dd:47:65:5f:d3:94:ee:a3:47:1f:
         9b:43:af:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 4 05:59:00 2025 by rpki-client