This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS199614.roa
File:                     AS199614.roa (raw, json)
Hash identifier:          DtZinWlTf9RCjDdsikXAfqyPfIwvlO3QAimUYqZF0s4=
Subject key identifier:   4A:EB:29:99:7B:48:F0:B5:F7:19:E5:DC:8E:60:4D:C5:87:11:70:16
Certificate issuer:       /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial:       6E6AFD901DEDD1431E00EA009D251ED0DC2FD407
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS199614.roa
Signing time:             Sat 15 Nov 2025 02:15:27 +0000
ROA not before:           Sat 15 Nov 2025 02:10:27 +0000
ROA not after:            Sat 14 Nov 2026 02:15:27 +0000
asID:                     199614
IP address blocks:        82.38.16.0/24 maxlen: 24
                          82.38.45.0/24 maxlen: 24
                          82.38.106.0/24 maxlen: 24
                          82.38.110.0/24 maxlen: 24
                          82.38.123.0/24 maxlen: 24
                          82.38.208.0/24 maxlen: 24
                          82.38.209.0/24 maxlen: 24
                          82.38.213.0/24 maxlen: 24
                          82.38.214.0/24 maxlen: 24
                          82.39.82.0/24 maxlen: 24
                          82.39.83.0/24 maxlen: 24
                          82.39.84.0/24 maxlen: 24
                          82.39.85.0/24 maxlen: 24
                          82.39.87.0/24 maxlen: 24
                          82.39.88.0/24 maxlen: 24
                          82.39.89.0/24 maxlen: 24
                          82.39.90.0/24 maxlen: 24
                          82.39.91.0/24 maxlen: 24
                          82.39.92.0/24 maxlen: 24
                          82.39.100.0/24 maxlen: 24
                          82.39.104.0/24 maxlen: 24
                          82.39.106.0/24 maxlen: 24
                          82.39.167.0/24 maxlen: 24
                          82.39.191.0/24 maxlen: 24
                          82.39.192.0/24 maxlen: 24
                          82.41.1.0/24 maxlen: 24
                          82.41.5.0/24 maxlen: 24
                          82.41.6.0/24 maxlen: 24
                          82.41.7.0/24 maxlen: 24
                          82.41.8.0/24 maxlen: 24
                          82.41.9.0/24 maxlen: 24
                          82.41.10.0/24 maxlen: 24
                          82.41.11.0/24 maxlen: 24
                          82.41.12.0/24 maxlen: 24
                          82.41.14.0/24 maxlen: 24
                          82.41.15.0/24 maxlen: 24
                          82.41.22.0/24 maxlen: 24
                          82.41.23.0/24 maxlen: 24
                          82.41.24.0/24 maxlen: 24
                          82.41.25.0/24 maxlen: 24
                          82.41.28.0/24 maxlen: 24
                          82.41.29.0/24 maxlen: 24
                          82.41.32.0/24 maxlen: 24
                          82.41.33.0/24 maxlen: 24
                          82.41.38.0/24 maxlen: 24
                          82.41.39.0/24 maxlen: 24
                          82.41.48.0/24 maxlen: 24
                          82.41.49.0/24 maxlen: 24
                          82.41.96.0/24 maxlen: 24
                          82.41.116.0/24 maxlen: 24
                          82.41.123.0/24 maxlen: 24
                          82.41.146.0/24 maxlen: 24
                          82.41.157.0/24 maxlen: 24
                          82.41.169.0/24 maxlen: 24
                          82.41.182.0/24 maxlen: 24
                          82.41.199.0/24 maxlen: 24
                          82.41.209.0/24 maxlen: 24
                          82.41.220.0/24 maxlen: 24
                          82.41.239.0/24 maxlen: 24
                          82.41.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Dec 2025 00:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:6a:fd:90:1d:ed:d1:43:1e:00:ea:00:9d:25:1e:d0:dc:2f:d4:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
        Validity
            Not Before: Nov 15 02:10:27 2025 GMT
            Not After : Nov 14 02:15:27 2026 GMT
        Subject: CN=4AEB29997B48F0B5F719E5DC8E604DC587117016
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ca:c7:cf:7c:24:d2:db:e9:26:9c:de:b2:90:
                    8a:7e:5e:c6:14:f6:b4:5e:43:26:2d:61:1f:92:12:
                    4e:f3:31:fc:86:07:4c:02:b8:47:10:d7:8b:cf:0b:
                    89:de:85:67:36:e4:75:2a:e6:a6:91:ee:2a:46:de:
                    25:f9:ed:48:5b:16:e9:43:50:5b:b4:98:52:88:98:
                    07:dd:ed:82:04:0d:c1:aa:4a:f0:e0:81:4f:7d:c7:
                    e2:0c:fd:3b:47:76:f2:d5:37:49:2a:b4:9d:44:98:
                    a2:9f:35:cc:e4:bd:4b:c8:d1:a1:fe:9f:31:0a:88:
                    64:a6:52:77:1f:cc:1a:02:80:ba:6b:be:d6:11:7d:
                    dc:40:36:61:e6:d0:30:65:68:f9:15:24:bb:fb:90:
                    30:7b:7b:ad:f0:c5:a6:21:f0:3a:c1:94:8f:e6:75:
                    cb:3f:47:08:23:42:dd:60:e3:a0:e8:64:a9:e1:39:
                    ad:78:e6:15:42:05:8a:41:8a:cf:4e:55:3f:63:7b:
                    1b:63:4d:5c:50:48:df:ac:5a:a7:61:f6:10:bc:0e:
                    9c:f0:c5:4d:8d:c5:79:e8:ea:27:8a:9a:8e:0d:59:
                    39:e4:7e:85:65:1e:d0:68:43:20:75:1f:8a:6f:1d:
                    4f:d5:73:3f:95:da:f4:8d:3b:a4:06:ea:e7:2a:c8:
                    12:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:EB:29:99:7B:48:F0:B5:F7:19:E5:DC:8E:60:4D:C5:87:11:70:16
            X509v3 Authority Key Identifier:
                keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS199614.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.38.16.0/24
                  82.38.45.0/24
                  82.38.106.0/24
                  82.38.110.0/24
                  82.38.123.0/24
                  82.38.208.0/23
                  82.38.213.0-82.38.214.255
                  82.39.82.0-82.39.85.255
                  82.39.87.0-82.39.92.255
                  82.39.100.0/24
                  82.39.104.0/24
                  82.39.106.0/24
                  82.39.167.0/24
                  82.39.191.0-82.39.192.255
                  82.41.1.0/24
                  82.41.5.0-82.41.12.255
                  82.41.14.0/23
                  82.41.22.0-82.41.25.255
                  82.41.28.0/23
                  82.41.32.0/23
                  82.41.38.0/23
                  82.41.48.0/23
                  82.41.96.0/24
                  82.41.116.0/24
                  82.41.123.0/24
                  82.41.146.0/24
                  82.41.157.0/24
                  82.41.169.0/24
                  82.41.182.0/24
                  82.41.199.0/24
                  82.41.209.0/24
                  82.41.220.0/24
                  82.41.239.0-82.41.240.255

    Signature Algorithm: sha256WithRSAEncryption
         6d:3c:14:0a:48:f6:5e:74:5e:ec:e0:77:12:e2:e4:ef:71:60:
         7c:a9:36:e3:b3:a5:b4:e3:2e:a8:5f:84:54:3e:1c:40:94:30:
         88:70:02:bd:7e:0c:95:d9:e3:38:e4:bf:61:d7:0b:36:38:c5:
         62:9c:36:48:7c:c1:f8:31:c6:da:35:a9:05:ed:95:a8:08:cb:
         da:f5:98:92:bf:0c:a2:c1:f6:0f:98:2a:2e:3f:2a:25:c1:73:
         45:a6:55:2e:ed:23:ca:ec:16:9b:db:a4:5c:ee:7a:8d:80:11:
         6f:dd:a6:44:6d:85:56:2a:c8:0e:25:30:32:1e:2d:f3:e9:3b:
         40:ab:00:0b:99:2a:dd:84:ab:e5:35:1e:6b:bb:66:90:73:c9:
         27:62:7e:0c:da:d8:11:55:11:0d:55:60:ac:44:f3:94:27:89:
         b6:52:8c:c7:d3:f6:ca:f2:2c:5e:85:ad:01:32:c1:58:09:c8:
         a9:fa:af:60:c0:77:cd:fb:09:f9:ab:20:5d:0c:ed:b7:c3:26:
         fd:19:e2:14:7a:27:26:eb:e2:4e:28:5b:b3:8d:18:d4:17:a7:
         64:0b:7a:cf:17:56:e8:cd:0f:51:f6:1d:7a:98:fb:e2:08:a5:
         3c:2b:59:f8:d9:ac:2a:ee:6d:e8:e4:39:38:d3:2f:43:36:98:
         50:7a:a6:9f
-----BEGIN CERTIFICATE-----
MIIGATCCBOmgAwIBAgIUbmr9kB3t0UMeAOoAnSUe0Nwv1AcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNTExMTUwMjEwMjdaFw0yNjExMTQwMjE1MjdaMDMxMTAvBgNV
BAMTKDRBRUIyOTk5N0I0OEYwQjVGNzE5RTVEQzhFNjA0REM1ODcxMTcwMTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClysfPfCTS2+kmnN6ykIp+XsYU
9rReQyYtYR+SEk7zMfyGB0wCuEcQ14vPC4nehWc25HUq5qaR7ipG3iX57UhbFulD
UFu0mFKImAfd7YIEDcGqSvDggU99x+IM/TtHdvLVN0kqtJ1EmKKfNczkvUvI0aH+
nzEKiGSmUncfzBoCgLprvtYRfdxANmHm0DBlaPkVJLv7kDB7e63wxaYh8DrBlI/m
dcs/RwgjQt1g46DoZKnhOa145hVCBYpBis9OVT9jextjTVxQSN+sWqdh9hC8Dpzw
xU2NxXno6ieKmo4NWTnkfoVlHtBoQyB1H4pvHU/Vcz+V2vSNO6QG6ucqyBIbAgMB
AAGjggMLMIIDBzAdBgNVHQ4EFgQUSuspmXtI8LX3GeXcjmBNxYcRcBYwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMTk5NjE0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMIIBHgYIKwYBBQUHAQcBAf8EggENMIIBCTCCAQUEAgAB
MIH+AwQAUiYQAwQAUiYtAwQAUiZqAwQAUiZuAwQAUiZ7AwQBUibQMAwDBABSJtUD
BABSJtYwDAMEAVInUgMEAVInVDAMAwQAUidXAwQAUidcAwQAUidkAwQAUidoAwQA
UidqAwQAUienMAwDBABSJ78DBABSJ8ADBABSKQEwDAMEAFIpBQMEAFIpDAMEAVIp
DjAMAwQBUikWAwQBUikYAwQBUikcAwQBUikgAwQBUikmAwQBUikwAwQAUilgAwQA
Uil0AwQAUil7AwQAUimSAwQAUimdAwQAUimpAwQAUim2AwQAUinHAwQAUinRAwQA
UincMAwDBABSKe8DBABSKfAwDQYJKoZIhvcNAQELBQADggEBAG08FApI9l50Xuzg
dxLi5O9xYHypNuOzpbTjLqhfhFQ+HECUMIhwAr1+DJXZ4zjkv2HXCzY4xWKcNkh8
wfgxxto1qQXtlagIy9r1mJK/DKLB9g+YKi4/KiXBc0WmVS7tI8rsFpvbpFzueo2A
EW/dpkRthVYqyA4lMDIeLfPpO0CrAAuZKt2Eq+U1Hmu7ZpBzySdifgza2BFVEQ1V
YKxE85QnibZSjMfT9sryLF6FrQEywVgJyKn6r2DAd837CfmrIF0M7bfDJv0Z4hR6
Jybr4k4oW7ONGNQXp2QLes8XVujND1H2HXqY++IIpTwrWfjZrCrubejkOTjTL0M2
mFB6pp8=
-----END CERTIFICATE-----
Generated at Thu Dec 4 06:01:44 2025 by rpki-client