This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS200260.roa
File:                     AS200260.roa (raw, json)
Hash identifier:          VlXNKBWqcGKgsZZF3Htlt+52CNW/H5+IVHMhM7f3MNw=
Subject key identifier:   B8:D2:60:95:B5:03:A5:77:A4:2C:49:0B:E1:FA:43:AA:8F:63:62:0A
Certificate issuer:       /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial:       21C63E04169495F4005BB783331396E6AEB6DD8D
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS200260.roa
Signing time:             Mon 24 Nov 2025 13:36:15 +0000
ROA not before:           Mon 24 Nov 2025 13:31:15 +0000
ROA not after:            Mon 23 Nov 2026 13:36:15 +0000
asID:                     200260
IP address blocks:        82.39.200.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Dec 2025 00:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:c6:3e:04:16:94:95:f4:00:5b:b7:83:33:13:96:e6:ae:b6:dd:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
        Validity
            Not Before: Nov 24 13:31:15 2025 GMT
            Not After : Nov 23 13:36:15 2026 GMT
        Subject: CN=B8D26095B503A577A42C490BE1FA43AA8F63620A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a8:2a:ad:b4:2c:54:cf:c0:7b:7b:77:e0:79:
                    b2:b6:75:e2:ce:4d:90:1d:7b:80:f0:c9:b1:65:3b:
                    d9:f4:b7:ef:78:d2:d4:6e:32:ad:a5:70:0c:35:44:
                    76:90:67:3f:fe:24:89:ee:93:40:da:cb:95:8e:f0:
                    65:80:36:96:57:2b:b9:c9:b7:6d:ab:e6:f8:d1:d9:
                    e2:a1:79:31:c9:10:0b:d4:ed:76:d6:fc:ce:5c:6c:
                    63:ed:a2:5d:68:98:a0:f0:d9:1d:43:fb:0d:bd:8f:
                    e0:59:31:16:d5:6c:60:8e:50:3a:2d:9c:e7:1b:75:
                    15:bb:95:5a:8d:b2:d8:74:c0:30:59:fd:d6:09:b2:
                    d3:60:cf:55:46:98:63:44:44:19:0e:eb:9a:56:30:
                    cd:e6:d4:d3:eb:e3:7e:ac:3b:22:90:3d:73:87:8f:
                    45:90:7f:69:b1:bb:99:25:e7:bd:ca:1b:2c:da:09:
                    41:66:24:7e:e0:88:68:3a:a0:75:d0:c2:e5:4b:cc:
                    0b:4e:a1:59:91:c8:c7:ad:2d:ec:5f:7d:61:cb:f6:
                    ba:d0:dc:a7:b6:1f:5b:89:cc:7b:32:72:92:b0:07:
                    54:35:26:92:65:2a:d6:05:0f:74:fd:b5:1c:92:11:
                    ed:38:3a:28:65:ae:9c:db:4f:d1:f8:a9:f0:04:50:
                    15:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:D2:60:95:B5:03:A5:77:A4:2C:49:0B:E1:FA:43:AA:8F:63:62:0A
            X509v3 Authority Key Identifier:
                keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS200260.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.39.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:13:99:ea:c0:15:06:dd:5c:ac:77:d8:55:5a:7f:38:b6:59:
         29:8d:75:90:d5:3a:a4:94:98:37:78:3e:1b:ad:c7:92:41:24:
         ba:b0:5b:90:2c:36:9b:30:58:ee:83:ab:9d:b0:e8:cc:c9:d3:
         95:1d:f8:57:27:3f:53:46:3b:a6:fd:4c:64:26:48:f4:9b:60:
         61:57:58:06:9f:c1:f2:2a:06:59:83:e2:45:0c:b4:c1:f4:dc:
         8f:22:9b:c8:91:c2:db:2f:7c:6c:ea:bb:62:c5:a3:92:7c:ff:
         67:85:81:5a:05:6c:ea:b0:21:ad:84:30:0e:ab:2d:26:8c:85:
         f5:99:48:75:85:8a:51:6a:59:1e:1f:37:dc:cb:1b:1a:e4:df:
         fa:c2:5a:f3:86:ef:66:1d:54:69:7f:5a:66:42:41:e0:37:73:
         04:4d:10:c0:aa:2b:bc:c3:15:69:2d:66:b2:c1:d3:49:3f:04:
         64:fe:d8:78:fc:5f:ba:4e:17:10:dc:f5:fa:fc:9a:6c:2f:26:
         b2:5b:36:0a:d1:d8:60:71:85:c7:b8:05:9a:cb:a0:b1:90:08:
         fe:be:d0:e3:53:f3:eb:7f:5a:62:e1:3d:d3:14:d6:3d:54:36:
         1f:be:64:80:73:e8:49:5b:72:11:64:b6:7c:1b:b3:af:31:fe:
         4f:27:94:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 4 05:59:20 2025 by rpki-client