This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS203403.roa
File:                     AS203403.roa (raw, json)
Hash identifier:          vpjPyKoO1dlSWGQtp8yfxpniZEkGXo96HNLLymW23gE=
Subject key identifier:   CE:4C:7B:59:59:02:C0:F6:3D:5C:5C:8B:45:83:8F:7B:29:C6:4F:48
Certificate issuer:       /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial:       3501592CED73A7CEED62C0141B216A3B607713E9
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS203403.roa
Signing time:             Wed 03 Dec 2025 15:15:15 +0000
ROA not before:           Wed 03 Dec 2025 15:10:15 +0000
ROA not after:            Wed 02 Dec 2026 15:15:15 +0000
asID:                     203403
IP address blocks:        82.41.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Dec 2025 00:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:01:59:2c:ed:73:a7:ce:ed:62:c0:14:1b:21:6a:3b:60:77:13:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
        Validity
            Not Before: Dec  3 15:10:15 2025 GMT
            Not After : Dec  2 15:15:15 2026 GMT
        Subject: CN=CE4C7B595902C0F63D5C5C8B45838F7B29C64F48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:cb:75:2a:dc:33:b4:3f:21:f8:da:94:d0:b2:
                    41:a0:8b:a9:fb:2a:6d:9f:ba:16:6f:5b:62:f3:18:
                    70:d2:cc:cc:e4:28:14:81:e9:82:f3:60:47:9e:95:
                    75:91:1c:52:64:f5:e0:0e:47:82:df:1a:3b:22:ca:
                    d5:51:0a:78:54:e8:58:be:c5:ec:b8:70:e6:3c:8e:
                    57:8d:6b:c5:bd:cb:45:33:91:1f:c4:08:dc:b3:8c:
                    f7:88:90:6b:61:3f:95:e5:12:2c:03:10:20:b1:e9:
                    ec:27:86:af:f0:0a:44:4a:6b:de:e7:4b:94:7e:a3:
                    e0:87:4e:30:88:7c:36:03:e5:b7:74:f8:0a:24:82:
                    5f:e7:b4:f2:0f:7a:40:b4:1d:a5:a8:fb:b4:21:db:
                    b1:3b:42:a4:a0:be:59:d5:0a:1f:97:51:b7:05:e4:
                    5d:ff:6b:04:e2:bd:76:5b:10:70:e9:a9:33:9d:6c:
                    84:1c:67:44:7c:d8:21:90:ef:c3:52:3b:de:ab:fb:
                    d3:43:1d:bc:64:6e:fa:ef:43:e6:4a:fb:19:04:a7:
                    9b:34:88:97:a7:13:23:22:f4:db:0e:ca:d7:1c:eb:
                    e3:c5:80:03:39:fe:56:57:18:44:05:86:7e:35:a3:
                    54:4e:69:93:27:dd:2a:ca:5b:ee:bc:cb:57:09:3d:
                    7f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:4C:7B:59:59:02:C0:F6:3D:5C:5C:8B:45:83:8F:7B:29:C6:4F:48
            X509v3 Authority Key Identifier:
                keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS203403.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.41.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:0c:a2:0d:05:1c:39:f1:b8:ef:5a:36:42:97:0b:b8:9c:82:
         82:03:3c:30:60:89:b5:ce:41:9b:e4:e3:57:ea:24:4f:24:04:
         55:3a:a3:82:5b:2b:64:ad:2e:dc:c5:9a:78:18:20:53:6e:7c:
         ee:0f:cf:68:0f:6b:03:d4:21:35:16:cf:b5:a2:eb:81:54:9e:
         41:33:90:04:c8:d7:4e:16:a5:96:35:3f:f1:76:57:63:2e:1e:
         b9:2f:f8:cf:fd:60:10:cb:a3:1c:fd:ad:f7:7d:1c:3e:ae:9c:
         ca:1b:ed:aa:97:37:2a:42:b9:98:56:e2:c7:d0:8c:c3:41:d5:
         e0:fa:9d:62:9a:c3:1d:f5:f9:e6:e6:bf:40:d2:1a:b6:e8:aa:
         d8:ac:b5:de:e3:7a:1e:86:24:dc:cd:6f:1d:81:5b:a8:a5:ce:
         9b:ea:00:87:49:b2:28:86:5b:dc:db:32:61:af:c6:6c:b3:5a:
         5e:fc:bb:db:63:9f:94:0b:ac:eb:32:2e:94:26:61:d6:cb:4d:
         07:4e:da:57:c5:5f:a6:dd:5b:87:aa:7e:04:e8:97:97:0a:10:
         46:63:41:d2:f1:e7:b2:90:13:ee:d6:d0:d5:01:eb:27:8d:27:
         a2:ac:0f:6f:24:aa:97:3a:47:a3:d3:99:3d:f2:34:19:56:cd:
         11:36:b7:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 4 06:01:42 2025 by rpki-client