This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS203992.roa
File:                     AS203992.roa (raw, json)
Hash identifier:          yy1AmYOrSQ88qFLAcRoQa38ha6Lyh9v6oieZp4T3Rw0=
Subject key identifier:   50:DE:2B:4F:9E:71:69:F3:E1:EB:BE:58:1F:F2:2B:7C:A8:F5:C3:B8
Certificate issuer:       /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial:       4A6280EB90D057814DCCBB602EBB1BA34D1E29CA
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS203992.roa
Signing time:             Sat 03 Jan 2026 23:51:46 +0000
ROA not before:           Sat 03 Jan 2026 23:46:46 +0000
ROA not after:            Sat 02 Jan 2027 23:51:46 +0000
asID:                     203992
IP address blocks:        82.24.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Jan 2026 04:45:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:62:80:eb:90:d0:57:81:4d:cc:bb:60:2e:bb:1b:a3:4d:1e:29:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
        Validity
            Not Before: Jan  3 23:46:46 2026 GMT
            Not After : Jan  2 23:51:46 2027 GMT
        Subject: CN=50DE2B4F9E7169F3E1EBBE581FF22B7CA8F5C3B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:1a:eb:02:25:14:90:ce:f6:80:c9:35:69:30:
                    83:d4:ff:26:ce:8a:1d:f0:ae:36:bc:dc:45:ab:2c:
                    df:ef:99:92:01:de:0e:ed:38:ec:a2:07:ce:f5:50:
                    d9:29:a1:bf:15:a9:40:c7:d5:42:9b:af:69:af:04:
                    e5:22:97:7d:66:07:69:8f:76:2b:a3:53:08:89:1b:
                    34:13:73:da:82:1b:a3:65:fe:a0:54:0f:64:12:a3:
                    be:2e:19:32:8d:aa:10:96:05:29:eb:b0:4a:ed:3f:
                    43:a0:a5:de:30:1d:63:8c:99:31:53:48:35:26:e7:
                    31:d1:a9:4f:2d:38:ca:8d:29:4d:b0:6f:80:f1:28:
                    02:e9:fd:d1:49:13:e0:2c:95:56:33:d9:16:b7:13:
                    2a:6f:c4:8c:09:15:9f:5e:e7:bb:ea:de:07:7c:74:
                    77:58:63:02:12:d0:ba:14:2b:aa:23:5e:e4:4e:84:
                    f6:af:83:91:f6:1b:f5:2d:92:0c:4b:a3:d9:da:dc:
                    f2:78:b3:6c:a6:51:da:7a:0c:ec:8d:53:79:78:e3:
                    64:40:ea:a4:7e:a0:92:34:a5:99:56:52:81:6a:cf:
                    1c:c1:c8:b9:76:07:2f:1b:97:20:e0:8e:3b:7a:e2:
                    19:0f:45:28:05:16:02:b4:9c:17:4a:26:24:12:b6:
                    aa:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:DE:2B:4F:9E:71:69:F3:E1:EB:BE:58:1F:F2:2B:7C:A8:F5:C3:B8
            X509v3 Authority Key Identifier:
                keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS203992.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.24.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:c6:27:1c:52:a4:9a:a7:64:d2:b2:73:8d:bb:db:32:5c:31:
         2f:49:fb:b1:ef:ba:76:af:66:64:3a:28:e8:f2:12:0b:06:d0:
         ae:d7:4b:7f:2f:77:ec:b5:f2:9b:3f:2d:c3:28:d9:53:3f:df:
         de:95:8f:c5:e1:87:d8:94:b3:7b:9f:da:86:54:f5:ae:84:9f:
         eb:32:86:5d:4d:91:c7:70:31:55:99:7d:c7:d8:e0:bc:fd:ac:
         b3:f7:b7:90:8d:8e:6e:48:6f:e6:c0:38:d9:51:e9:37:45:76:
         44:4a:49:8d:d3:f5:ce:7e:8c:cf:ca:2b:65:7a:7b:99:d0:3f:
         7b:72:ab:c8:a6:c0:f6:ae:4d:3f:1d:72:1f:ec:98:f9:a6:2d:
         f9:84:6c:b6:4f:2e:86:8e:ce:52:01:b8:03:00:6c:14:2b:85:
         69:7e:23:13:bb:59:b4:73:d3:2b:b3:2d:2c:df:2f:a3:5c:16:
         69:48:62:78:ec:55:89:ad:5f:0d:c5:1b:af:5c:52:f8:30:06:
         ff:1b:e6:1b:82:63:68:ab:73:1f:f4:90:fb:eb:46:19:75:57:
         3d:e0:da:a9:27:08:67:a1:6f:86:9e:dd:83:b5:a7:0c:8b:02:
         6a:af:c7:c1:84:d7:89:ff:78:e3:86:e4:bd:64:11:85:2e:51:
         42:cc:34:d7
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUSmKA65DQV4FNzLtgLrsbo00eKcowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjAxMDMyMzQ2NDZaFw0yNzAxMDIyMzUxNDZaMDMxMTAvBgNV
BAMTKDUwREUyQjRGOUU3MTY5RjNFMUVCQkU1ODFGRjIyQjdDQThGNUMzQjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjGusCJRSQzvaAyTVpMIPU/ybO
ih3wrja83EWrLN/vmZIB3g7tOOyiB871UNkpob8VqUDH1UKbr2mvBOUil31mB2mP
diujUwiJGzQTc9qCG6Nl/qBUD2QSo74uGTKNqhCWBSnrsErtP0Ogpd4wHWOMmTFT
SDUm5zHRqU8tOMqNKU2wb4DxKALp/dFJE+AslVYz2Ra3EypvxIwJFZ9e57vq3gd8
dHdYYwIS0LoUK6ojXuROhPavg5H2G/UtkgxLo9na3PJ4s2ymUdp6DOyNU3l442RA
6qR+oJI0pZlWUoFqzxzByLl2By8blyDgjjt64hkPRSgFFgK0nBdKJiQStqo9AgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUUN4rT55xafPh675YH/IrfKj1w7gwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjAzOTkyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUhgf
MA0GCSqGSIb3DQEBCwUAA4IBAQAYxiccUqSap2TSsnONu9syXDEvSfux77p2r2Zk
Oijo8hILBtCu10t/L3fstfKbPy3DKNlTP9/elY/F4YfYlLN7n9qGVPWuhJ/rMoZd
TZHHcDFVmX3H2OC8/ayz97eQjY5uSG/mwDjZUek3RXZESkmN0/XOfozPyitlenuZ
0D97cqvIpsD2rk0/HXIf7Jj5pi35hGy2Ty6Gjs5SAbgDAGwUK4VpfiMTu1m0c9Mr
sy0s3y+jXBZpSGJ47FWJrV8NxRuvXFL4MAb/G+YbgmNoq3Mf9JD760YZdVc94Nqp
JwhnoW+Gnt2DtacMiwJqr8fBhNeJ/3jjhuS9ZBGFLlFCzDTX
-----END CERTIFICATE-----
Generated at Sun Jan 18 08:53:22 2026 by rpki-client