This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS205463.roa
File:                     AS205463.roa (raw, json)
Hash identifier:          4AmHkyeLyhvFNi4mIyl6KBnXZeMS5L0UTjsbNmqf4dY=
Subject key identifier:   55:0D:CC:AF:A9:12:65:1B:FF:1A:74:4B:B6:FB:57:7C:2F:49:45:61
Certificate issuer:       /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial:       5720B8DC250E1D932EC5D7A11CC547DD580B219A
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS205463.roa
Signing time:             Sun 04 Jan 2026 21:42:22 +0000
ROA not before:           Sun 04 Jan 2026 21:37:22 +0000
ROA not after:            Sun 03 Jan 2027 21:42:22 +0000
asID:                     205463
IP address blocks:        82.22.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Jan 2026 04:45:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:20:b8:dc:25:0e:1d:93:2e:c5:d7:a1:1c:c5:47:dd:58:0b:21:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
        Validity
            Not Before: Jan  4 21:37:22 2026 GMT
            Not After : Jan  3 21:42:22 2027 GMT
        Subject: CN=550DCCAFA912651BFF1A744BB6FB577C2F494561
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:58:ea:65:ec:b2:fc:0b:fe:2f:96:90:02:6e:
                    7f:d1:35:67:a8:4f:23:1f:82:ca:49:d1:9b:1d:e9:
                    0b:b9:28:f1:f2:5d:f0:24:4d:ca:2b:4e:1a:e9:b9:
                    be:ee:9e:44:1c:8b:3b:66:99:a5:f8:54:d6:e5:a5:
                    c0:2c:24:37:b5:e0:10:c6:34:f3:64:89:f6:11:ea:
                    f6:ca:c0:98:66:69:69:e4:ef:00:a3:fc:d3:81:f8:
                    67:96:49:75:86:f2:01:bc:7b:92:e0:7e:32:8c:78:
                    00:8f:27:43:cb:98:ce:fb:19:e3:bb:30:58:c4:8e:
                    74:5d:47:c7:84:46:ae:9e:80:6e:1b:37:f1:3a:91:
                    7d:f0:fd:77:5b:5d:d1:33:0f:ad:d4:58:55:61:66:
                    0f:ac:0d:dc:1b:52:99:6d:68:0f:93:50:d3:e5:02:
                    78:18:cf:b1:14:21:0d:77:f2:8b:0e:45:20:21:73:
                    75:a0:2d:0e:8f:01:10:de:80:5b:49:c6:3b:a8:73:
                    b1:da:4f:a0:01:d4:d3:b6:14:1e:f1:b0:79:d5:c0:
                    2a:a8:cf:82:47:f0:a9:84:8a:b2:9b:43:19:50:a2:
                    8b:0b:8b:0f:17:37:ac:cb:d7:f7:4a:f8:09:01:f2:
                    36:d4:93:d1:ad:ee:d7:b1:90:28:10:a4:d5:91:c1:
                    6e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:0D:CC:AF:A9:12:65:1B:FF:1A:74:4B:B6:FB:57:7C:2F:49:45:61
            X509v3 Authority Key Identifier:
                keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS205463.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.22.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:b8:54:42:33:6d:35:a8:c2:0e:71:6f:76:79:ad:5b:da:c4:
         e0:77:20:72:00:74:50:84:70:c2:0e:5f:7d:a2:5d:50:ff:7a:
         09:dc:af:fd:8e:c2:2c:a0:f2:3d:09:11:c6:9f:1a:e3:5b:1f:
         e9:ab:b7:b3:99:9c:8d:70:7b:99:4c:d1:6b:e3:96:1a:ab:f5:
         52:48:fb:21:0d:cc:5b:f8:b5:7f:36:20:99:29:a4:6d:58:f8:
         50:e1:00:38:c4:ce:1a:32:db:1d:1e:8b:6a:eb:fc:37:68:b9:
         bd:bf:7b:20:36:4c:2e:a7:6f:c9:63:82:75:e0:ea:3a:a3:3f:
         08:0e:52:f0:bb:a7:fc:8a:ec:58:0f:74:61:4d:69:ec:06:0c:
         9d:19:83:21:75:63:75:ff:12:82:7a:ad:e2:70:c9:50:3b:4a:
         c1:85:70:aa:9b:63:42:f4:6e:0d:76:8b:17:d5:f3:cd:5a:a9:
         02:8f:62:5b:b4:67:c4:10:2b:02:9d:c0:c1:3f:17:29:ca:1b:
         08:ab:0b:a0:5f:0c:76:aa:88:5f:bd:27:09:30:10:25:e5:86:
         0d:2f:51:fd:68:c5:49:fe:d9:df:a4:57:8a:be:78:9c:13:69:
         06:f0:2b:be:19:b9:25:ac:52:0f:b5:48:38:1e:ce:ae:5a:0c:
         4f:76:cf:f0
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUVyC43CUOHZMuxdehHMVH3VgLIZowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjAxMDQyMTM3MjJaFw0yNzAxMDMyMTQyMjJaMDMxMTAvBgNV
BAMTKDU1MERDQ0FGQTkxMjY1MUJGRjFBNzQ0QkI2RkI1NzdDMkY0OTQ1NjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUWOpl7LL8C/4vlpACbn/RNWeo
TyMfgspJ0Zsd6Qu5KPHyXfAkTcorThrpub7unkQciztmmaX4VNblpcAsJDe14BDG
NPNkifYR6vbKwJhmaWnk7wCj/NOB+GeWSXWG8gG8e5LgfjKMeACPJ0PLmM77GeO7
MFjEjnRdR8eERq6egG4bN/E6kX3w/XdbXdEzD63UWFVhZg+sDdwbUpltaA+TUNPl
AngYz7EUIQ138osORSAhc3WgLQ6PARDegFtJxjuoc7HaT6AB1NO2FB7xsHnVwCqo
z4JH8KmEirKbQxlQoosLiw8XN6zL1/dK+AkB8jbUk9Gt7texkCgQpNWRwW7bAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUVQ3Mr6kSZRv/GnRLtvtXfC9JRWEwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjA1NDYzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUhYG
MA0GCSqGSIb3DQEBCwUAA4IBAQBBuFRCM201qMIOcW92ea1b2sTgdyByAHRQhHDC
Dl99ol1Q/3oJ3K/9jsIsoPI9CRHGnxrjWx/pq7ezmZyNcHuZTNFr45Yaq/VSSPsh
Dcxb+LV/NiCZKaRtWPhQ4QA4xM4aMtsdHotq6/w3aLm9v3sgNkwup2/JY4J14Oo6
oz8IDlLwu6f8iuxYD3RhTWnsBgydGYMhdWN1/xKCeq3icMlQO0rBhXCqm2NC9G4N
dosX1fPNWqkCj2JbtGfEECsCncDBPxcpyhsIqwugXwx2qohfvScJMBAl5YYNL1H9
aMVJ/tnfpFeKvnicE2kG8Cu+GbklrFIPtUg4Hs6uWgxPds/w
-----END CERTIFICATE-----
Generated at Sun Jan 18 08:53:22 2026 by rpki-client