This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS206766.roa
File:                     AS206766.roa (raw, json)
Hash identifier:          ZtiV7t8xKsG01qSuZDwO5DJYZgDMqd9ex4QtpwKgTs8=
Subject key identifier:   B3:3E:76:17:F5:FB:8F:6C:AF:E0:D3:14:16:17:E9:BA:85:87:73:B2
Certificate issuer:       /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial:       52476FFB4E6FFDEAEE45F5547E43A11E27BB38C8
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS206766.roa
Signing time:             Mon 01 Dec 2025 16:29:21 +0000
ROA not before:           Mon 01 Dec 2025 16:24:21 +0000
ROA not after:            Mon 30 Nov 2026 16:29:21 +0000
asID:                     206766
IP address blocks:        82.38.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Dec 2025 00:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:47:6f:fb:4e:6f:fd:ea:ee:45:f5:54:7e:43:a1:1e:27:bb:38:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
        Validity
            Not Before: Dec  1 16:24:21 2025 GMT
            Not After : Nov 30 16:29:21 2026 GMT
        Subject: CN=B33E7617F5FB8F6CAFE0D3141617E9BA858773B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b4:80:e8:f6:ac:e2:d4:57:40:0d:be:41:31:
                    db:71:1f:fd:6d:e5:35:f0:20:e2:d1:ad:a4:bc:83:
                    7a:81:38:a2:f1:36:14:b8:a5:29:ff:90:65:55:8d:
                    79:a1:b0:8d:ba:0f:6c:6d:76:48:27:e3:e2:2a:09:
                    dd:31:d5:95:60:09:5a:c0:a1:e6:6d:d0:48:99:c3:
                    ff:b2:16:05:da:b8:34:30:c1:6e:c0:d0:d2:75:83:
                    96:e6:ad:79:4e:07:61:6c:8c:3b:c7:52:63:5e:99:
                    03:8c:0f:23:35:78:46:ee:ed:20:e5:08:04:d4:35:
                    a7:68:29:9a:50:27:c9:e4:15:55:37:32:6b:0c:29:
                    cf:5d:ea:e8:a7:78:51:ff:c4:b0:89:8e:4e:c0:12:
                    3b:d3:33:04:2e:99:a8:ea:24:8f:94:20:4a:36:cd:
                    7b:5e:c8:97:9b:b6:d2:75:e6:61:3b:e0:1a:c1:19:
                    74:d5:e1:f4:45:fb:77:95:e3:c5:ab:00:63:52:2c:
                    9c:be:9a:1f:0d:8c:c4:c7:5f:cd:4e:fb:c7:ef:7b:
                    2b:7d:c3:67:60:40:39:ee:10:ef:69:f3:b3:f2:79:
                    ac:44:a2:ec:b8:ee:55:5c:20:76:cb:33:a6:c0:fb:
                    3d:10:5a:47:62:8d:80:ec:f8:c3:70:63:05:c1:c3:
                    fd:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:3E:76:17:F5:FB:8F:6C:AF:E0:D3:14:16:17:E9:BA:85:87:73:B2
            X509v3 Authority Key Identifier:
                keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS206766.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.38.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:20:ca:bf:69:61:e8:4a:33:ed:ea:c8:e9:94:52:5f:72:80:
         2d:42:66:b7:da:4e:75:9a:0f:20:3f:25:19:35:bc:74:c4:f2:
         91:f9:df:9a:c6:01:c4:f9:59:24:0d:27:99:6c:ae:ac:6e:6d:
         9e:31:ee:c5:87:40:77:10:a3:c0:d5:c7:a4:63:02:1e:7b:52:
         51:d4:ba:60:76:cf:4c:be:50:8e:e8:2d:13:18:84:34:03:08:
         86:68:68:fc:af:8f:ab:f8:4c:b0:7d:e5:13:0d:3e:13:7e:09:
         8c:05:99:a8:b5:f0:86:7e:6c:46:63:e2:19:d5:db:4a:d8:2e:
         1f:5a:2d:e4:86:e9:f8:42:be:77:f7:6a:6e:b3:35:5a:d4:1a:
         4e:da:f9:31:47:eb:95:46:0d:d2:ae:03:6b:17:06:37:39:a7:
         e9:fb:72:6c:f5:df:48:31:f1:ea:35:a0:c9:60:9e:63:0c:ba:
         8a:77:52:ca:6d:41:b7:49:70:77:08:0f:e8:43:69:df:e5:2a:
         48:e0:97:56:c0:9c:36:86:0f:03:76:8c:22:e5:7c:95:96:99:
         ed:86:3c:8b:ec:41:42:ec:70:cd:bc:9d:3a:e0:77:2c:95:30:
         92:97:76:75:6e:d0:69:f8:97:93:fa:7b:d6:d0:68:72:79:b2:
         4b:1a:3e:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 4 06:01:59 2025 by rpki-client