This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS208483.roa
File:                     AS208483.roa (raw, json)
Hash identifier:          CB6aC3ovJR29xqtaTnI5dYBdJLGO1BpGLes1DSV2w6o=
Subject key identifier:   E5:76:3C:72:A2:BB:50:C8:56:82:B4:74:88:31:AF:0E:47:D9:1C:10
Certificate issuer:       /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial:       0BA3B3D654F2157203BDA8552EC61D6DB92C26DA
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS208483.roa
Signing time:             Thu 01 Jan 2026 00:14:52 +0000
ROA not before:           Thu 01 Jan 2026 00:09:52 +0000
ROA not after:            Thu 31 Dec 2026 00:14:52 +0000
asID:                     208483
IP address blocks:        2a13:9500:99::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Jan 2026 04:45:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:a3:b3:d6:54:f2:15:72:03:bd:a8:55:2e:c6:1d:6d:b9:2c:26:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
        Validity
            Not Before: Jan  1 00:09:52 2026 GMT
            Not After : Dec 31 00:14:52 2026 GMT
        Subject: CN=E5763C72A2BB50C85682B4748831AF0E47D91C10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:20:f5:63:0e:92:32:01:0a:c4:63:da:11:a2:
                    a9:db:41:99:f1:1f:2a:24:81:ab:aa:02:a9:bb:03:
                    63:8c:0c:ea:a5:bc:98:c1:40:28:4a:34:90:50:30:
                    02:28:d2:46:51:cf:ca:97:16:f6:bf:0a:e7:9f:38:
                    22:01:2f:ed:84:af:83:e0:b0:dd:e2:f0:79:63:78:
                    a5:20:97:4f:37:ed:3c:af:bb:24:46:ba:0e:2d:7d:
                    4b:eb:28:d7:67:65:39:79:f1:0d:7d:74:ed:1b:74:
                    3c:5d:08:17:88:b1:a8:39:b1:52:78:6e:ef:10:20:
                    aa:05:52:13:34:77:46:7a:fd:b2:d5:8e:d9:37:e1:
                    b6:29:99:0a:28:48:95:1e:e5:fc:80:19:e5:05:00:
                    35:93:67:0b:7b:c0:76:c2:f6:43:de:dc:18:89:37:
                    f9:6e:ef:50:06:1c:10:58:df:86:89:04:8e:85:ee:
                    62:86:ef:76:87:61:aa:9d:ec:07:29:fe:2c:d9:27:
                    6d:08:c0:86:cc:60:fb:0c:15:5a:ed:a5:a3:ae:9e:
                    43:93:24:42:da:e1:41:31:bf:4d:72:59:5d:04:0d:
                    23:40:6a:01:29:40:87:4a:07:e8:84:70:1c:64:8d:
                    20:61:f7:b3:78:8d:7a:bd:61:3e:e4:0a:10:76:ef:
                    91:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:76:3C:72:A2:BB:50:C8:56:82:B4:74:88:31:AF:0E:47:D9:1C:10
            X509v3 Authority Key Identifier:
                keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS208483.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:9500:99::/48

    Signature Algorithm: sha256WithRSAEncryption
         76:32:07:39:ec:b4:39:c4:24:de:4d:4e:ea:95:c7:0b:88:60:
         76:a9:2e:99:ea:8a:5d:65:a0:64:46:09:8f:79:aa:27:53:35:
         64:8b:48:54:e9:b7:50:b2:1a:67:e7:d4:2b:aa:dc:33:16:cd:
         90:2e:43:f4:9d:89:f4:78:52:c4:94:cb:88:6b:ed:fa:6f:8e:
         57:7a:5d:e4:14:d5:ec:ac:98:3a:48:17:98:5c:4d:ef:61:94:
         37:11:a9:69:d3:bf:4e:3b:b1:8e:f7:04:c2:66:94:8f:4c:6b:
         61:81:a3:a6:b0:85:37:3d:2a:e4:82:05:e8:96:a9:ce:60:68:
         c2:b7:61:14:f0:20:78:6f:52:62:76:ec:3d:a2:03:7a:d9:f8:
         dd:b1:9f:5d:1b:c0:1d:24:83:02:49:69:e5:d1:84:87:ec:27:
         6b:fc:87:04:7c:46:66:58:f0:8f:43:02:4a:34:e6:3d:e4:53:
         08:45:ee:c8:f4:bc:a2:14:29:4c:a2:91:07:f3:93:6b:2d:d9:
         a6:25:a2:37:40:ab:a7:7d:23:56:9c:bd:39:90:72:52:71:43:
         9c:26:f6:87:da:36:1c:21:65:9a:6b:07:79:1f:bd:3c:21:33:
         9b:df:8a:9e:91:b4:8a:9b:74:65:73:9d:b0:1e:08:d8:be:bf:
         62:47:98:f7
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUC6Oz1lTyFXIDvahVLsYdbbksJtowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjAxMDEwMDA5NTJaFw0yNjEyMzEwMDE0NTJaMDMxMTAvBgNV
BAMTKEU1NzYzQzcyQTJCQjUwQzg1NjgyQjQ3NDg4MzFBRjBFNDdEOTFDMTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaIPVjDpIyAQrEY9oRoqnbQZnx
HyokgauqAqm7A2OMDOqlvJjBQChKNJBQMAIo0kZRz8qXFva/CuefOCIBL+2Er4Pg
sN3i8HljeKUgl0837TyvuyRGug4tfUvrKNdnZTl58Q19dO0bdDxdCBeIsag5sVJ4
bu8QIKoFUhM0d0Z6/bLVjtk34bYpmQooSJUe5fyAGeUFADWTZwt7wHbC9kPe3BiJ
N/lu71AGHBBY34aJBI6F7mKG73aHYaqd7Acp/izZJ20IwIbMYPsMFVrtpaOunkOT
JELa4UExv01yWV0EDSNAagEpQIdKB+iEcBxkjSBh97N4jXq9YT7kChB275EJAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQU5XY8cqK7UMhWgrR0iDGvDkfZHBAwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjA4NDgzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhOV
AACZMA0GCSqGSIb3DQEBCwUAA4IBAQB2Mgc57LQ5xCTeTU7qlccLiGB2qS6Z6opd
ZaBkRgmPeaonUzVki0hU6bdQshpn59QrqtwzFs2QLkP0nYn0eFLElMuIa+36b45X
el3kFNXsrJg6SBeYXE3vYZQ3Ealp079OO7GO9wTCZpSPTGthgaOmsIU3PSrkggXo
lqnOYGjCt2EU8CB4b1Jiduw9ogN62fjdsZ9dG8AdJIMCSWnl0YSH7Cdr/IcEfEZm
WPCPQwJKNOY95FMIRe7I9LyiFClMopEH85NrLdmmJaI3QKunfSNWnL05kHJScUOc
JvaH2jYcIWWaawd5H708ITOb34qekbSKm3Rlc52wHgjYvr9iR5j3
-----END CERTIFICATE-----
Generated at Sun Jan 18 08:56:59 2026 by rpki-client