This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS210097.roa
File:                     AS210097.roa (raw, json)
Hash identifier:          AUSUN8lbOqAE75pIanUJoEcorn6ihqhtQoipr6de+v4=
Subject key identifier:   BE:A5:AD:7D:43:BF:A6:03:F5:F3:4C:C4:74:E4:B0:0D:B4:FC:09:A3
Certificate issuer:       /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial:       4447A4368814D2B28AD6161A1FD99FCDEC5C0ED8
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS210097.roa
Signing time:             Mon 12 Jan 2026 15:49:13 +0000
ROA not before:           Mon 12 Jan 2026 15:44:13 +0000
ROA not after:            Mon 11 Jan 2027 15:49:13 +0000
asID:                     210097
IP address blocks:        178.83.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Jan 2026 04:45:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:47:a4:36:88:14:d2:b2:8a:d6:16:1a:1f:d9:9f:cd:ec:5c:0e:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
        Validity
            Not Before: Jan 12 15:44:13 2026 GMT
            Not After : Jan 11 15:49:13 2027 GMT
        Subject: CN=BEA5AD7D43BFA603F5F34CC474E4B00DB4FC09A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d1:78:38:09:35:36:dd:ee:70:bb:f5:38:31:
                    62:45:91:a4:c6:18:53:20:79:eb:00:5e:1e:0c:6f:
                    47:14:8e:1a:8f:82:2a:ac:9c:b4:b1:04:3d:b8:be:
                    c7:24:3e:13:2b:a3:44:03:31:d8:12:67:16:e8:68:
                    51:d0:be:f6:3b:a1:93:03:b8:8d:cd:9c:f9:eb:49:
                    b2:91:83:a1:04:6c:df:2a:d0:20:61:87:b6:1a:34:
                    9d:0e:b5:62:4f:d4:e6:0c:46:ab:8a:e5:b0:25:b8:
                    6a:22:a0:f4:28:db:1e:15:39:41:f4:03:b5:04:09:
                    97:cf:5d:7c:07:8e:58:85:be:43:5f:3f:3c:07:18:
                    78:97:63:aa:cb:b4:46:2b:a7:f3:a7:56:8b:cd:4c:
                    4b:f5:a8:41:4e:5c:86:77:63:15:27:ca:98:1b:0f:
                    4d:f5:30:a8:78:48:a9:93:07:d4:10:e7:cb:66:5e:
                    d0:ec:4e:f7:82:ea:4d:59:15:67:90:fd:1b:5f:9e:
                    e4:44:aa:03:92:f0:aa:35:70:02:87:0c:5e:6d:e1:
                    23:56:4d:ff:37:c2:2e:b7:d7:68:13:f7:08:d0:20:
                    91:1a:26:7e:19:68:a9:39:f4:49:23:2e:c0:74:2d:
                    b3:0f:3c:a9:36:f2:ca:ac:51:18:a0:86:30:3b:43:
                    87:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:A5:AD:7D:43:BF:A6:03:F5:F3:4C:C4:74:E4:B0:0D:B4:FC:09:A3
            X509v3 Authority Key Identifier:
                keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS210097.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.83.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:dc:9d:34:5f:68:01:fe:d5:d1:86:92:87:77:85:db:25:ef:
         01:37:dd:f1:ef:bd:db:ab:3a:cc:2b:70:f6:91:39:bf:46:04:
         e9:d9:35:d6:d1:9b:c9:40:be:2d:aa:7c:a8:51:a3:9a:e1:5c:
         09:23:c8:8f:7d:54:19:ae:4f:67:9d:38:86:8e:a5:d7:77:20:
         42:48:a9:93:b6:66:f3:51:06:70:35:fc:66:f1:ec:87:ff:5c:
         b6:19:63:ab:71:de:87:13:df:31:e4:f0:b6:53:f8:f9:86:07:
         9f:40:fb:fc:66:27:e0:66:3a:a4:f0:0e:21:1f:2c:8f:13:a7:
         7d:97:cb:05:42:7e:d6:7b:67:63:25:f8:f8:2b:d5:da:18:48:
         a3:63:96:f1:5a:de:11:32:9f:ac:50:9d:63:d2:3f:04:c8:57:
         30:72:43:b9:b5:2d:6b:19:02:8a:f4:57:22:e0:12:3e:cb:1b:
         16:1e:26:b1:49:ff:19:a7:84:2a:8d:e2:3f:5b:d3:41:56:22:
         34:80:19:72:ec:15:f1:e5:a1:9e:84:77:58:64:cb:42:1e:71:
         05:58:36:74:f1:7a:5f:1d:4e:60:95:cf:c3:dd:4e:08:05:74:
         5b:97:19:96:a6:0b:5b:bd:1f:93:0a:81:93:2c:2b:7a:c5:e8:
         f3:e5:33:25
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUREekNogU0rKK1hYaH9mfzexcDtgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjAxMTIxNTQ0MTNaFw0yNzAxMTExNTQ5MTNaMDMxMTAvBgNV
BAMTKEJFQTVBRDdENDNCRkE2MDNGNUYzNENDNDc0RTRCMDBEQjRGQzA5QTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ0Xg4CTU23e5wu/U4MWJFkaTG
GFMgeesAXh4Mb0cUjhqPgiqsnLSxBD24vsckPhMro0QDMdgSZxboaFHQvvY7oZMD
uI3NnPnrSbKRg6EEbN8q0CBhh7YaNJ0OtWJP1OYMRquK5bAluGoioPQo2x4VOUH0
A7UECZfPXXwHjliFvkNfPzwHGHiXY6rLtEYrp/OnVovNTEv1qEFOXIZ3YxUnypgb
D031MKh4SKmTB9QQ58tmXtDsTveC6k1ZFWeQ/RtfnuREqgOS8Ko1cAKHDF5t4SNW
Tf83wi6312gT9wjQIJEaJn4ZaKk59EkjLsB0LbMPPKk28sqsURighjA7Q4eTAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUvqWtfUO/pgP180zEdOSwDbT8CaMwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjEwMDk3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAslMh
MA0GCSqGSIb3DQEBCwUAA4IBAQAv3J00X2gB/tXRhpKHd4XbJe8BN93x773bqzrM
K3D2kTm/RgTp2TXW0ZvJQL4tqnyoUaOa4VwJI8iPfVQZrk9nnTiGjqXXdyBCSKmT
tmbzUQZwNfxm8eyH/1y2GWOrcd6HE98x5PC2U/j5hgefQPv8ZifgZjqk8A4hHyyP
E6d9l8sFQn7We2djJfj4K9XaGEijY5bxWt4RMp+sUJ1j0j8EyFcwckO5tS1rGQKK
9Fci4BI+yxsWHiaxSf8Zp4QqjeI/W9NBViI0gBly7BXx5aGehHdYZMtCHnEFWDZ0
8XpfHU5glc/D3U4IBXRblxmWpgtbvR+TCoGTLCt6xejz5TMl
-----END CERTIFICATE-----
Generated at Sun Jan 18 08:53:15 2026 by rpki-client