This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS212683.roa
File:                     AS212683.roa (raw, json)
Hash identifier:          kJIv4OzhZFr5yMaJOsAovuehsPfg1LWBz12L6pJ68ZM=
Subject key identifier:   7E:15:7F:E3:2A:F9:58:EC:A5:AC:F4:DA:2D:5E:4D:E4:4B:CB:79:F5
Certificate issuer:       /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial:       131FBFC5CBD935664512A1CF55C3CF79153578DF
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS212683.roa
Signing time:             Mon 24 Nov 2025 13:58:46 +0000
ROA not before:           Mon 24 Nov 2025 13:53:46 +0000
ROA not after:            Mon 23 Nov 2026 13:58:46 +0000
asID:                     212683
IP address blocks:        82.39.94.0/23 maxlen: 24
                          82.39.96.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Dec 2025 00:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:1f:bf:c5:cb:d9:35:66:45:12:a1:cf:55:c3:cf:79:15:35:78:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
        Validity
            Not Before: Nov 24 13:53:46 2025 GMT
            Not After : Nov 23 13:58:46 2026 GMT
        Subject: CN=7E157FE32AF958ECA5ACF4DA2D5E4DE44BCB79F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f5:e2:3c:54:b1:3d:a6:ad:60:d7:f5:8c:1a:
                    5e:6d:6c:25:30:5d:77:1a:fa:13:52:a0:b1:72:8f:
                    81:96:b3:18:8e:bd:e4:0d:59:22:ae:5a:33:cb:a3:
                    fc:01:a6:24:43:6e:e8:62:e0:cc:ff:3d:dc:49:0e:
                    12:14:0c:32:f4:3b:7d:c7:8e:72:14:f1:78:d9:5c:
                    20:22:cb:a0:72:35:ea:66:15:5e:dc:6e:4f:5d:c8:
                    4d:1e:57:62:eb:5f:9b:0f:6a:27:c0:25:76:f8:40:
                    0f:88:9d:7c:78:b3:61:d9:55:35:71:5a:72:29:82:
                    b7:29:70:01:c4:3e:01:e5:37:88:e8:a1:ba:19:83:
                    f7:fe:c4:24:08:88:73:e9:8d:ff:d5:f3:37:01:9e:
                    40:65:22:cf:cd:fa:54:c1:6d:50:28:33:85:da:50:
                    eb:e4:fe:30:fe:df:cd:07:52:45:4d:6d:24:8a:4c:
                    96:b6:bf:aa:82:98:e7:83:9e:4b:1b:34:20:16:55:
                    72:b1:e9:6f:64:8c:e2:78:7c:df:d2:96:41:08:7b:
                    b4:11:4f:fa:bc:ca:0a:da:f3:43:24:ef:29:3d:e9:
                    a5:12:83:37:26:9e:0a:ff:fb:6d:f9:b8:e6:aa:4a:
                    f9:78:6f:46:e8:cb:2d:71:65:87:04:f3:97:4f:ca:
                    2b:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:15:7F:E3:2A:F9:58:EC:A5:AC:F4:DA:2D:5E:4D:E4:4B:CB:79:F5
            X509v3 Authority Key Identifier:
                keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS212683.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.39.94.0-82.39.97.255

    Signature Algorithm: sha256WithRSAEncryption
         6d:d9:79:e5:ab:7c:9d:8a:36:29:30:ed:40:a0:fb:8e:5b:47:
         24:6c:58:11:b7:97:90:99:c3:0c:c6:bd:09:48:a8:b8:4d:96:
         77:60:4a:84:2a:68:3a:c8:47:6d:f9:65:cb:58:5d:74:75:65:
         c4:fe:cb:92:26:f3:1c:7f:f8:ee:62:cc:c5:64:40:5e:71:be:
         73:c5:d2:c5:43:1f:81:db:9a:4a:02:30:fd:04:76:ee:69:91:
         79:06:c5:6b:33:bd:a5:80:50:7f:ba:4b:04:22:e4:b6:59:ed:
         4a:05:ec:b2:17:a4:80:d8:46:48:62:ba:dd:42:98:cb:c7:12:
         ce:5c:51:a2:17:1f:d1:6b:99:e2:20:32:76:18:af:2e:f7:c7:
         fa:af:bb:7b:e2:1f:fa:9e:01:69:d9:dd:4d:cb:c2:9a:51:3b:
         5d:03:7f:8f:8a:84:d9:13:ce:d7:54:f6:25:54:bc:f3:34:be:
         4d:7a:d5:b4:bc:c2:66:38:c6:c2:50:8e:f2:4c:cb:e9:b5:fd:
         4e:31:2f:34:72:93:e6:dd:f8:a6:92:d5:11:1e:72:17:51:7a:
         65:55:c5:20:02:8b:3f:33:39:b8:bc:6f:92:51:82:fa:73:76:
         93:da:84:d9:b9:cc:16:40:b0:f4:57:15:88:79:e2:26:ee:d2:
         37:eb:85:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 4 06:01:42 2025 by rpki-client