This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213460.roa
File:                     AS213460.roa (raw, json)
Hash identifier:          9U9LI6yjWw8dOmjxZA/ggEF7xDV7jtUoDah+IhzGlrE=
Subject key identifier:   85:98:CD:FD:6B:2C:B0:AF:6E:99:8D:B9:84:B3:52:91:8F:DF:75:2E
Certificate issuer:       /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial:       17B30952FAD43ECF8824CAD9687C99713DF2646F
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213460.roa
Signing time:             Wed 24 Dec 2025 11:54:45 +0000
ROA not before:           Wed 24 Dec 2025 11:49:45 +0000
ROA not after:            Wed 23 Dec 2026 11:54:45 +0000
asID:                     213460
IP address blocks:        82.41.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 27 Dec 2025 20:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:b3:09:52:fa:d4:3e:cf:88:24:ca:d9:68:7c:99:71:3d:f2:64:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
        Validity
            Not Before: Dec 24 11:49:45 2025 GMT
            Not After : Dec 23 11:54:45 2026 GMT
        Subject: CN=8598CDFD6B2CB0AF6E998DB984B352918FDF752E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:bf:a9:5e:c1:d7:77:cf:03:d5:bd:c5:7a:8c:
                    a9:5d:99:c6:bf:63:75:e3:6b:a6:e2:98:83:d1:1b:
                    e0:fc:e4:6f:cb:ae:d3:1f:47:e6:2c:74:31:1e:bd:
                    1c:2e:48:97:bf:62:7c:7f:54:71:00:de:25:6a:b2:
                    f1:39:9a:55:27:72:20:04:3e:b5:8b:cc:87:64:ce:
                    15:d0:b9:1a:ee:30:a1:15:f9:64:34:ef:bb:73:c1:
                    ca:4b:e0:c0:f2:26:6d:85:1b:90:c8:b6:c7:d8:f3:
                    c9:fe:2d:64:52:fc:57:77:86:b6:36:03:4c:ec:aa:
                    ff:c8:ea:7a:70:8a:65:47:8e:b3:5e:e4:db:8e:3d:
                    28:47:d6:6f:19:0a:fb:73:f3:04:47:2c:57:4b:cd:
                    8b:0f:9a:67:73:9f:f1:b4:bf:ba:74:e3:13:c8:1c:
                    01:4d:2e:5a:99:f6:e4:5a:b7:0a:21:c0:b6:96:db:
                    cc:63:f9:58:5a:a0:af:e8:2b:27:5e:ee:e7:34:01:
                    94:34:44:b8:ed:7e:0b:71:98:ab:c7:e8:f6:4d:91:
                    43:7c:3c:6e:c4:4d:19:fd:55:5a:9d:f7:f9:5c:ed:
                    7f:1f:82:8d:3a:43:cb:bc:87:ac:13:6f:01:4b:e1:
                    2d:a3:b8:3d:cf:b7:7e:75:9b:0a:0b:cb:e1:49:c4:
                    f5:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:98:CD:FD:6B:2C:B0:AF:6E:99:8D:B9:84:B3:52:91:8F:DF:75:2E
            X509v3 Authority Key Identifier:
                keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213460.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.41.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:58:a2:b2:5e:a4:c1:a1:ec:1c:59:f0:f6:bb:57:fd:bd:8b:
         d0:63:a2:ad:36:8c:83:24:52:62:76:fa:92:c2:0f:d2:ec:27:
         e8:9f:d8:f5:46:e8:cb:ea:3d:6b:31:50:7b:a9:4c:dc:c7:9c:
         26:e6:9d:34:ff:d8:c8:1b:38:e8:3a:61:5e:20:9a:55:be:64:
         02:43:d5:3f:4a:55:81:1c:35:ca:69:fb:68:6d:c7:a5:51:af:
         23:7b:a8:16:14:43:c6:17:86:6a:1b:08:a4:54:6e:7d:48:39:
         1b:d1:8b:49:3c:25:c1:b5:f5:f0:9e:63:9c:d7:d2:a3:12:91:
         08:dd:53:98:02:5d:e1:95:7a:b5:34:c4:8f:65:7d:1a:9e:d8:
         02:28:ae:17:2e:c9:8b:18:df:2d:b2:66:40:d7:b7:db:69:03:
         f5:06:de:c0:35:99:c3:ca:7e:e9:ee:44:14:52:13:78:d2:7a:
         38:cf:12:b1:e0:1b:e5:48:a1:12:49:6e:45:d2:7f:f2:3e:37:
         f2:40:49:af:6c:8c:2d:6e:9c:44:b7:09:8f:7b:56:2c:1b:37:
         74:68:5a:c6:c4:bc:e7:18:09:fb:88:c5:e9:1d:17:99:47:a7:
         0d:33:df:55:9b:8d:37:4e:cb:c8:ab:cd:20:7c:b8:7c:f7:85:
         26:79:ec:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 04:56:30 2025 by rpki-client