This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215415.roa
File:                     AS215415.roa (raw, json)
Hash identifier:          lrU/ftGuz4P57lX+LmqNQSG36WXSNuEOMcYCqdh9Acc=
Subject key identifier:   84:C6:60:0E:00:5A:EF:46:D9:BB:B8:0F:AD:3F:05:9E:5B:FA:79:F7
Certificate issuer:       /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial:       5F437A84F82DD65474085F86AC6C4479D7A87FEA
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215415.roa
Signing time:             Tue 13 Jan 2026 12:47:35 +0000
ROA not before:           Tue 13 Jan 2026 12:42:35 +0000
ROA not after:            Tue 12 Jan 2027 12:47:35 +0000
asID:                     215415
IP address blocks:        82.26.78.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Jan 2026 04:45:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:43:7a:84:f8:2d:d6:54:74:08:5f:86:ac:6c:44:79:d7:a8:7f:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
        Validity
            Not Before: Jan 13 12:42:35 2026 GMT
            Not After : Jan 12 12:47:35 2027 GMT
        Subject: CN=84C6600E005AEF46D9BBB80FAD3F059E5BFA79F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:b1:1f:a7:c4:8c:92:f7:bd:55:e5:2f:24:1e:
                    0e:13:2e:c3:a5:72:ec:1f:dd:49:59:56:dd:41:b2:
                    9d:fa:7b:d0:b5:20:2c:32:c4:2b:47:ca:91:0c:41:
                    57:1a:ed:20:54:ad:c8:21:47:7c:84:85:81:e1:ff:
                    ba:9c:3b:37:ae:e6:c7:4b:c8:a6:6b:64:0d:ef:3a:
                    f5:be:42:bd:95:59:a9:f9:7b:8d:e4:a4:78:7c:dd:
                    d0:17:7f:8d:95:1f:18:8a:e9:7a:ec:2b:0d:b2:1d:
                    d3:77:af:35:96:b0:ac:d4:6c:91:90:c8:6f:87:66:
                    90:d2:1e:83:fe:b5:b9:bd:25:99:76:0c:62:cb:b6:
                    a4:66:ca:aa:54:af:d1:2b:b1:59:13:2f:85:66:ef:
                    bf:19:4b:ed:9a:91:49:40:22:a9:3d:2c:4c:68:f8:
                    cd:b2:28:2d:d5:e6:dd:af:7a:60:de:f9:35:4a:62:
                    81:04:ce:f8:8c:b6:f4:ef:5d:7c:88:1e:64:7f:f3:
                    05:12:15:20:22:12:74:97:fb:31:21:d4:2b:58:a6:
                    93:71:d2:4b:80:7e:f0:5d:96:3c:68:07:82:83:49:
                    fb:2c:bf:13:e4:05:44:73:8e:90:12:f2:87:3f:4a:
                    23:a6:1e:60:f6:33:f0:b2:41:11:64:3b:d6:fa:dc:
                    3b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:C6:60:0E:00:5A:EF:46:D9:BB:B8:0F:AD:3F:05:9E:5B:FA:79:F7
            X509v3 Authority Key Identifier:
                keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215415.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.26.78.0/23

    Signature Algorithm: sha256WithRSAEncryption
         85:56:08:57:1d:5c:66:12:a8:a0:df:b2:fe:4c:42:7b:5b:72:
         22:2e:c6:5b:ed:f5:34:67:ba:5a:10:07:80:85:9b:7e:34:05:
         42:91:71:16:8e:21:96:56:6a:a8:f6:3e:2a:78:06:6a:c3:5a:
         16:9b:45:b4:87:a8:42:f2:7e:bf:2d:cc:91:ad:17:07:8e:ab:
         bf:a1:d7:cf:bc:ae:d0:46:6a:52:7c:f9:5b:66:c6:f1:42:d8:
         61:27:cb:0a:f8:c7:61:c8:d2:4b:0a:ab:1a:01:d1:49:d7:9d:
         f7:76:e2:be:03:77:01:85:81:b2:d6:ef:10:e2:59:ae:9e:15:
         72:fd:ce:b9:35:aa:52:0b:90:7c:6b:38:66:17:74:04:6b:d3:
         f6:a3:30:99:ce:51:1f:19:34:0d:58:ea:ca:81:f0:b6:36:8b:
         3d:87:44:5d:af:11:41:fa:a5:49:24:d3:19:66:73:19:2f:ee:
         9e:0d:24:a1:c0:92:7d:07:b8:96:c9:9d:da:f4:66:91:5c:62:
         99:1c:17:9e:9f:1c:e7:23:09:fe:aa:70:68:f3:e6:c2:9b:49:
         dc:33:35:4e:57:e2:26:82:f0:63:f3:33:5b:2c:66:7d:1b:df:
         6b:56:1e:e8:87:30:13:77:5f:97:9d:99:9b:e0:a5:ca:41:3a:
         a7:45:24:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 08:53:23 2026 by rpki-client