This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215727.roa
File:                     AS215727.roa (raw, json)
Hash identifier:          EDMeJ6QTuJKDk4xQoMWN7NiF3EjqXHRc384UiWUacUo=
Subject key identifier:   50:0B:B6:E6:05:B3:FB:A3:96:9B:FB:20:EF:B6:92:93:EC:3A:69:FE
Certificate issuer:       /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial:       4AFB3B63AAECCD9F2671A8B2A8CC4F4329905AB0
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215727.roa
Signing time:             Sun 11 Jan 2026 00:00:23 +0000
ROA not before:           Sat 10 Jan 2026 23:55:23 +0000
ROA not after:            Sun 10 Jan 2027 00:00:23 +0000
asID:                     215727
IP address blocks:        82.21.169.0/24 maxlen: 24
                          82.22.175.0/24 maxlen: 24
                          82.23.134.0/24 maxlen: 24
                          82.24.8.0/24 maxlen: 24
                          82.24.105.0/24 maxlen: 24
                          82.24.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Jan 2026 04:45:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:fb:3b:63:aa:ec:cd:9f:26:71:a8:b2:a8:cc:4f:43:29:90:5a:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
        Validity
            Not Before: Jan 10 23:55:23 2026 GMT
            Not After : Jan 10 00:00:23 2027 GMT
        Subject: CN=500BB6E605B3FBA3969BFB20EFB69293EC3A69FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:71:3d:79:bd:da:38:fb:8d:5d:10:31:7e:2f:
                    ca:c4:41:36:10:a2:06:42:cc:7c:c3:d2:0e:a0:ea:
                    16:26:ff:57:73:6f:b4:39:53:fa:10:7c:6b:e6:1a:
                    62:8b:c8:99:e1:4c:2b:13:92:8f:2e:dc:46:3d:9d:
                    6e:da:9b:68:b3:8f:18:ad:92:e7:42:fa:c0:ad:81:
                    aa:41:b9:8a:80:53:5e:cf:bd:4e:ff:df:8c:f6:79:
                    c5:9b:ac:da:21:4a:69:34:1a:ed:f1:f7:c6:24:27:
                    b4:43:05:5c:c7:7c:bd:5c:c2:97:48:85:e1:f1:fe:
                    86:cb:46:bf:40:7a:b9:39:2f:2c:94:0a:5d:13:3d:
                    a8:b0:33:41:b8:85:29:96:20:11:8c:fa:5a:aa:4f:
                    07:e1:f8:c6:d2:a4:ea:61:5f:59:88:ff:18:de:0a:
                    f9:4f:74:90:76:d8:26:7c:3b:1a:de:99:2d:87:fd:
                    be:6e:87:c5:3a:23:36:41:c1:0d:3f:d8:a9:75:58:
                    f7:da:bb:1c:f4:34:19:db:2d:f7:d5:d9:77:14:ce:
                    7b:8e:c5:67:57:5c:10:a5:e2:0a:f4:33:01:86:eb:
                    34:28:75:1d:d8:42:51:68:40:11:0d:8d:ad:b7:82:
                    b2:90:c6:be:38:8a:89:a0:d4:5e:78:ca:30:44:fa:
                    60:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:0B:B6:E6:05:B3:FB:A3:96:9B:FB:20:EF:B6:92:93:EC:3A:69:FE
            X509v3 Authority Key Identifier:
                keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215727.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.21.169.0/24
                  82.22.175.0/24
                  82.23.134.0/24
                  82.24.8.0/24
                  82.24.105.0/24
                  82.24.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:c5:cf:ec:b8:0d:6f:93:27:ff:57:cc:1a:e2:1e:73:a5:35:
         f3:dd:3b:ae:58:51:77:22:fc:9d:84:dc:b2:03:cc:24:ad:7f:
         fe:f4:98:2b:1d:bf:16:dd:c7:2e:91:66:36:55:a4:07:ec:0a:
         0b:bf:82:b7:36:85:f6:4b:e6:67:99:cb:e1:2d:e1:b8:c0:b5:
         5d:2a:7b:7d:77:54:36:70:60:2a:35:f9:de:ef:2c:ef:3f:21:
         0b:36:7a:a9:fc:25:7c:b9:6d:4f:f4:13:5c:92:5e:62:af:78:
         69:76:a2:e2:45:75:61:b2:df:e1:a2:49:4c:de:15:89:ac:5b:
         62:cb:4e:c7:fe:26:40:d0:eb:28:34:10:ba:96:86:3b:bc:bf:
         1d:ef:19:49:d6:f0:5a:d9:41:91:bb:a0:af:aa:ce:7e:fd:ec:
         1b:b1:82:2b:c3:bd:eb:d5:16:71:d7:d9:9a:67:21:f8:7b:11:
         41:11:c6:9f:e3:5c:d0:1d:0a:d4:8c:b6:f6:0c:c9:99:9b:b2:
         a0:38:ca:a4:b4:5b:9d:d7:aa:00:2a:fd:c3:02:22:cb:28:6a:
         cb:60:9b:63:f3:9f:2d:07:bf:0b:ff:b5:41:56:ca:e3:e3:a1:
         0b:7b:ef:7d:93:94:a4:22:be:66:ae:3a:be:1c:77:20:61:36:
         d7:64:27:bc
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgIUSvs7Y6rszZ8mcaiyqMxPQymQWrAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjAxMTAyMzU1MjNaFw0yNzAxMTAwMDAwMjNaMDMxMTAvBgNV
BAMTKDUwMEJCNkU2MDVCM0ZCQTM5NjlCRkIyMEVGQjY5MjkzRUMzQTY5RkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdcT15vdo4+41dEDF+L8rEQTYQ
ogZCzHzD0g6g6hYm/1dzb7Q5U/oQfGvmGmKLyJnhTCsTko8u3EY9nW7am2izjxit
kudC+sCtgapBuYqAU17PvU7/34z2ecWbrNohSmk0Gu3x98YkJ7RDBVzHfL1cwpdI
heHx/obLRr9Aerk5LyyUCl0TPaiwM0G4hSmWIBGM+lqqTwfh+MbSpOphX1mI/xje
CvlPdJB22CZ8OxremS2H/b5uh8U6IzZBwQ0/2Kl1WPfauxz0NBnbLffV2XcUznuO
xWdXXBCl4gr0MwGG6zQodR3YQlFoQBENja23grKQxr44iomg1F54yjBE+mALAgMB
AAGjggIoMIICJDAdBgNVHQ4EFgQUUAu25gWz+6OWm/sg77aSk+w6af4wHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjE1NzI3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAUhWp
AwQAUhavAwQAUheGAwQAUhgIAwQAUhhpAwQAUhivMA0GCSqGSIb3DQEBCwUAA4IB
AQCpxc/suA1vkyf/V8wa4h5zpTXz3TuuWFF3IvydhNyyA8wkrX/+9JgrHb8W3ccu
kWY2VaQH7AoLv4K3NoX2S+ZnmcvhLeG4wLVdKnt9d1Q2cGAqNfne7yzvPyELNnqp
/CV8uW1P9BNckl5ir3hpdqLiRXVhst/hoklM3hWJrFtiy07H/iZA0OsoNBC6loY7
vL8d7xlJ1vBa2UGRu6Cvqs5+/ewbsYIrw73r1RZx19maZyH4exFBEcaf41zQHQrU
jLb2DMmZm7KgOMqktFud16oAKv3DAiLLKGrLYJtj858tB78L/7VBVsrj46ELe+99
k5SkIr5mrjq+HHcgYTbXZCe8
-----END CERTIFICATE-----
Generated at Sun Jan 18 08:55:46 2026 by rpki-client