This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS216138.roa
File:                     AS216138.roa (raw, json)
Hash identifier:          ALbsnVXn5xN5Trw0MuUqjLogvgX5I9QnTsgbudN9E+4=
Subject key identifier:   C9:43:5B:70:52:0C:A1:45:B2:45:FA:7C:4E:B4:E1:FA:E8:0A:7A:FF
Certificate issuer:       /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial:       6BC53137D882492DCF6DEC014A9A242A167FEFBD
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS216138.roa
Signing time:             Sat 10 Jan 2026 05:30:32 +0000
ROA not before:           Sat 10 Jan 2026 05:25:32 +0000
ROA not after:            Sat 09 Jan 2027 05:30:32 +0000
asID:                     216138
IP address blocks:        82.26.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Jan 2026 04:45:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:c5:31:37:d8:82:49:2d:cf:6d:ec:01:4a:9a:24:2a:16:7f:ef:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
        Validity
            Not Before: Jan 10 05:25:32 2026 GMT
            Not After : Jan  9 05:30:32 2027 GMT
        Subject: CN=C9435B70520CA145B245FA7C4EB4E1FAE80A7AFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:bd:a8:31:33:38:2a:24:3b:c5:12:99:83:90:
                    20:8d:1f:3e:b5:67:dc:70:27:ed:33:78:db:96:e0:
                    ef:3f:df:62:d1:eb:e8:b9:32:19:a8:bc:04:7d:b8:
                    21:95:8f:87:06:3b:88:f2:8c:3e:7c:cc:df:57:87:
                    b2:a1:4c:4a:ae:17:8b:78:bc:d9:ba:b5:1b:8e:70:
                    77:fc:b9:86:63:0e:81:3c:fc:73:a8:72:a4:96:77:
                    06:16:44:60:1d:ac:64:aa:8f:e6:be:e4:ee:d6:5d:
                    94:fd:dc:ea:c9:d0:bb:1d:2b:a6:99:d8:1e:ea:c5:
                    d6:5f:c3:45:9f:f7:83:32:bf:fd:9f:fb:82:90:cb:
                    56:3c:c8:1c:85:c9:14:3a:15:69:fb:a5:38:b6:62:
                    82:eb:44:ec:48:38:4e:78:31:90:a9:5b:6a:96:61:
                    6e:b4:ad:c0:d9:12:60:53:47:93:9b:c6:e2:a4:9a:
                    1b:5c:42:03:74:2d:e4:b2:b4:58:3b:2e:28:d1:84:
                    0e:f6:6f:6e:a8:b7:be:67:6c:ce:e5:8d:01:a2:12:
                    65:8f:e3:b0:24:03:52:31:78:e6:ae:99:e1:ed:86:
                    57:68:77:f4:3b:89:0a:78:7c:dc:1b:bb:b2:03:92:
                    48:06:f4:f8:0b:d8:79:12:12:97:dc:13:9f:f1:cf:
                    0c:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:43:5B:70:52:0C:A1:45:B2:45:FA:7C:4E:B4:E1:FA:E8:0A:7A:FF
            X509v3 Authority Key Identifier:
                keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS216138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.26.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:85:b0:91:84:15:e6:20:6f:3f:7d:88:62:ca:7d:91:30:e8:
         73:82:79:26:dd:30:f2:d2:f5:c9:c0:30:7c:8f:03:5b:16:2b:
         76:cc:b5:f1:8a:18:11:eb:a9:c5:8e:8d:4e:85:fd:e5:16:fe:
         af:e6:f4:93:da:5d:6b:3f:b5:e9:30:6d:c0:c1:ec:7e:a6:2d:
         a0:ac:85:4f:4d:e3:0c:ea:cd:68:84:0a:4d:ea:37:17:f1:be:
         25:77:48:71:68:ee:06:56:d9:2b:60:ff:f2:24:d6:dc:b8:a0:
         17:26:27:c1:df:46:15:d7:ec:0d:b0:30:9b:cf:e5:e1:df:6c:
         8f:30:9b:7e:17:ee:f8:b8:be:6b:1e:a7:b5:48:29:f0:87:62:
         6c:6a:98:d6:36:7b:41:43:a4:e1:ef:90:c3:80:fd:08:ac:0b:
         1b:c6:02:77:a3:d8:5e:b0:03:d3:db:90:b3:ad:6c:50:6c:9c:
         dc:b7:49:c3:33:03:6e:13:68:61:b8:30:a1:37:98:24:cc:f6:
         02:0b:2b:3b:31:6d:f4:d8:d8:69:ce:27:55:bf:d7:57:2c:6e:
         ed:15:77:36:c8:8e:3b:b0:1c:9e:18:0b:01:45:5b:5e:2e:d4:
         35:33:85:d0:a4:0c:92:24:e5:97:72:b8:f3:4f:05:d2:79:7d:
         b2:1a:af:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 08:53:08 2026 by rpki-client