This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS262287.roa
File:                     AS262287.roa (raw, json)
Hash identifier:          mClIODLz/iZQV50t4ETFhcgU9vtHFjkLjThNIsW3oA8=
Subject key identifier:   1E:51:D6:D0:29:76:20:1C:BD:75:50:72:E0:72:81:55:05:67:AB:8B
Certificate issuer:       /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial:       2B30F04D048DC25EE9BEB9CBB2327CE0CF4E5402
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS262287.roa
Signing time:             Tue 13 Jan 2026 11:55:33 +0000
ROA not before:           Tue 13 Jan 2026 11:50:33 +0000
ROA not after:            Tue 12 Jan 2027 11:55:33 +0000
asID:                     262287
IP address blocks:        82.23.26.0/24 maxlen: 24
                          82.23.27.0/24 maxlen: 24
                          82.23.29.0/24 maxlen: 24
                          82.23.32.0/24 maxlen: 24
                          82.23.33.0/24 maxlen: 24
                          82.23.35.0/24 maxlen: 24
                          82.23.36.0/24 maxlen: 24
                          82.23.40.0/24 maxlen: 24
                          2a13:9500:20::/48 maxlen: 48
                          2a13:9500:21::/48 maxlen: 48
                          2a13:9500:22::/48 maxlen: 48
                          2a13:9500:23::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Jan 2026 04:45:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:30:f0:4d:04:8d:c2:5e:e9:be:b9:cb:b2:32:7c:e0:cf:4e:54:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
        Validity
            Not Before: Jan 13 11:50:33 2026 GMT
            Not After : Jan 12 11:55:33 2027 GMT
        Subject: CN=1E51D6D02976201CBD755072E07281550567AB8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:7d:db:cc:a1:8d:3c:94:c2:44:01:25:9f:6a:
                    56:e5:06:6e:8f:07:b3:72:c5:0b:75:c7:45:3a:63:
                    e2:85:55:a7:da:ca:8d:32:6c:9b:f7:73:f0:03:df:
                    8e:96:38:88:dc:1e:5a:c2:67:9e:40:0e:63:6b:4e:
                    52:a4:9c:06:bd:85:be:72:30:07:b8:d6:0a:d4:f9:
                    e9:e9:15:8f:4d:8b:31:e0:70:f2:b9:06:42:f2:e5:
                    0a:b2:26:41:b2:c2:b9:dd:21:c4:99:e4:25:2c:0b:
                    5d:e1:b6:0e:ed:b4:ba:09:20:ac:1b:0c:5c:05:70:
                    ae:12:87:d3:44:44:83:84:d2:74:05:5d:ad:65:7e:
                    c9:ec:9c:79:29:7e:b9:93:7d:2e:72:93:4b:55:f5:
                    ba:40:16:0c:6b:72:3b:e6:6f:71:f2:69:89:35:7f:
                    70:2b:80:26:f5:b5:34:f1:ec:1c:89:b7:f5:60:d7:
                    24:39:a7:39:aa:37:24:7e:4e:98:5c:a1:75:ef:ec:
                    93:2f:23:c9:58:37:d9:66:25:54:2e:60:f3:4f:01:
                    0f:cd:7c:fa:2a:a5:83:24:40:d0:7a:cd:e7:84:43:
                    f8:d3:3f:2a:21:73:20:59:66:0f:26:46:2b:33:7f:
                    30:2b:30:94:9e:52:07:48:de:f5:8f:5e:3f:54:d7:
                    67:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:51:D6:D0:29:76:20:1C:BD:75:50:72:E0:72:81:55:05:67:AB:8B
            X509v3 Authority Key Identifier:
                keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS262287.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.23.26.0/23
                  82.23.29.0/24
                  82.23.32.0/23
                  82.23.35.0-82.23.36.255
                  82.23.40.0/24
                IPv6:
                  2a13:9500:20::/46

    Signature Algorithm: sha256WithRSAEncryption
         a5:f7:90:e9:32:9c:c1:65:6c:f6:96:2b:36:6d:81:31:37:f4:
         3b:f6:1c:d4:6c:8a:4c:a5:72:b4:02:18:10:77:d0:c8:4c:2e:
         79:1e:9a:03:f6:48:f1:53:31:25:fc:9e:b8:9a:2a:7b:d8:23:
         1d:43:81:e8:7b:01:71:f9:3a:6c:22:21:28:37:10:7a:08:0a:
         10:a2:44:ee:1f:01:60:40:ad:4a:e5:71:87:fe:e7:be:90:00:
         7d:23:1a:be:93:93:e6:7a:44:92:52:7e:a0:18:2c:ac:cc:8f:
         b2:5b:89:55:8c:c2:66:3e:ad:68:dc:bb:31:a4:ec:43:08:ae:
         a6:73:cc:62:ac:d4:6f:0a:b8:63:66:0e:b8:94:3e:53:92:57:
         b0:be:c3:ab:b1:c5:5d:0f:22:41:c0:9e:72:d2:68:c6:6d:6e:
         fb:00:fa:a4:14:ad:f3:16:21:c0:f3:30:a2:8b:73:f7:61:30:
         4b:8d:83:06:67:f2:6b:23:f4:3c:cf:8a:8f:68:14:74:12:2b:
         eb:44:18:5a:4a:6e:e6:64:f4:80:84:8f:9a:d8:74:fd:a9:18:
         49:a8:56:90:a5:53:39:cb:ed:1c:3c:ec:fc:35:f6:9a:76:e8:
         7c:04:d4:c4:78:b1:94:62:bd:10:8a:3c:8b:8c:3a:6a:57:30:
         21:1f:57:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 08:56:46 2026 by rpki-client