This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS47583.roa
File:                     AS47583.roa (raw, json)
Hash identifier:          w723V8GA20stS1bt6GyqXBCAOBDFX8d+NinfzKp0lKY=
Subject key identifier:   69:24:C8:0C:1A:57:DD:29:35:03:17:EE:AC:97:5E:EA:50:B3:8C:6E
Certificate issuer:       /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial:       18EA6A75129C40945A6B6200041B1651D79A6718
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS47583.roa
Signing time:             Tue 06 Jan 2026 13:55:33 +0000
ROA not before:           Tue 06 Jan 2026 13:50:33 +0000
ROA not after:            Tue 05 Jan 2027 13:55:33 +0000
asID:                     47583
IP address blocks:        82.25.64.0/21 maxlen: 24
                          82.25.72.0/21 maxlen: 24
                          82.25.80.0/21 maxlen: 24
                          82.25.88.0/21 maxlen: 24
                          82.25.96.0/21 maxlen: 24
                          82.25.104.0/21 maxlen: 24
                          82.25.112.0/21 maxlen: 24
                          82.25.120.0/21 maxlen: 24
                          82.29.56.0/21 maxlen: 24
                          82.29.80.0/21 maxlen: 24
                          82.29.152.0/21 maxlen: 24
                          82.29.160.0/21 maxlen: 24
                          82.29.168.0/21 maxlen: 24
                          82.29.176.0/21 maxlen: 24
                          82.29.184.0/21 maxlen: 24
                          82.29.192.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Jan 2026 04:45:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:ea:6a:75:12:9c:40:94:5a:6b:62:00:04:1b:16:51:d7:9a:67:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
        Validity
            Not Before: Jan  6 13:50:33 2026 GMT
            Not After : Jan  5 13:55:33 2027 GMT
        Subject: CN=6924C80C1A57DD29350317EEAC975EEA50B38C6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d2:13:9c:60:03:18:93:21:7d:20:d0:cd:cd:
                    3c:10:d8:c8:5e:f6:31:b4:38:42:56:d3:13:b0:85:
                    2a:0a:69:95:05:88:ee:71:61:66:8d:74:88:82:6c:
                    bb:12:86:57:31:9a:45:9a:62:c7:b8:45:3a:3d:64:
                    29:66:4f:10:99:40:f5:59:4c:16:81:09:72:f2:2d:
                    28:fb:bf:ce:d4:66:82:ea:58:23:02:48:c0:63:6c:
                    82:25:e8:5d:09:07:73:65:8e:f3:0a:14:fb:a9:a6:
                    89:de:6f:03:39:8d:b1:51:c7:b0:6e:06:bd:5d:95:
                    24:1f:6b:39:90:81:cf:b7:59:32:fe:96:aa:ee:32:
                    cf:46:7e:c9:50:2d:41:59:c6:f4:56:5c:1e:9c:7c:
                    a6:d9:0b:da:cd:cc:7a:f6:23:f7:de:d4:8f:db:6e:
                    75:43:1d:b8:8a:b7:22:8a:d6:b9:1a:bc:dc:e5:92:
                    82:22:3d:78:3a:a0:e6:77:f1:d2:de:0d:d3:dd:ad:
                    56:ab:5e:84:cc:00:2e:a6:a6:b5:57:dc:89:22:c1:
                    cc:e3:2d:3d:52:38:db:20:d6:d2:ad:7d:7c:aa:df:
                    2e:96:13:57:f0:3b:c7:89:c3:38:69:f5:8b:ab:74:
                    10:ba:80:04:5c:a6:87:e9:c7:97:e8:05:1c:86:69:
                    ea:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:24:C8:0C:1A:57:DD:29:35:03:17:EE:AC:97:5E:EA:50:B3:8C:6E
            X509v3 Authority Key Identifier:
                keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS47583.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.25.64.0/18
                  82.29.56.0/21
                  82.29.80.0/21
                  82.29.152.0-82.29.199.255

    Signature Algorithm: sha256WithRSAEncryption
         43:fc:6c:ac:90:ab:d4:33:e9:b6:04:44:49:23:7d:0c:e5:79:
         a1:2a:bc:b3:69:7d:fb:a6:f0:2c:e5:da:45:9a:f2:e9:94:4a:
         f8:6c:83:83:58:66:e9:c8:02:66:e8:6d:4e:e4:d9:db:83:44:
         a9:ad:ef:25:85:28:e2:51:e0:b1:1e:4f:3c:d2:e0:29:ff:b9:
         64:a0:14:4b:ae:11:b1:6e:bc:a2:13:5f:e8:d2:e5:28:6c:3b:
         c7:0a:47:73:83:f2:d4:8b:36:9b:4a:b3:9c:3c:36:82:dd:2b:
         1c:0e:13:15:1c:b3:8e:b9:4f:dc:26:38:7f:81:c9:35:e5:f4:
         98:f0:f6:78:35:42:de:d9:a3:3e:16:96:e5:26:f1:49:70:9c:
         14:ac:b5:4d:67:9c:eb:98:37:6a:21:f2:8b:c5:80:00:fb:f2:
         59:26:b5:24:14:12:03:76:bc:9d:15:a4:5c:9d:80:0f:c1:cc:
         c5:7e:9c:be:73:34:34:7a:1c:c0:0e:99:37:e4:be:49:5d:20:
         d3:40:eb:e1:25:98:b9:b1:5b:7b:9a:42:7a:9b:90:63:ac:f9:
         41:ff:4a:50:f7:40:cc:62:b7:9f:9b:27:44:00:62:d0:82:c3:
         88:93:c4:9a:0b:95:d0:a4:46:01:4c:3c:df:2e:bb:67:f0:16:
         0e:aa:5a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 08:55:45 2026 by rpki-client