This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS4766.roa
File:                     AS4766.roa (raw, json)
Hash identifier:          /XhH6ufGSBckn1zAgXMKdPynjAKFXEqXogEhsFSXe44=
Subject key identifier:   9C:12:52:9B:D6:4C:F6:06:F5:EB:22:D8:25:D6:3D:59:A8:6B:EE:43
Certificate issuer:       /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial:       1F57BFB95BDD37A42AEFD2658282108863A6B8C5
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS4766.roa
Signing time:             Mon 05 Jan 2026 11:09:29 +0000
ROA not before:           Mon 05 Jan 2026 11:04:29 +0000
ROA not after:            Mon 04 Jan 2027 11:09:29 +0000
asID:                     4766
IP address blocks:        82.40.62.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Jan 2026 04:45:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:57:bf:b9:5b:dd:37:a4:2a:ef:d2:65:82:82:10:88:63:a6:b8:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
        Validity
            Not Before: Jan  5 11:04:29 2026 GMT
            Not After : Jan  4 11:09:29 2027 GMT
        Subject: CN=9C12529BD64CF606F5EB22D825D63D59A86BEE43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b7:e5:7d:27:a4:6f:77:78:7c:b4:68:13:f0:
                    e9:69:cc:c9:01:8e:25:b4:ca:09:7c:3f:ee:ce:12:
                    68:d9:96:20:9a:cf:5f:d7:70:78:4a:32:2b:4f:e3:
                    d2:55:65:31:60:38:25:e3:31:be:7d:e5:c8:a6:1b:
                    98:10:2b:0c:9d:52:b6:be:0f:49:04:6b:e2:87:d9:
                    58:c4:97:67:8d:cd:85:e1:b5:30:37:99:bb:9c:7c:
                    e7:e9:4b:ce:38:e3:af:ee:d5:83:de:f7:f9:41:15:
                    a0:9c:dd:88:3e:95:b1:a0:15:1e:4f:ad:11:d9:84:
                    e5:ce:b7:af:0e:96:11:80:c8:52:83:0d:41:20:54:
                    83:ad:df:1e:3b:22:5b:99:4c:dd:c9:e7:58:ae:c6:
                    99:47:ff:1e:f9:87:25:af:0e:2b:ad:23:3e:97:fc:
                    2a:92:1c:28:50:8b:7c:ea:c5:69:87:ab:45:56:46:
                    78:b4:aa:49:17:16:e0:07:f9:ac:f0:a6:b1:ec:0f:
                    48:d2:41:b4:3c:1a:4a:c5:5e:cf:68:ee:3b:21:6a:
                    87:ec:c4:10:db:1f:08:f9:0b:4c:6a:b3:aa:bd:7d:
                    45:07:25:10:68:b5:9d:fe:c5:61:0f:ca:47:94:43:
                    4f:6b:85:0d:40:0e:5e:e2:1d:8e:6d:d0:86:bc:4d:
                    cb:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:12:52:9B:D6:4C:F6:06:F5:EB:22:D8:25:D6:3D:59:A8:6B:EE:43
            X509v3 Authority Key Identifier:
                keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS4766.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.40.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         55:37:e9:fd:75:35:c1:e2:a1:c4:6b:77:a3:ee:a9:fa:bc:e9:
         84:d6:c0:f2:7b:ea:89:75:77:9a:e4:c2:37:83:e1:65:d9:ea:
         be:7f:69:1e:ea:80:b5:79:0b:87:62:3c:48:34:35:7e:00:95:
         3e:09:e9:72:3f:92:46:35:fa:60:59:2c:e8:5b:fd:5b:2c:70:
         d3:d8:23:77:e0:77:e4:2e:4e:55:8e:8f:6b:76:fe:07:75:1d:
         f1:31:03:a4:6c:f9:dc:56:d8:3e:b0:f6:47:4e:19:ac:98:f2:
         38:4f:81:1c:90:41:ba:5f:8b:4c:c1:e8:81:d6:4d:d0:70:27:
         49:71:f7:87:64:6f:7a:bf:75:82:5c:cf:c9:cd:4b:09:52:49:
         2e:8c:19:cd:f4:a0:2e:e6:e7:a1:ff:4c:36:ab:52:2e:7e:5e:
         ea:aa:d9:28:56:7c:6c:9e:fb:2b:54:a4:e2:ee:16:32:4a:da:
         24:09:9e:e8:35:c0:0b:af:4a:4b:e3:d9:0f:83:89:bc:57:3b:
         f8:61:85:c7:96:f2:db:ee:b1:7d:30:d7:1f:8b:8a:b1:3d:ed:
         7f:31:38:46:c4:c4:e4:2a:9a:ff:5d:33:93:46:cf:fb:88:2f:
         48:6a:ec:9b:ab:92:93:00:30:97:75:92:17:ee:9f:58:ec:e3:
         e1:3a:18:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 08:55:50 2026 by rpki-client