This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS48529.roa
File:                     AS48529.roa (raw, json)
Hash identifier:          dw4GTFeqM2VggX5a2C9ubJaRDvDjXOyB5T6XGMl8hA0=
Subject key identifier:   2F:E3:C3:1C:86:E8:F3:75:1D:77:1B:C4:9A:3A:D8:45:D1:F7:28:80
Certificate issuer:       /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial:       2F736500135297E80B6DFD487DD4A87A38AC1C6D
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS48529.roa
Signing time:             Wed 24 Dec 2025 07:44:27 +0000
ROA not before:           Wed 24 Dec 2025 07:39:27 +0000
ROA not after:            Wed 23 Dec 2026 07:44:27 +0000
asID:                     48529
IP address blocks:        82.24.172.0/24 maxlen: 24
                          82.26.163.0/24 maxlen: 24
                          82.41.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 19:52:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:73:65:00:13:52:97:e8:0b:6d:fd:48:7d:d4:a8:7a:38:ac:1c:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
        Validity
            Not Before: Dec 24 07:39:27 2025 GMT
            Not After : Dec 23 07:44:27 2026 GMT
        Subject: CN=2FE3C31C86E8F3751D771BC49A3AD845D1F72880
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:46:e3:f3:9a:76:d4:04:5f:db:b0:11:fe:7b:
                    1a:a5:37:31:13:2b:ac:a1:10:e4:82:b1:fb:26:77:
                    70:fd:d3:e4:f4:98:34:5b:b0:fb:11:42:e4:c5:8c:
                    3b:2a:c6:b7:f0:5a:b9:59:7a:1b:77:28:6e:7c:1d:
                    03:c3:ff:92:2f:44:55:fd:f4:4b:56:cb:44:61:8b:
                    2e:3b:de:69:a2:b5:cf:78:bc:3e:94:64:6b:2e:44:
                    3d:c4:5e:af:ff:86:68:19:4d:23:a1:7e:20:6f:91:
                    ba:f0:82:13:7e:8b:35:4f:e0:a9:35:b8:55:8d:9d:
                    13:38:b7:59:62:20:57:07:d5:34:77:7c:23:44:3a:
                    23:b0:0e:1b:44:71:1f:b3:65:da:70:ae:c3:30:6a:
                    84:6d:10:11:1e:58:16:03:69:72:a7:5e:07:27:03:
                    13:7a:4e:d3:c9:ba:8b:73:3a:80:b7:d5:ad:1b:9a:
                    9b:55:4e:1d:5a:53:73:6e:9b:bd:74:9a:0c:49:09:
                    d5:df:f1:26:47:ea:38:47:54:f0:e9:e5:fb:83:9b:
                    11:35:87:3f:44:b8:6a:b3:f6:f5:ad:8a:c5:4c:cb:
                    0c:8c:c1:22:5f:6a:1f:d8:78:54:1e:83:6e:f1:fd:
                    12:0c:78:fb:14:d3:22:cf:a2:c1:f8:cc:6f:30:b1:
                    ce:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:E3:C3:1C:86:E8:F3:75:1D:77:1B:C4:9A:3A:D8:45:D1:F7:28:80
            X509v3 Authority Key Identifier:
                keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS48529.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.24.172.0/24
                  82.26.163.0/24
                  82.41.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:a0:e5:18:d9:e2:c9:ca:0e:58:54:a5:0c:f1:fb:86:e7:8d:
         c4:a6:c4:59:a1:2b:90:d5:86:cf:e8:4c:8f:94:f5:2e:43:e6:
         0b:86:a6:ed:97:cf:55:31:65:97:13:ef:78:49:df:0a:5c:c3:
         a0:c2:ab:21:a3:70:a0:22:29:8d:b8:8e:39:c9:14:7e:45:d2:
         b9:f4:1f:b0:73:b8:52:c4:86:b7:26:f4:b5:a7:c7:26:af:b1:
         78:2f:ea:7a:f8:46:a3:33:88:4e:d6:09:59:8a:38:e8:10:fd:
         2b:72:00:63:e4:61:86:02:76:6c:e7:a3:fa:1d:95:02:d5:4e:
         94:6c:d0:3d:87:5d:c6:47:3e:81:f1:82:78:9e:14:b4:c8:70:
         30:f6:01:6b:7b:8c:9e:c8:39:4e:47:8c:dd:4f:2c:c2:3c:85:
         38:8f:b0:39:78:87:3b:0d:19:27:d8:9b:e1:0e:bb:87:1d:b0:
         79:70:1f:34:22:6e:87:76:31:24:dc:58:e4:f8:f4:8c:0c:11:
         75:62:11:4b:72:76:c3:a6:c2:15:51:cd:c1:e0:74:a5:14:5b:
         59:2c:89:15:19:a4:0b:95:42:a1:8d:4d:fa:14:47:08:4d:75:
         17:d1:9c:e8:8b:ff:20:0d:76:8c:ef:a0:3a:42:72:21:90:b8:
         cf:d6:b9:bf
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Feb 10 02:25:45 2026 by rpki-client