This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS50049.roa
File:                     AS50049.roa (raw, json)
Hash identifier:          XD/w+frB9qkERSBEZz6yKG3uKqosI8crwfu5yz9M2Ig=
Subject key identifier:   91:18:F0:8A:26:06:51:FA:5A:C8:89:9F:7C:69:6F:35:C6:D2:A1:FB
Certificate issuer:       /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial:       043E075A3F411B3BD407E8BB459D4C96928245BE
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS50049.roa
Signing time:             Tue 11 Nov 2025 09:26:32 +0000
ROA not before:           Tue 11 Nov 2025 09:21:32 +0000
ROA not after:            Tue 10 Nov 2026 09:26:32 +0000
asID:                     50049
IP address blocks:        82.27.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Dec 2025 00:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:3e:07:5a:3f:41:1b:3b:d4:07:e8:bb:45:9d:4c:96:92:82:45:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
        Validity
            Not Before: Nov 11 09:21:32 2025 GMT
            Not After : Nov 10 09:26:32 2026 GMT
        Subject: CN=9118F08A260651FA5AC8899F7C696F35C6D2A1FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:3f:87:3a:ee:2f:2b:ca:96:18:64:bf:d6:d3:
                    f5:d9:7e:87:46:71:42:e3:33:40:e6:d0:fe:6d:45:
                    42:e8:b5:3a:1d:f0:f7:36:7e:74:66:73:7d:12:45:
                    01:71:cd:1f:de:f1:bc:4c:18:42:2d:8f:a8:96:3f:
                    62:a4:5d:48:03:13:5d:6e:8c:b9:b2:3a:f3:a4:07:
                    04:c3:17:92:08:2f:3f:c5:1f:e9:df:97:57:a1:7a:
                    11:bd:43:16:e5:e3:ea:de:57:eb:33:da:97:e8:7d:
                    e2:61:49:36:f2:5e:28:24:9c:93:60:45:00:42:94:
                    a6:c6:30:7a:02:60:5d:65:77:c1:8a:67:e8:2c:d7:
                    92:d7:dc:11:a6:90:d7:a0:ac:01:84:4c:dc:a2:db:
                    d4:3a:57:91:81:f0:ce:01:fe:dc:a0:23:2d:cf:31:
                    76:e2:31:62:5f:b7:cc:70:a7:45:bc:55:fd:95:53:
                    92:96:c1:ee:b2:e9:e0:66:7b:00:0f:c3:73:a0:cf:
                    39:b0:2b:fd:1b:6f:3d:f4:ec:81:fa:f4:52:b2:6b:
                    a2:60:b2:02:4b:03:66:3b:e2:5d:b0:59:22:6c:a1:
                    88:1c:19:4f:9a:be:21:90:e2:79:fd:7f:eb:a0:cb:
                    34:49:4d:7d:85:f7:5a:8f:c7:84:67:e5:da:09:bb:
                    03:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:18:F0:8A:26:06:51:FA:5A:C8:89:9F:7C:69:6F:35:C6:D2:A1:FB
            X509v3 Authority Key Identifier:
                keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS50049.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.27.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:9e:d4:f4:68:37:59:82:02:a4:2a:02:2b:c9:c7:d4:9d:60:
         df:eb:ea:9a:b3:35:cd:74:42:ec:02:d9:83:f4:e3:0f:7d:19:
         6b:88:6b:5d:42:b9:ab:6b:6a:46:72:52:ce:2a:05:02:0f:fd:
         62:f0:4d:69:2c:8c:89:ad:e8:fa:3c:38:c8:dc:45:79:46:2e:
         b7:78:cf:f9:c6:65:25:a1:c4:14:87:f6:6e:c7:da:c8:f9:8b:
         c7:24:bc:f5:ae:d0:48:b3:df:86:4f:11:e6:56:80:a9:16:4e:
         60:a4:a2:aa:13:4b:ce:98:fc:8b:12:a6:5e:e9:82:4e:be:8a:
         6e:9c:ed:a2:ca:23:da:43:f9:92:17:ed:29:dd:fd:5f:1e:1c:
         20:ac:bf:55:d7:8b:82:9d:df:1a:66:a2:cf:6a:18:87:3b:54:
         f4:0a:d0:93:24:6e:d8:54:7a:3a:db:bf:e1:54:34:99:1f:f2:
         e3:c2:81:c1:63:c0:2d:3e:a2:db:0a:cf:33:23:21:f9:7a:f8:
         8c:80:af:55:f8:ca:d1:22:3f:cb:12:83:15:69:f6:5a:06:1f:
         e1:d3:63:4a:d2:1d:87:ef:16:16:29:81:f9:8f:08:ef:81:04:
         49:f7:c8:d3:08:15:4d:a5:a3:d2:9f:4e:20:07:e6:dc:ff:39:
         ce:6e:f8:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 4 05:58:59 2025 by rpki-client