This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS5065.roa
File:                     AS5065.roa (raw, json)
Hash identifier:          6yS/Yw8B2pRbMx5UOg3N++GMT6G003yCE857KmKho9I=
Subject key identifier:   78:4B:AA:A1:8E:42:0F:E2:0F:09:1B:83:8A:80:B6:FC:09:D7:7C:B4
Certificate issuer:       /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial:       19F618A34E0ECA5222FD18E4D426E6787CBA1074
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS5065.roa
Signing time:             Fri 12 Dec 2025 08:31:46 +0000
ROA not before:           Fri 12 Dec 2025 08:26:46 +0000
ROA not after:            Fri 11 Dec 2026 08:31:46 +0000
asID:                     5065
IP address blocks:        82.21.64.0/24 maxlen: 24
                          82.21.154.0/24 maxlen: 24
                          82.21.162.0/24 maxlen: 24
                          82.21.170.0/24 maxlen: 24
                          82.21.180.0/24 maxlen: 24
                          82.21.192.0/24 maxlen: 24
                          82.21.194.0/24 maxlen: 24
                          82.21.198.0/24 maxlen: 24
                          82.21.207.0/24 maxlen: 24
                          82.22.199.0/24 maxlen: 24
                          82.24.194.0/24 maxlen: 24
                          82.29.7.0/24 maxlen: 24
                          82.29.20.0/24 maxlen: 24
                          82.29.37.0/24 maxlen: 24
                          82.29.46.0/24 maxlen: 24
                          82.29.55.0/24 maxlen: 24
                          82.29.68.0/24 maxlen: 24
                          82.29.77.0/24 maxlen: 24
                          82.29.90.0/24 maxlen: 24
                          82.29.91.0/24 maxlen: 24
                          82.29.99.0/24 maxlen: 24
                          82.29.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Jan 2026 04:45:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:f6:18:a3:4e:0e:ca:52:22:fd:18:e4:d4:26:e6:78:7c:ba:10:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
        Validity
            Not Before: Dec 12 08:26:46 2025 GMT
            Not After : Dec 11 08:31:46 2026 GMT
        Subject: CN=784BAAA18E420FE20F091B838A80B6FC09D77CB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:7a:50:88:8e:56:3b:9a:6d:c5:f9:73:db:9b:
                    6f:30:d5:67:03:33:84:f8:2a:0c:4a:16:29:77:87:
                    d0:45:6b:2c:97:06:67:a0:09:e1:31:f4:bb:42:f8:
                    32:83:6b:d7:b1:b1:8b:06:72:b9:88:d2:28:b3:28:
                    e5:3c:a1:28:f9:eb:1a:6d:e5:d3:38:b9:65:07:9a:
                    7b:fd:78:d2:51:82:96:e1:1b:90:5e:6e:f4:cc:22:
                    23:ac:ce:67:3c:cd:24:3a:b3:fb:29:a1:5b:33:ae:
                    2f:e8:da:31:bb:70:29:c2:41:ea:29:92:45:e3:19:
                    96:de:ef:8e:5d:31:6c:dd:e9:a9:68:84:00:d4:02:
                    e2:50:5b:0e:24:32:ec:b8:96:fe:08:37:ae:2b:0b:
                    de:3f:b8:8c:45:37:9d:ab:c3:15:62:09:ba:88:06:
                    80:3e:6b:3c:f1:00:38:e3:23:9f:3e:1c:6f:21:94:
                    8d:30:bb:7a:ba:8f:36:e8:b2:16:ac:3a:c3:9b:ed:
                    fe:f4:a6:76:85:04:88:6c:29:6e:ff:00:71:8b:5e:
                    0f:71:c0:83:00:10:db:7a:71:0b:0c:76:da:db:76:
                    24:f6:62:06:ca:3b:74:93:7b:ef:a7:39:ce:f1:22:
                    eb:5a:19:91:a8:81:86:4e:09:08:f3:52:8a:4b:8f:
                    82:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:4B:AA:A1:8E:42:0F:E2:0F:09:1B:83:8A:80:B6:FC:09:D7:7C:B4
            X509v3 Authority Key Identifier:
                keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS5065.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.21.64.0/24
                  82.21.154.0/24
                  82.21.162.0/24
                  82.21.170.0/24
                  82.21.180.0/24
                  82.21.192.0/24
                  82.21.194.0/24
                  82.21.198.0/24
                  82.21.207.0/24
                  82.22.199.0/24
                  82.24.194.0/24
                  82.29.7.0/24
                  82.29.20.0/24
                  82.29.37.0/24
                  82.29.46.0/24
                  82.29.55.0/24
                  82.29.68.0/24
                  82.29.77.0/24
                  82.29.90.0/23
                  82.29.99.0/24
                  82.29.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:33:cc:8b:d7:8f:3e:75:3c:d9:bf:96:e2:b1:41:ee:aa:ee:
         41:6c:eb:66:28:99:aa:5e:2a:95:ea:2e:16:56:28:b6:50:19:
         11:a7:33:c4:22:3d:cb:ae:0d:20:90:d9:92:e4:d9:52:c4:32:
         4f:d9:b0:60:84:8f:3a:df:bd:b7:1e:67:3c:3d:18:2d:24:02:
         76:67:42:59:ab:7e:7c:de:e6:eb:b0:c0:d9:2a:83:01:38:c9:
         07:a3:fb:26:df:af:67:98:99:9c:f2:52:a9:02:a3:52:f6:b9:
         06:17:7b:b4:18:0b:cb:d7:45:27:04:80:8a:f3:ee:05:5f:82:
         88:15:4f:16:0c:f6:92:6d:39:ac:65:1f:97:a5:b0:90:48:7b:
         ad:3e:fb:4a:f5:c0:d5:06:78:0d:d7:6d:d4:e7:e8:97:29:39:
         96:64:7b:66:a6:52:b5:43:06:13:4f:c7:47:dd:d6:e4:10:b4:
         4d:a6:e1:06:47:37:52:5f:96:a8:df:87:6c:37:60:0b:21:e1:
         9e:12:7f:dd:c9:44:3d:ba:e6:7e:39:db:bf:69:b6:71:fa:0e:
         dd:84:ee:ac:cd:86:b3:0f:1c:f7:02:76:2b:01:5d:55:2a:56:
         89:4a:a1:e9:1d:a2:41:8c:cf:05:fc:dc:ba:8d:78:63:27:dc:
         d3:4c:84:6e
-----BEGIN CERTIFICATE-----
MIIFejCCBGKgAwIBAgIUGfYYo04OylIi/Rjk1CbmeHy6EHQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNTEyMTIwODI2NDZaFw0yNjEyMTEwODMxNDZaMDMxMTAvBgNV
BAMTKDc4NEJBQUExOEU0MjBGRTIwRjA5MUI4MzhBODBCNkZDMDlENzdDQjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzelCIjlY7mm3F+XPbm28w1WcD
M4T4KgxKFil3h9BFayyXBmegCeEx9LtC+DKDa9exsYsGcrmI0iizKOU8oSj56xpt
5dM4uWUHmnv9eNJRgpbhG5BebvTMIiOszmc8zSQ6s/spoVszri/o2jG7cCnCQeop
kkXjGZbe745dMWzd6alohADUAuJQWw4kMuy4lv4IN64rC94/uIxFN52rwxViCbqI
BoA+azzxADjjI58+HG8hlI0wu3q6jzboshasOsOb7f70pnaFBIhsKW7/AHGLXg9x
wIMAENt6cQsMdtrbdiT2YgbKO3STe++nOc7xIutaGZGogYZOCQjzUopLj4IHAgMB
AAGjggKEMIICgDAdBgNVHQ4EFgQUeEuqoY5CD+IPCRuDioC2/AnXfLQwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTNTA2NS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjCBmgYIKwYBBQUHAQcBAf8EgYowgYcwgYQEAgABMH4DBABS
FUADBABSFZoDBABSFaIDBABSFaoDBABSFbQDBABSFcADBABSFcIDBABSFcYDBABS
Fc8DBABSFscDBABSGMIDBABSHQcDBABSHRQDBABSHSUDBABSHS4DBABSHTcDBABS
HUQDBABSHU0DBAFSHVoDBABSHWMDBABSHZYwDQYJKoZIhvcNAQELBQADggEBAFoz
zIvXjz51PNm/luKxQe6q7kFs62YomapeKpXqLhZWKLZQGRGnM8QiPcuuDSCQ2ZLk
2VLEMk/ZsGCEjzrfvbceZzw9GC0kAnZnQlmrfnze5uuwwNkqgwE4yQej+ybfr2eY
mZzyUqkCo1L2uQYXe7QYC8vXRScEgIrz7gVfgogVTxYM9pJtOaxlH5elsJBIe60+
+0r1wNUGeA3XbdTn6JcpOZZke2amUrVDBhNPx0fd1uQQtE2m4QZHN1Jflqjfh2w3
YAsh4Z4Sf93JRD265n45279ptnH6Dt2E7qzNhrMPHPcCdisBXVUqVolKoekdokGM
zwX83LqNeGMn3NNMhG4=
-----END CERTIFICATE-----
Generated at Sun Jan 18 08:55:09 2026 by rpki-client