This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS62390.roa
File:                     AS62390.roa (raw, json)
Hash identifier:          yLVJB7CQSPPGz4sgwal3FuvZMn+lmarepbkqon7LQc0=
Subject key identifier:   16:D5:4D:09:15:B1:1A:B7:19:42:31:83:C2:11:DA:BD:F0:0A:23:A5
Certificate issuer:       /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial:       6DFA259748412945F2DC1A65E2435CC3AC739CA2
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS62390.roa
Signing time:             Thu 11 Dec 2025 10:53:00 +0000
ROA not before:           Thu 11 Dec 2025 10:48:00 +0000
ROA not after:            Thu 10 Dec 2026 10:53:00 +0000
asID:                     62390
IP address blocks:        82.29.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Jan 2026 04:45:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:fa:25:97:48:41:29:45:f2:dc:1a:65:e2:43:5c:c3:ac:73:9c:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
        Validity
            Not Before: Dec 11 10:48:00 2025 GMT
            Not After : Dec 10 10:53:00 2026 GMT
        Subject: CN=16D54D0915B11AB719423183C211DABDF00A23A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:40:18:b2:fe:ba:ae:46:18:6d:56:3f:ab:e7:
                    9c:d1:ce:8b:ca:7d:da:6c:c0:8a:40:60:05:cf:93:
                    4d:49:65:c2:7b:96:8f:01:5c:05:ad:5f:de:5f:18:
                    20:d6:f3:f1:39:f4:58:c8:51:b1:6d:30:4c:69:11:
                    26:1a:20:f7:38:60:02:78:cd:45:d5:3c:09:20:29:
                    7d:05:03:7e:a5:95:32:26:d1:04:85:38:81:48:23:
                    a5:79:5e:b8:05:e1:b3:f2:0d:4b:b8:b9:de:9d:ae:
                    5d:67:28:eb:41:a8:82:b2:b3:f3:4f:f3:9c:ed:1d:
                    71:32:b6:1a:51:5e:74:8d:73:0c:5a:86:fb:51:fe:
                    ac:0f:93:63:94:82:34:64:b9:20:e4:54:b4:13:7e:
                    7b:87:17:e9:63:1c:31:18:87:84:0f:d6:68:90:8a:
                    28:2e:36:c9:1d:35:c4:17:00:e9:b1:7d:e6:e7:8d:
                    5f:b5:df:fc:88:13:60:4b:fe:d1:c3:f5:6c:87:7d:
                    44:c3:fc:9e:ee:84:8d:15:07:8b:ed:2b:7c:98:d9:
                    b7:d5:ad:15:77:75:6b:ea:2f:32:81:b1:37:c9:66:
                    bb:a4:48:20:14:d8:f4:d2:39:8e:1c:c4:6a:99:06:
                    b4:79:9f:92:1b:4e:e5:b5:b8:70:64:73:bf:2b:84:
                    c3:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:D5:4D:09:15:B1:1A:B7:19:42:31:83:C2:11:DA:BD:F0:0A:23:A5
            X509v3 Authority Key Identifier:
                keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS62390.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.29.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:26:c2:e7:c1:d4:da:bf:e4:48:4e:86:d0:28:36:7a:4e:01:
         a6:20:ee:a4:a6:9d:aa:1c:ff:b1:81:44:21:04:18:12:70:67:
         15:ba:64:1b:d7:97:42:4d:88:d8:c7:61:e2:a2:d0:2d:28:ca:
         d8:91:46:07:a9:7d:69:60:34:28:42:dd:5b:92:8e:da:ae:85:
         b5:c9:3a:6f:27:77:0d:f7:8e:24:37:e5:e1:52:c8:11:98:df:
         97:12:88:0e:2d:6e:ae:95:6b:a6:a1:88:0e:87:a9:a6:f2:cb:
         14:e0:29:01:ad:85:5f:cd:26:37:2d:61:ca:a7:0d:30:48:45:
         d0:96:cf:c7:d8:5a:c3:93:34:0b:71:c3:64:28:8e:f3:a5:14:
         6a:9c:d7:a0:02:05:a7:be:90:aa:e8:4f:96:2b:81:33:55:e5:
         f4:db:2e:f1:06:67:fb:72:f3:ea:51:cf:7e:a4:1a:b7:1b:39:
         23:7d:93:d3:e5:a7:39:19:c8:52:6d:b9:76:48:27:88:bc:2b:
         e4:b8:20:e7:bf:d4:e2:d6:f5:9d:39:0d:31:f4:27:6c:6d:94:
         60:14:2e:b5:7b:79:9d:c2:d3:3c:0b:37:6b:0d:bf:67:0f:93:
         19:59:c6:7e:cd:cf:9d:63:b1:0e:fe:00:9a:3e:f9:cf:d4:7d:
         f0:ad:96:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 08:55:11 2026 by rpki-client