This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS63199.roa
File:                     AS63199.roa (raw, json)
Hash identifier:          u41V1kePjI3mg0NV/fz2k0b7+0GYvzbAYQRwTzJ08U8=
Subject key identifier:   98:45:28:01:81:00:B9:D6:CF:25:CD:92:CF:D9:1E:69:6A:B7:34:6B
Certificate issuer:       /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial:       76DCAC0997333F38E70F5DB17F08F8B7EC064D16
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS63199.roa
Signing time:             Thu 15 Jan 2026 07:09:18 +0000
ROA not before:           Thu 15 Jan 2026 07:04:18 +0000
ROA not after:            Thu 14 Jan 2027 07:09:18 +0000
asID:                     63199
IP address blocks:        82.22.99.0/24 maxlen: 24
                          82.23.162.0/24 maxlen: 24
                          82.23.250.0/24 maxlen: 24
                          82.25.60.0/24 maxlen: 24
                          82.25.143.0/24 maxlen: 24
                          82.25.161.0/24 maxlen: 24
                          82.25.190.0/24 maxlen: 24
                          82.29.48.0/24 maxlen: 24
                          82.38.175.0/24 maxlen: 24
                          82.39.114.0/24 maxlen: 24
                          82.39.188.0/24 maxlen: 24
                          82.41.37.0/24 maxlen: 24
                          82.41.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Jan 2026 04:45:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:dc:ac:09:97:33:3f:38:e7:0f:5d:b1:7f:08:f8:b7:ec:06:4d:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
        Validity
            Not Before: Jan 15 07:04:18 2026 GMT
            Not After : Jan 14 07:09:18 2027 GMT
        Subject: CN=984528018100B9D6CF25CD92CFD91E696AB7346B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e4:fa:5e:1e:9b:bc:48:99:29:f8:4a:5b:46:
                    a9:d5:15:f9:46:76:88:c9:04:12:5e:d9:70:c4:e8:
                    83:06:80:af:07:0f:6a:92:4e:8d:a6:1a:f6:09:8e:
                    b5:87:d7:17:79:5d:fe:65:4f:54:81:45:b4:67:89:
                    7e:df:c0:d3:c4:ea:ef:86:2a:04:fc:c0:c3:07:dc:
                    33:c6:38:a1:6d:2f:db:dc:dd:96:2c:7e:75:25:e9:
                    0f:18:0a:92:ff:bc:3c:6d:b6:12:99:c0:04:b8:80:
                    ec:44:9d:4d:40:2e:e5:47:58:69:29:0c:21:06:6c:
                    f1:99:83:e3:cb:a4:7d:c6:c0:ac:76:cf:38:3a:63:
                    9b:7c:84:ff:c8:2a:54:86:35:27:0e:43:43:83:a9:
                    97:1c:d9:fb:5b:ad:3c:9e:e9:c3:4f:38:21:70:dc:
                    44:fa:bf:82:d8:74:7e:32:66:4d:8f:fb:83:4f:9b:
                    c3:a8:b6:93:78:c0:dc:62:56:a1:6e:3e:37:ab:ce:
                    b0:ba:ad:46:85:a9:2d:b1:d4:3d:57:c9:77:83:b7:
                    44:aa:1b:4c:14:f1:ad:49:a6:f6:79:36:f5:52:cc:
                    ef:34:e7:96:8f:ba:d2:62:68:80:ad:0d:e8:b2:e8:
                    ec:86:4b:a3:77:88:6b:5e:10:6b:f2:76:a2:e9:68:
                    f3:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:45:28:01:81:00:B9:D6:CF:25:CD:92:CF:D9:1E:69:6A:B7:34:6B
            X509v3 Authority Key Identifier:
                keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS63199.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.22.99.0/24
                  82.23.162.0/24
                  82.23.250.0/24
                  82.25.60.0/24
                  82.25.143.0/24
                  82.25.161.0/24
                  82.25.190.0/24
                  82.29.48.0/24
                  82.38.175.0/24
                  82.39.114.0/24
                  82.39.188.0/24
                  82.41.37.0/24
                  82.41.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:18:a7:00:22:34:a7:ba:27:e9:26:47:4b:25:57:3f:53:b3:
         dd:b5:15:08:29:c7:ac:c9:a7:03:be:cf:b8:33:df:26:72:f9:
         02:1a:3e:50:19:e1:51:81:74:cc:be:71:4b:1f:65:a8:df:45:
         30:f6:5e:4b:bc:3e:fb:d5:96:9c:77:82:d1:91:cd:c7:3f:70:
         ab:f5:bf:40:05:f7:ac:f4:ee:4b:ae:27:fb:5b:c3:78:e6:0f:
         8a:f7:63:ec:66:ef:45:e3:a7:05:2c:08:fb:2a:05:00:1f:62:
         5f:71:2a:1a:78:a6:54:ce:83:81:9f:d4:14:b1:98:19:64:bf:
         f6:26:ac:0d:f0:2d:65:05:16:db:90:79:a5:b7:5e:74:1b:2e:
         d5:6a:8e:f2:cf:48:95:e9:d8:53:dc:9e:41:f3:1d:af:14:6b:
         dc:07:f1:58:1c:93:a7:d6:6a:c3:24:f3:21:3f:83:a9:02:48:
         18:7c:41:86:93:61:24:0f:9c:33:cc:f5:0e:07:30:9a:93:24:
         0d:67:10:7f:64:8e:f5:8f:6f:07:33:8d:34:d6:ee:a5:24:24:
         29:6e:14:45:cb:6f:e5:ac:47:75:ba:72:14:38:a1:a0:2c:5d:
         0c:f6:26:5c:7d:be:9f:82:36:aa:23:18:8f:d6:d8:c8:93:41:
         b3:e5:54:db
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUdtysCZczPzjnD12xfwj4t+wGTRYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjAxMTUwNzA0MThaFw0yNzAxMTQwNzA5MThaMDMxMTAvBgNV
BAMTKDk4NDUyODAxODEwMEI5RDZDRjI1Q0Q5MkNGRDkxRTY5NkFCNzM0NkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC65PpeHpu8SJkp+EpbRqnVFflG
dojJBBJe2XDE6IMGgK8HD2qSTo2mGvYJjrWH1xd5Xf5lT1SBRbRniX7fwNPE6u+G
KgT8wMMH3DPGOKFtL9vc3ZYsfnUl6Q8YCpL/vDxtthKZwAS4gOxEnU1ALuVHWGkp
DCEGbPGZg+PLpH3GwKx2zzg6Y5t8hP/IKlSGNScOQ0ODqZcc2ftbrTye6cNPOCFw
3ET6v4LYdH4yZk2P+4NPm8OotpN4wNxiVqFuPjerzrC6rUaFqS2x1D1XyXeDt0Sq
G0wU8a1JpvZ5NvVSzO8055aPutJiaICtDeiy6OyGS6N3iGteEGvydqLpaPOrAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUmEUoAYEAudbPJc2Sz9keaWq3NGswHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTNjMxOTkucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwZwYIKwYBBQUHAQcBAf8EWDBWMFQEAgABME4DBABSFmMD
BABSF6IDBABSF/oDBABSGTwDBABSGY8DBABSGaEDBABSGb4DBABSHTADBABSJq8D
BABSJ3IDBABSJ7wDBABSKSUDBABSKcUwDQYJKoZIhvcNAQELBQADggEBAJ0YpwAi
NKe6J+kmR0slVz9Ts921FQgpx6zJpwO+z7gz3yZy+QIaPlAZ4VGBdMy+cUsfZajf
RTD2Xku8PvvVlpx3gtGRzcc/cKv1v0AF96z07kuuJ/tbw3jmD4r3Y+xm70XjpwUs
CPsqBQAfYl9xKhp4plTOg4Gf1BSxmBlkv/YmrA3wLWUFFtuQeaW3XnQbLtVqjvLP
SJXp2FPcnkHzHa8Ua9wH8Vgck6fWasMk8yE/g6kCSBh8QYaTYSQPnDPM9Q4HMJqT
JA1nEH9kjvWPbwczjTTW7qUkJCluFEXLb+WsR3W6chQ4oaAsXQz2Jlx9vp+CNqoj
GI/W2MiTQbPlVNs=
-----END CERTIFICATE-----
Generated at Sun Jan 18 08:55:08 2026 by rpki-client