This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS7361.roa
File:                     AS7361.roa (raw, json)
Hash identifier:          NndUJFyhms/8N2lJ+PiAeURWC24JnBqEaU4R6/7hkNY=
Subject key identifier:   41:B3:71:6A:F1:73:37:99:C0:75:5D:27:9A:47:93:92:EF:0F:41:A5
Certificate issuer:       /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial:       5A4CBA9FDD10231350AFDD00EB71C775C25ABBF7
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS7361.roa
Signing time:             Sat 08 Nov 2025 11:39:35 +0000
ROA not before:           Sat 08 Nov 2025 11:34:35 +0000
ROA not after:            Sat 07 Nov 2026 11:39:35 +0000
asID:                     7361
IP address blocks:        82.38.204.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 26 Nov 2025 14:08:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:4c:ba:9f:dd:10:23:13:50:af:dd:00:eb:71:c7:75:c2:5a:bb:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
        Validity
            Not Before: Nov  8 11:34:35 2025 GMT
            Not After : Nov  7 11:39:35 2026 GMT
        Subject: CN=41B3716AF1733799C0755D279A479392EF0F41A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a8:41:dc:c9:8b:1c:32:3e:45:8d:63:07:f4:
                    ab:f9:8c:be:b6:8e:db:10:fc:d6:73:0d:17:7f:3c:
                    35:52:de:79:6a:41:da:07:06:2f:31:c8:fb:b8:9c:
                    1b:69:db:e2:77:74:54:50:93:2d:8c:20:69:68:c8:
                    62:43:39:c7:52:ec:1f:c2:6f:10:df:f8:c5:8a:cc:
                    d9:68:56:4e:6c:8e:ca:94:16:98:fd:d6:d3:d6:60:
                    3d:5a:4a:77:70:d4:70:7f:eb:8a:5b:f1:04:48:cf:
                    f9:31:91:55:c7:f7:35:7f:dd:2c:e8:06:76:0e:15:
                    62:36:1a:c9:13:3b:5f:7f:cd:26:28:d1:e9:4c:8f:
                    e2:8a:a9:5e:46:e4:66:28:67:99:50:46:1f:1d:9a:
                    4d:64:9f:25:9c:93:df:90:2a:ad:fd:2a:4e:bb:77:
                    5b:38:9e:1a:fe:b7:3c:bb:4f:72:c2:f4:03:b5:88:
                    7f:fc:06:f4:88:db:7c:f9:41:7e:af:70:c5:6a:32:
                    72:c1:1e:6b:80:c5:66:61:68:47:5a:89:a6:88:0a:
                    82:85:f7:98:6f:e9:63:5e:be:bc:e5:8d:e0:46:e9:
                    ef:4d:66:4a:cd:99:5b:9d:10:8a:33:62:87:47:37:
                    56:19:da:5e:39:0c:ea:7f:a7:27:30:88:3c:3b:c9:
                    2c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:B3:71:6A:F1:73:37:99:C0:75:5D:27:9A:47:93:92:EF:0F:41:A5
            X509v3 Authority Key Identifier:
                keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS7361.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.38.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:f5:16:6e:db:7e:68:72:75:df:ec:e7:e2:19:c2:6c:fc:2c:
         96:26:a2:f4:43:54:f9:fd:17:50:a7:d1:1c:7b:a8:57:e9:10:
         ea:38:eb:8f:ca:b3:c2:af:66:5a:8a:f6:bc:cf:ba:08:f0:4d:
         e3:bf:a4:4f:0f:78:74:4e:fd:55:3d:06:42:d8:b9:70:8a:ec:
         bc:b5:bb:b6:a7:74:69:e9:e3:6e:36:9e:ea:0d:f8:c4:a3:55:
         ac:ce:88:ad:c5:53:95:a9:6c:56:52:a1:51:42:6f:57:79:cd:
         32:a4:c1:b2:e2:a3:48:9f:6b:1a:a0:33:57:04:7d:ed:2f:0b:
         fb:bf:52:d4:71:ef:57:79:f8:de:5c:af:7f:62:63:d3:8e:fb:
         9e:82:fa:b8:9b:fc:8d:eb:38:15:c1:d5:18:d1:a9:ce:b7:4f:
         da:9c:04:ab:dd:97:0d:38:c6:30:3b:1e:20:0f:63:df:18:19:
         e1:04:aa:7b:7d:01:2e:ec:40:c8:3c:7d:f1:0f:d3:48:fb:6c:
         18:dd:b5:1d:42:8f:ed:d9:ff:5d:0f:ca:dc:29:76:f5:bb:e5:
         df:04:67:30:fe:02:bb:ab:bb:9d:32:07:17:9f:f5:95:89:37:
         4f:ac:4b:c3:0a:d0:55:82:03:ca:5d:b6:56:df:2b:b6:d4:72:
         8a:7b:ba:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 25 17:36:05 2025 by rpki-client