This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS9318.roa
File:                     AS9318.roa (raw, json)
Hash identifier:          ZtfMk36wHB6Ojk/oX86SRD3UaXsRjIZvrJv6knHN3qA=
Subject key identifier:   83:0C:1E:66:74:E7:73:A6:11:CD:51:EB:DF:A9:8B:2F:91:0E:20:63
Certificate issuer:       /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial:       490003C48120DD5B679A61B26AEEE555CAB6AE86
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS9318.roa
Signing time:             Wed 31 Dec 2025 14:05:03 +0000
ROA not before:           Wed 31 Dec 2025 14:00:03 +0000
ROA not after:            Wed 30 Dec 2026 14:05:03 +0000
asID:                     9318
IP address blocks:        82.40.39.0/24 maxlen: 24
                          82.40.48.0/24 maxlen: 24
                          82.40.51.0/24 maxlen: 24
                          82.41.3.0/24 maxlen: 24
                          178.83.6.0/24 maxlen: 24
                          178.83.16.0/24 maxlen: 24
                          178.83.26.0/24 maxlen: 24
                          178.83.36.0/24 maxlen: 24
                          178.83.46.0/24 maxlen: 24
                          178.83.56.0/24 maxlen: 24
                          178.83.66.0/24 maxlen: 24
                          178.83.75.0/24 maxlen: 24
                          178.83.83.0/24 maxlen: 24
                          178.83.96.0/24 maxlen: 24
                          178.83.108.0/24 maxlen: 24
                          178.83.116.0/24 maxlen: 24
                          178.83.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Jan 2026 04:45:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:00:03:c4:81:20:dd:5b:67:9a:61:b2:6a:ee:e5:55:ca:b6:ae:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
        Validity
            Not Before: Dec 31 14:00:03 2025 GMT
            Not After : Dec 30 14:05:03 2026 GMT
        Subject: CN=830C1E6674E773A611CD51EBDFA98B2F910E2063
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:38:40:87:03:9d:36:c1:62:19:ff:eb:09:d0:
                    1d:e1:83:1b:03:31:8a:e1:e1:ef:73:cc:12:46:59:
                    2d:be:d1:5b:7e:56:65:e1:9e:d7:a8:f1:29:5f:77:
                    42:ec:4c:8f:d2:9b:af:d6:60:bb:e3:0a:97:ea:00:
                    c9:90:ab:88:17:77:b0:dd:33:5b:02:dd:44:6c:38:
                    8a:99:e3:8a:16:33:1e:33:15:6c:38:70:76:4d:ca:
                    d7:49:c9:32:b9:69:f2:86:c4:59:0e:f5:53:98:93:
                    ae:2e:83:5a:d1:2e:4c:2b:c5:9e:96:fc:7f:5a:95:
                    ca:ab:69:ec:ef:be:b7:1d:14:5d:06:a9:4a:78:d0:
                    1a:b3:16:97:a3:8c:65:a1:de:fc:f5:dd:c0:9b:15:
                    63:ad:47:c2:34:7c:c3:51:ef:c2:90:05:49:74:1d:
                    b3:0d:3f:df:4f:8d:87:a9:ca:ef:79:ae:b8:f6:25:
                    87:dd:6e:61:05:19:ac:d3:69:10:1a:7d:b4:11:04:
                    ba:f4:23:35:7b:80:af:c3:1e:30:6b:99:80:0e:9e:
                    cd:a5:fa:cf:7d:0d:01:82:14:2c:9a:fb:3e:ff:a9:
                    f6:f6:59:21:15:38:14:f5:64:4d:76:1c:b1:56:13:
                    de:c8:13:ef:1d:81:11:92:cd:5e:be:56:44:c1:59:
                    00:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:0C:1E:66:74:E7:73:A6:11:CD:51:EB:DF:A9:8B:2F:91:0E:20:63
            X509v3 Authority Key Identifier:
                keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS9318.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.40.39.0/24
                  82.40.48.0/24
                  82.40.51.0/24
                  82.41.3.0/24
                  178.83.6.0/24
                  178.83.16.0/24
                  178.83.26.0/24
                  178.83.36.0/24
                  178.83.46.0/24
                  178.83.56.0/24
                  178.83.66.0/24
                  178.83.75.0/24
                  178.83.83.0/24
                  178.83.96.0/24
                  178.83.108.0/24
                  178.83.116.0/24
                  178.83.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:0a:80:a2:16:1e:14:dd:a3:80:4d:af:48:d5:83:fe:2e:9a:
         e7:67:49:84:53:70:f7:53:fe:3f:11:a0:66:95:f3:e6:97:a6:
         37:29:21:6e:90:82:53:91:36:97:3a:16:1a:29:55:5c:a8:05:
         6e:65:7b:68:b2:0b:c8:25:dc:86:e8:37:32:d6:e0:cc:fc:1e:
         b7:be:a7:34:99:2f:cf:03:c6:0f:81:d6:de:a7:30:42:92:e3:
         ec:ae:db:5c:f7:39:f5:09:5a:0e:63:5c:ec:a0:f9:30:d8:5c:
         6a:65:34:a7:07:7f:fe:e9:89:c1:b2:13:b2:4e:c7:04:76:47:
         0d:5c:a8:e2:7c:d0:5f:08:a7:42:d3:0a:07:7f:f5:d7:6b:e9:
         06:57:62:c3:17:df:c7:7f:b7:d8:c9:6e:d7:11:ed:5e:d8:ae:
         7d:d1:c1:04:64:a1:b2:ae:7e:cb:2a:ee:69:09:94:3e:4f:ec:
         62:32:c0:e9:ba:10:0a:5b:23:37:b9:44:1b:77:7e:86:5c:4c:
         d0:e1:a7:69:63:60:a5:71:42:35:45:d1:48:ad:2f:3f:eb:fc:
         57:2b:c7:95:f3:b5:17:e0:97:29:df:73:ed:e1:83:71:d6:47:
         47:ac:5b:b1:23:77:e4:ad:97:79:ce:f5:91:f7:a1:e1:65:19:
         88:f1:71:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 08:55:49 2026 by rpki-client