This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS212238.roa
File:                     AS212238.roa (raw, json)
Hash identifier:          7RW5KPr8xyQu9WMkCce0nw464wVUBisa28/wjE3duSo=
Subject key identifier:   0F:6D:4B:58:F2:89:4F:5C:B4:4B:C0:19:5F:AA:10:4D:D2:69:58:70
Certificate issuer:       /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial:       70A3A54C33C6641E7C9F2E0D0C3354B3E08B5E33
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS212238.roa
Signing time:             Thu 13 Nov 2025 00:08:47 +0000
ROA not before:           Thu 13 Nov 2025 00:03:47 +0000
ROA not after:            Thu 12 Nov 2026 00:08:47 +0000
asID:                     212238
IP address blocks:        45.151.46.0/24 maxlen: 24
                          193.142.22.0/24 maxlen: 24
                          194.5.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 04 Dec 2025 09:57:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:a3:a5:4c:33:c6:64:1e:7c:9f:2e:0d:0c:33:54:b3:e0:8b:5e:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
        Validity
            Not Before: Nov 13 00:03:47 2025 GMT
            Not After : Nov 12 00:08:47 2026 GMT
        Subject: CN=0F6D4B58F2894F5CB44BC0195FAA104DD2695870
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:a2:ee:32:c2:51:7e:2c:15:3f:23:11:10:38:
                    c2:c8:3b:93:2a:23:ca:63:2d:69:b0:e5:ba:e6:69:
                    15:e5:60:b9:ec:6a:a2:94:aa:c1:13:9c:ac:6f:fa:
                    fb:37:62:9e:69:33:77:f7:05:a3:e6:5c:6c:4c:f3:
                    be:21:b9:5f:6c:24:2c:14:b8:d2:0d:28:1f:e2:ef:
                    0a:09:be:96:c3:72:64:93:e7:a1:9a:e8:d7:9e:c1:
                    17:ac:49:df:00:cf:e1:21:8e:ce:c6:33:a7:2d:27:
                    80:6b:1b:da:07:d9:c6:2e:63:a1:2f:01:f8:bb:d6:
                    80:01:11:45:1a:ba:3f:a1:a2:f7:97:2c:bd:8f:8e:
                    13:fd:98:35:f2:07:53:92:a1:08:aa:1f:b5:68:82:
                    c4:b8:94:dd:18:46:36:b1:18:6b:90:60:f2:6a:f3:
                    02:a9:0f:a2:a5:a2:4e:28:1b:9d:2b:2b:85:00:19:
                    f6:3a:b7:d6:a3:32:1e:99:01:06:62:7e:64:99:b6:
                    0f:86:88:75:a2:1f:c0:51:3e:2b:fc:e9:92:82:e8:
                    0e:47:39:f5:18:89:e1:1b:7d:da:7c:6b:ee:cd:4c:
                    c2:be:d5:5e:d3:b0:8c:0b:1c:87:49:0b:4d:f1:4a:
                    5c:63:ae:4e:c0:5a:eb:c5:91:ad:a1:53:04:dd:13:
                    37:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:6D:4B:58:F2:89:4F:5C:B4:4B:C0:19:5F:AA:10:4D:D2:69:58:70
            X509v3 Authority Key Identifier:
                keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS212238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.151.46.0/24
                  193.142.22.0/24
                  194.5.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:7e:86:96:c5:ff:b5:75:95:37:7e:0e:ed:81:4d:2f:26:cb:
         54:9d:cc:49:a1:c8:1e:a8:ca:b1:10:b5:8b:c1:83:53:c3:7b:
         b4:13:c9:48:72:1e:05:7e:2b:b3:8c:a5:5f:6f:62:fe:71:cc:
         58:c8:7f:39:d7:fc:51:3e:50:f8:68:7f:86:a3:63:40:a4:db:
         c4:6b:1a:ac:70:b7:a5:d0:38:c3:d9:d5:c9:cd:b7:3b:87:5d:
         41:2b:8d:7e:7d:d8:53:00:1a:05:56:0b:22:74:1d:da:5c:4d:
         60:81:d7:d1:f4:49:55:d5:e1:82:19:70:6c:5f:6f:47:cc:02:
         1f:58:30:2d:1c:6c:31:7d:38:5d:89:e7:80:18:ed:80:1f:30:
         80:a4:3d:e7:65:82:68:34:5d:f8:19:1d:23:07:0f:38:4b:64:
         21:23:27:4f:83:5c:86:88:e4:fa:b1:a2:79:e5:4e:48:7f:d5:
         5a:0c:79:7d:cd:f5:6b:cb:3f:69:39:0b:94:47:5b:9a:c8:d5:
         01:4c:5f:7e:a9:b4:d2:cf:ce:30:f1:a9:c3:48:f9:35:bf:7c:
         2f:4f:5b:68:b1:68:53:cc:ae:68:28:f2:9b:ea:01:5d:8f:36:
         8a:a2:b6:80:b6:7b:6c:c1:ba:42:da:db:6a:bc:2b:c2:06:71:
         8e:50:b3:eb
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIUcKOlTDPGZB58ny4NDDNUs+CLXjMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDNiMWJhM2ZkYjkxZDhkOWVhNzZjNTc3NjMyMGViN2Vi
MmQ2ZWQ5ZDAeFw0yNTExMTMwMDAzNDdaFw0yNjExMTIwMDA4NDdaMDMxMTAvBgNV
BAMTKDBGNkQ0QjU4RjI4OTRGNUNCNDRCQzAxOTVGQUExMDRERDI2OTU4NzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaou4ywlF+LBU/IxEQOMLIO5Mq
I8pjLWmw5brmaRXlYLnsaqKUqsETnKxv+vs3Yp5pM3f3BaPmXGxM874huV9sJCwU
uNINKB/i7woJvpbDcmST56Ga6NeewResSd8Az+Ehjs7GM6ctJ4BrG9oH2cYuY6Ev
Afi71oABEUUauj+hoveXLL2PjhP9mDXyB1OSoQiqH7VogsS4lN0YRjaxGGuQYPJq
8wKpD6Klok4oG50rK4UAGfY6t9ajMh6ZAQZifmSZtg+GiHWiH8BRPiv86ZKC6A5H
OfUYieEbfdp8a+7NTMK+1V7TsIwLHIdJC03xSlxjrk7AWuvFka2hUwTdEzdJAgMB
AAGjggIWMIICEjAdBgNVHQ4EFgQUD21LWPKJT1y0S8AZX6oQTdJpWHAwHwYDVR0j
BBgwFoAUA7G6P9uR2NnqdsV3YyDrfrLW7Z0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvN2ZmMGY1NTUtZGJhNy00MTkyLWEwMWQtZjY5MTZkNWJi
ODRlLzAvMDNCMUJBM0ZEQjkxRDhEOUVBNzZDNTc3NjMyMEVCN0VCMkQ2RUQ5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0E3RzZQOXVSMk5ucWRzVjNZeURyZnJM
VzdaMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzdmZjBmNTU1LWRiYTct
NDE5Mi1hMDFkLWY2OTE2ZDViYjg0ZS8wL0FTMjEyMjM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALZcu
AwQAwY4WAwQAwgWUMA0GCSqGSIb3DQEBCwUAA4IBAQC4foaWxf+1dZU3fg7tgU0v
JstUncxJocgeqMqxELWLwYNTw3u0E8lIch4FfiuzjKVfb2L+ccxYyH851/xRPlD4
aH+Go2NApNvEaxqscLel0DjD2dXJzbc7h11BK41+fdhTABoFVgsidB3aXE1ggdfR
9ElV1eGCGXBsX29HzAIfWDAtHGwxfThdieeAGO2AHzCApD3nZYJoNF34GR0jBw84
S2QhIydPg1yGiOT6saJ55U5If9VaDHl9zfVryz9pOQuUR1uayNUBTF9+qbTSz84w
8anDSPk1v3wvT1tosWhTzK5oKPKb6gFdjzaKoraAtntswbpC2ttqvCvCBnGOULPr
-----END CERTIFICATE-----
Generated at Wed Dec 3 12:02:57 2025 by rpki-client