This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS216138.roa
File:                     AS216138.roa (raw, json)
Hash identifier:          D+rdYY6vrwAjx9iaeCwxAJZlKlY0L9IEANZriTAqv+E=
Subject key identifier:   E6:F8:D6:39:F5:87:9C:39:34:2C:79:9E:47:5B:61:7E:17:97:26:D9
Certificate issuer:       /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Certificate serial:       1C2DB0253E421E77A567995840B5D07B717B976E
Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS216138.roa
Signing time:             Wed 10 Dec 2025 15:20:59 +0000
ROA not before:           Wed 10 Dec 2025 15:15:59 +0000
ROA not after:            Wed 09 Dec 2026 15:20:59 +0000
asID:                     216138
IP address blocks:        176.53.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Dec 2025 10:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:2d:b0:25:3e:42:1e:77:a5:67:99:58:40:b5:d0:7b:71:7b:97:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
        Validity
            Not Before: Dec 10 15:15:59 2025 GMT
            Not After : Dec  9 15:20:59 2026 GMT
        Subject: CN=E6F8D639F5879C39342C799E475B617E179726D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d1:0f:09:7c:8a:d3:43:0e:ae:4c:74:d7:e3:
                    68:20:40:1e:56:49:8e:9c:ea:7b:f7:c3:3b:19:40:
                    55:4b:11:ff:3c:ed:cb:c9:16:15:30:6f:82:72:cc:
                    d9:e5:0a:00:14:d8:8f:e8:90:b9:d9:3d:45:fa:31:
                    15:bd:c2:be:2f:d9:e8:1f:f1:b9:1c:35:3c:d3:f1:
                    d1:80:d9:ef:a8:55:fb:42:84:5f:02:6a:9a:f6:41:
                    7a:2f:85:38:f9:2a:b3:0d:6d:13:9a:ed:0c:25:89:
                    04:e2:92:a6:69:5c:05:f5:40:8c:82:93:c7:e2:9c:
                    a5:f7:97:be:00:c5:04:41:12:3d:82:5d:48:28:c6:
                    6d:14:75:c3:44:13:f8:50:a7:cd:22:86:7e:f9:a6:
                    bf:41:1e:31:7d:2a:2c:bd:e9:14:8b:50:7b:8c:25:
                    d1:8f:44:db:36:7b:4a:08:6e:4f:61:6a:09:ab:67:
                    e7:d6:64:45:70:90:dc:ef:a4:04:7f:62:a3:34:ab:
                    3a:a8:84:c6:c2:5d:39:7f:5d:4a:cc:ba:c2:d1:05:
                    9d:7c:ec:ab:be:7c:31:9c:b2:a8:fa:de:91:b1:9d:
                    10:39:7a:17:cb:10:3f:a8:1d:b8:89:d5:6d:dd:71:
                    1f:1e:2b:29:23:ff:24:76:bc:db:8f:a7:04:8b:e3:
                    be:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:F8:D6:39:F5:87:9C:39:34:2C:79:9E:47:5B:61:7E:17:97:26:D9
            X509v3 Authority Key Identifier:
                keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS216138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.53.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:58:25:8b:fa:2f:73:6e:76:2d:24:f9:ba:19:c3:33:9c:18:
         5b:16:be:53:dc:3a:45:29:a3:33:cb:46:fa:f3:e8:99:1e:db:
         e0:bf:6d:9c:41:7d:fc:c0:09:4e:36:28:01:0a:74:63:6b:9f:
         a2:f5:8f:75:f0:dd:f8:8d:91:d5:44:db:41:9e:fd:98:4a:e7:
         df:49:19:4b:3d:5d:f1:54:f3:a0:91:a0:72:99:a3:22:3a:7f:
         60:9d:c5:84:86:ae:e4:72:bb:be:cb:9d:ec:e8:e9:74:eb:0e:
         16:03:96:6e:ae:6e:84:7f:fe:5b:77:71:94:82:a7:3f:0f:9f:
         e3:7c:ee:26:3d:bc:d0:74:6a:6d:3a:94:a4:8d:7e:2a:20:fc:
         7d:70:16:0e:9a:4c:7b:65:f6:19:cd:b7:5f:f2:47:07:d1:f0:
         00:89:e8:e7:bf:72:4b:b0:34:cc:70:0a:0a:f7:93:ff:5a:aa:
         eb:97:4b:be:d7:9e:83:3d:96:2f:c3:5f:db:48:56:76:c9:f4:
         24:9b:58:94:26:64:61:f1:23:30:82:66:ba:46:2c:2b:35:1a:
         44:66:e9:82:7f:56:e2:6c:49:65:39:54:7b:ef:ab:8a:b9:ea:
         78:eb:78:45:40:f0:93:69:31:26:17:9c:ea:9f:a6:72:7c:3f:
         80:6c:38:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 20:45:26 2025 by rpki-client