This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS198250.roa
File:                     AS198250.roa (raw, json)
Hash identifier:          4Q2VUYk+kbShOboQnrmlKOjuIHhko3S+Lm2bL8WdXwc=
Subject key identifier:   03:E3:93:B0:55:C1:C1:8A:E8:35:62:95:2B:8A:F8:07:2F:59:C3:BA
Certificate issuer:       /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial:       5D7D3AE20E72CD7D59ABCEA7D400C1F7EA015CF2
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS198250.roa
Signing time:             Thu 22 Jan 2026 06:19:18 +0000
ROA not before:           Thu 22 Jan 2026 06:14:18 +0000
ROA not after:            Thu 21 Jan 2027 06:19:18 +0000
asID:                     198250
IP address blocks:        178.93.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 23 Jan 2026 12:30:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:7d:3a:e2:0e:72:cd:7d:59:ab:ce:a7:d4:00:c1:f7:ea:01:5c:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
        Validity
            Not Before: Jan 22 06:14:18 2026 GMT
            Not After : Jan 21 06:19:18 2027 GMT
        Subject: CN=03E393B055C1C18AE83562952B8AF8072F59C3BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:c7:c0:e6:44:af:f3:38:f5:b1:1b:ea:8a:d5:
                    31:6d:66:3f:d2:f3:ae:a4:d7:24:5d:9c:4d:23:39:
                    96:dc:14:e5:db:29:7f:dc:d0:c9:f4:76:55:61:95:
                    62:26:c2:ea:3a:0e:e1:0d:19:01:ee:65:70:bb:45:
                    a0:86:1f:24:3c:fa:99:c4:dc:7f:85:31:68:c5:63:
                    85:76:3f:72:06:dc:7b:43:f2:92:de:f7:74:8a:bd:
                    ab:6f:eb:00:5d:f6:ef:9a:c7:46:19:8d:3d:df:6a:
                    a7:fd:09:1d:8b:96:0e:26:6e:63:bf:58:da:fb:a7:
                    11:e8:0f:ea:83:51:d1:53:4f:45:be:e8:1f:b4:58:
                    1e:99:f3:f2:5c:47:dd:a4:bc:aa:71:1e:9e:ef:95:
                    4c:7f:31:e8:7f:ab:dd:54:41:82:de:10:cc:95:a7:
                    70:e0:a7:93:fb:ab:3f:8c:56:a2:cd:f0:a0:6c:9a:
                    0b:b2:a1:79:1d:95:9d:fd:de:1f:ea:cf:db:7b:d0:
                    d0:21:3d:bd:dc:cd:e9:a6:09:19:7e:1f:24:7d:ec:
                    d4:ca:15:1b:1d:b9:fa:f2:c0:c8:c6:3e:f2:4a:c4:
                    c0:fa:6a:e4:da:f6:8a:4e:d2:d0:43:19:d9:83:9e:
                    5c:c0:89:68:bc:e0:9a:fd:6f:a6:6a:ca:e9:e1:6c:
                    e2:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:E3:93:B0:55:C1:C1:8A:E8:35:62:95:2B:8A:F8:07:2F:59:C3:BA
            X509v3 Authority Key Identifier:
                keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS198250.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.93.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:b8:c1:53:89:da:5d:69:1a:45:65:64:a4:71:3c:df:9f:28:
         f4:49:d1:98:dc:bd:de:6b:90:b5:65:c0:9c:49:79:32:4e:e2:
         22:ce:50:ad:b2:04:e1:1c:e1:22:33:52:4b:f4:1e:06:6f:f1:
         3f:d0:e3:02:cd:2c:4f:0c:01:e5:c9:d6:7f:1a:26:6b:e4:2e:
         a7:20:ce:24:46:70:74:c7:d0:27:89:7c:7b:f7:5a:d8:1c:27:
         c0:1a:17:19:93:c7:50:85:4f:27:62:bb:24:67:8f:6d:d5:6f:
         f8:76:9a:60:18:6a:67:ee:b1:f8:c3:3f:6e:8d:2b:1b:60:90:
         c7:fb:e0:c3:1a:f5:3a:02:64:09:21:d2:ba:28:ae:59:8e:b6:
         06:26:2a:bf:04:a4:c8:3d:e3:ed:63:19:2e:8e:33:b3:b0:31:
         cc:38:36:bd:64:2c:90:00:d3:5e:bb:48:82:f2:1b:87:2a:db:
         a8:13:03:4c:55:00:14:86:59:95:2c:f7:ec:e3:bb:04:a7:95:
         87:46:ec:4e:47:53:1e:ff:59:f3:cd:f6:65:73:f7:02:a1:c4:
         56:ee:1e:ec:17:0a:ca:64:03:cf:3e:ea:28:6a:c1:c8:a4:63:
         b0:53:8b:fc:04:c6:f0:58:c0:c6:45:74:2f:bf:ee:75:9a:e2:
         4a:42:27:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 04:38:59 2026 by rpki-client