This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS205886.roa
File:                     AS205886.roa (raw, json)
Hash identifier:          XCanjc5IBGqeOqy0FhiMTpzVhKpMg7SmDWWDSCZWUg0=
Subject key identifier:   7B:1D:B3:95:C9:28:C5:34:B4:4C:01:64:DB:D8:9D:8B:DD:80:3A:9B
Certificate issuer:       /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial:       2FDF419475892AA65B24AB16519BF841F3DF6B3B
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS205886.roa
Signing time:             Thu 15 Jan 2026 09:41:02 +0000
ROA not before:           Thu 15 Jan 2026 09:36:02 +0000
ROA not after:            Thu 14 Jan 2027 09:41:02 +0000
asID:                     205886
IP address blocks:        46.202.62.0/24 maxlen: 24
                          46.203.57.0/24 maxlen: 24
                          92.113.45.0/24 maxlen: 24
                          95.135.7.0/24 maxlen: 24
                          178.92.234.0/24 maxlen: 24
                          178.94.235.0/24 maxlen: 24
                          178.95.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Jan 2026 15:31:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:df:41:94:75:89:2a:a6:5b:24:ab:16:51:9b:f8:41:f3:df:6b:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
        Validity
            Not Before: Jan 15 09:36:02 2026 GMT
            Not After : Jan 14 09:41:02 2027 GMT
        Subject: CN=7B1DB395C928C534B44C0164DBD89D8BDD803A9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d6:80:57:38:a6:7b:52:fc:d9:aa:ee:4f:28:
                    21:75:68:22:22:56:bb:f3:6a:b0:58:89:2b:b0:d8:
                    3e:de:8b:01:8e:94:6b:9b:c1:9c:ef:ff:60:2d:6a:
                    06:c5:55:60:2a:31:21:f8:fa:1f:f7:f8:fd:33:b0:
                    d7:b1:6e:8e:5c:ad:10:12:e8:97:9d:2d:5f:3f:5b:
                    52:0c:90:ae:21:41:83:54:13:c1:cc:47:1b:b2:e8:
                    4b:f5:03:c3:2c:f8:a0:90:e3:44:6b:9e:ad:42:22:
                    c1:d6:eb:93:80:ad:03:f9:e6:65:20:57:f0:cb:ea:
                    12:47:04:ea:95:54:4e:6a:1d:71:ca:d2:a7:56:0b:
                    9f:4d:7b:f2:3f:34:30:3d:0a:cb:0a:8d:49:7b:74:
                    6e:74:b4:b2:9c:2d:b8:1b:2c:2d:20:f4:20:55:e3:
                    d3:1e:fc:80:3a:6c:82:e6:b1:ac:29:5e:f2:1a:0a:
                    d2:39:44:25:4d:0a:69:6c:a2:11:1d:27:1a:26:dd:
                    f8:c2:22:43:d6:00:c4:c6:68:e1:1f:19:c8:55:53:
                    24:5e:26:48:e8:78:7e:7f:86:6c:42:7e:6b:b7:8f:
                    86:e2:4d:76:88:fa:6e:1b:c6:59:97:40:f9:b7:bd:
                    a8:3f:7d:ba:a3:f7:3a:da:22:33:7f:85:90:19:92:
                    12:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:1D:B3:95:C9:28:C5:34:B4:4C:01:64:DB:D8:9D:8B:DD:80:3A:9B
            X509v3 Authority Key Identifier:
                keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS205886.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.202.62.0/24
                  46.203.57.0/24
                  92.113.45.0/24
                  95.135.7.0/24
                  178.92.234.0/24
                  178.94.235.0/24
                  178.95.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:c9:73:8a:92:7a:9a:3b:13:5a:c6:22:84:0a:d6:5b:cf:eb:
         b8:99:f3:e7:0f:b8:34:e3:2f:cc:89:80:8f:22:be:ef:24:9e:
         a6:9a:5f:5c:57:bc:eb:a4:aa:cc:78:a1:4e:4f:56:0f:7c:e7:
         d8:2a:34:20:01:20:ee:37:22:2e:9f:9e:c7:9c:23:e8:2a:ea:
         a9:c2:3f:55:b8:0f:14:b7:7b:a9:c6:d1:7c:c3:ca:50:3b:0f:
         79:83:02:97:80:c8:39:80:05:3a:47:ae:77:1a:65:f9:ae:e7:
         aa:6d:cb:1d:05:3c:a2:91:24:9b:17:5c:3f:b3:80:45:d9:ca:
         93:f9:50:c2:37:89:2e:eb:a4:9a:2d:52:9e:86:ed:df:ee:97:
         be:df:93:91:b2:80:df:48:e9:79:e6:71:e8:2a:2d:d1:47:83:
         b1:fe:9f:b8:6a:5f:c4:7d:8e:cb:37:75:97:db:c2:79:71:78:
         9e:99:5a:d4:a8:34:b9:81:6a:75:76:73:85:0d:00:93:fa:1c:
         2d:4b:8f:e3:86:ff:e9:0e:a6:df:71:cd:e3:96:23:c2:3d:9a:
         71:12:48:2f:4a:bb:52:2e:a6:37:13:48:df:33:3a:f2:49:c9:
         40:55:4b:ab:53:68:12:67:89:42:8b:fb:0d:a0:a6:95:0c:6f:
         1f:2b:dd:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 15 23:26:26 2026 by rpki-client