This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS22516.roa
File:                     AS22516.roa (raw, json)
Hash identifier:          Y5CQB9QRLC917k2KcaS8Q+nKLqxvSxqmynC4dyAx5Po=
Subject key identifier:   10:D0:5F:7A:7B:D1:44:EC:94:7A:76:24:70:37:6F:C4:A6:E6:D3:BD
Certificate issuer:       /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial:       0D21F095507C3D0C2550D7438F80D17ABD713D1D
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS22516.roa
Signing time:             Mon 29 Dec 2025 13:31:42 +0000
ROA not before:           Mon 29 Dec 2025 13:26:42 +0000
ROA not after:            Mon 28 Dec 2026 13:31:42 +0000
asID:                     22516
IP address blocks:        92.113.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 31 Dec 2025 23:41:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:21:f0:95:50:7c:3d:0c:25:50:d7:43:8f:80:d1:7a:bd:71:3d:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
        Validity
            Not Before: Dec 29 13:26:42 2025 GMT
            Not After : Dec 28 13:31:42 2026 GMT
        Subject: CN=10D05F7A7BD144EC947A762470376FC4A6E6D3BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ba:3b:ef:35:db:a8:49:78:61:d1:52:0e:7f:
                    01:76:8b:e1:0c:3d:be:a9:11:64:83:1a:a7:95:66:
                    0a:e5:b0:bf:c5:6f:f8:01:ca:17:be:89:24:40:57:
                    77:f5:30:ff:7b:b9:bf:82:20:65:fe:29:bb:3f:01:
                    a7:69:3d:d7:68:84:fd:a6:ef:37:a1:89:db:6b:ad:
                    d9:50:21:ee:df:bb:43:14:c7:20:90:15:66:82:6f:
                    52:09:4a:72:a0:c8:de:6f:5d:01:9c:11:a3:e9:75:
                    d2:14:c7:f5:2a:c3:1d:61:5f:2a:f5:9d:17:5b:48:
                    c4:90:cb:f6:50:b4:75:5c:d3:01:f7:6a:31:6f:b9:
                    40:11:e4:d2:71:94:2d:40:e7:1f:31:87:a5:c4:5f:
                    1b:61:21:6d:99:3e:45:97:c4:64:7a:4b:1f:af:4a:
                    8e:13:2c:66:94:3e:c9:27:f2:12:35:4c:0f:da:11:
                    90:7d:8c:97:e7:50:6e:d9:cc:6f:d0:c3:fc:6e:a0:
                    08:dc:a3:11:12:06:19:fb:de:a1:0d:e1:9b:7d:12:
                    48:a0:5b:e6:86:ce:57:59:a4:49:3a:3d:c1:eb:16:
                    02:46:a2:cf:e6:73:f1:c4:ac:c6:cb:5e:3c:89:aa:
                    93:0e:05:b8:04:7d:db:70:ac:75:93:22:86:be:32:
                    bd:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:D0:5F:7A:7B:D1:44:EC:94:7A:76:24:70:37:6F:C4:A6:E6:D3:BD
            X509v3 Authority Key Identifier:
                keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS22516.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.113.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:23:a8:fd:7e:11:1c:57:ee:83:37:ca:1f:8c:88:45:f6:26:
         bc:61:47:31:d0:06:aa:76:79:7c:23:95:4f:c3:e2:0c:16:04:
         38:5d:62:53:4b:43:1f:e3:fa:d8:32:a8:af:2b:7b:40:ec:1e:
         bd:9f:ab:d1:df:64:3b:b0:78:bf:dd:a7:6d:ab:00:c5:ab:f0:
         c4:5a:d4:5b:45:b8:37:e1:5c:1d:88:c6:cc:a1:c3:9a:7c:5c:
         44:8f:94:94:37:e1:a4:54:c6:df:ec:e3:9b:05:eb:b7:bf:5c:
         e4:99:d9:fc:1f:5a:ea:df:04:26:e3:e7:6b:9c:84:cc:b0:9f:
         78:b4:7c:0c:8a:d3:fe:0c:f1:93:ca:9c:85:58:88:a9:cb:54:
         b0:47:65:59:c3:ac:57:54:36:fd:67:2f:1b:0d:31:10:99:af:
         54:3c:78:7a:2b:e9:cb:65:0c:e4:d8:b6:97:f1:31:14:d2:2d:
         a1:7c:50:68:93:76:29:7c:5d:ea:31:97:ea:13:cb:9d:4b:f2:
         bf:71:07:ef:ab:3d:42:5f:2f:89:db:eb:f8:da:0c:85:92:91:
         0e:8f:6e:f5:de:a0:ec:25:33:90:8f:4f:e4:33:7d:7e:a7:96:
         5d:12:6b:68:64:b7:57:a0:e3:82:45:48:8d:5e:65:95:bc:df:
         32:69:6f:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 06:39:44 2025 by rpki-client