This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS11878.roa
File:                     AS11878.roa (raw, json)
Hash identifier:          fAe4P1ETHcMMtqjBy58N9uID+FvoAcLElbpIRojVpco=
Subject key identifier:   F9:EE:B0:31:B5:85:D9:5B:AD:20:75:A9:38:9E:A7:C2:A1:CF:CC:61
Certificate issuer:       /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial:       331E1F65936A7A08D2955907CE2C1E1DD3383035
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS11878.roa
Signing time:             Tue 13 Jan 2026 00:55:33 +0000
ROA not before:           Tue 13 Jan 2026 00:50:33 +0000
ROA not after:            Tue 12 Jan 2027 00:55:33 +0000
asID:                     11878
IP address blocks:        82.26.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 23:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:1e:1f:65:93:6a:7a:08:d2:95:59:07:ce:2c:1e:1d:d3:38:30:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
        Validity
            Not Before: Jan 13 00:50:33 2026 GMT
            Not After : Jan 12 00:55:33 2027 GMT
        Subject: CN=F9EEB031B585D95BAD2075A9389EA7C2A1CFCC61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:03:55:ec:9f:49:a2:86:cb:f5:13:b8:23:12:
                    1d:56:ac:40:7e:ca:44:aa:c3:5a:8d:66:86:2c:10:
                    41:32:93:f9:58:fd:7e:40:e0:60:e9:b2:6c:d9:ad:
                    19:3f:35:74:19:4b:b2:88:dd:07:07:88:48:6b:08:
                    aa:a5:45:3b:80:a5:6c:f6:07:de:f8:14:33:b3:63:
                    c7:5d:27:b8:f2:9c:d6:44:c9:7a:37:1a:fd:6e:a9:
                    df:62:b0:d5:29:e4:03:e4:2b:39:6b:d7:fe:b4:a6:
                    d6:aa:6d:7d:a5:64:dd:e3:19:41:df:c6:3f:eb:9a:
                    51:ec:53:9e:d1:03:04:ce:56:ed:da:f5:cc:b6:75:
                    46:8f:20:6c:db:55:1d:6e:1e:ff:29:e0:28:ef:e8:
                    0a:13:49:b7:84:6e:7e:cc:69:3c:fa:e2:8e:1d:e1:
                    37:90:f7:9c:a1:30:cb:7d:76:a7:ba:52:00:48:d2:
                    18:d3:79:8e:0d:8c:bb:fd:69:71:5e:33:17:87:7e:
                    37:08:48:76:ec:22:20:08:57:7d:b4:a9:43:c7:33:
                    25:19:00:97:e0:03:c7:d5:95:1d:19:b8:06:2e:fd:
                    92:75:ee:ac:94:9e:ba:4e:56:6d:d1:72:6f:ad:2a:
                    ba:79:73:ef:b8:75:c6:8d:99:61:31:c3:bf:55:4b:
                    9b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:EE:B0:31:B5:85:D9:5B:AD:20:75:A9:38:9E:A7:C2:A1:CF:CC:61
            X509v3 Authority Key Identifier:
                keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS11878.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.26.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:09:05:56:eb:3d:40:db:ec:0e:f1:a4:14:18:1e:1b:f1:82:
         64:b9:2d:5c:83:df:50:cc:da:05:40:fe:e2:db:c3:df:21:78:
         7e:d8:25:ba:8d:d2:24:96:40:fb:e8:72:c5:8c:c0:5b:a7:f1:
         18:18:54:f2:67:08:2d:d9:cc:5b:28:81:46:e4:01:93:ce:e2:
         fd:e0:bf:9e:17:4c:59:de:45:67:0a:28:2a:95:50:8f:67:d5:
         ff:66:28:c6:67:8e:4c:a8:c7:42:ec:6c:13:b9:d6:53:0d:e6:
         87:53:62:31:9e:b5:ed:e4:1e:96:aa:b9:a8:bd:9b:94:0e:8e:
         15:76:c7:1f:8d:31:ad:8a:08:ea:13:7d:45:6f:7c:37:74:4f:
         00:dd:14:ce:11:3c:c9:b2:2d:bd:fd:a8:70:be:be:1d:5f:ce:
         60:27:0b:8f:5f:9f:15:f7:a8:e5:db:f0:44:f6:61:8e:51:f4:
         22:66:09:40:2d:25:85:cd:3b:cc:0a:1d:9f:1d:b7:7d:d1:3c:
         69:60:2e:2c:f4:1a:90:c6:87:e4:1d:fa:1a:28:d9:e6:25:c9:
         c0:bf:d2:ea:52:75:e6:31:1e:19:e4:66:c0:08:af:b4:df:f0:
         ef:df:ca:93:e0:53:68:79:57:3d:89:f0:55:05:67:b4:f6:4b:
         47:4e:a0:41
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUMx4fZZNqegjSlVkHziweHdM4MDUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjAxMTMwMDUwMzNaFw0yNzAxMTIwMDU1MzNaMDMxMTAvBgNV
BAMTKEY5RUVCMDMxQjU4NUQ5NUJBRDIwNzVBOTM4OUVBN0MyQTFDRkNDNjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYA1Xsn0mihsv1E7gjEh1WrEB+
ykSqw1qNZoYsEEEyk/lY/X5A4GDpsmzZrRk/NXQZS7KI3QcHiEhrCKqlRTuApWz2
B974FDOzY8ddJ7jynNZEyXo3Gv1uqd9isNUp5APkKzlr1/60ptaqbX2lZN3jGUHf
xj/rmlHsU57RAwTOVu3a9cy2dUaPIGzbVR1uHv8p4Cjv6AoTSbeEbn7MaTz64o4d
4TeQ95yhMMt9dqe6UgBI0hjTeY4NjLv9aXFeMxeHfjcISHbsIiAIV320qUPHMyUZ
AJfgA8fVlR0ZuAYu/ZJ17qyUnrpOVm3Rcm+tKrp5c++4dcaNmWExw79VS5u9AgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQU+e6wMbWF2VutIHWpOJ6nwqHPzGEwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMTE4Nzgucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABSGqYw
DQYJKoZIhvcNAQELBQADggEBABAJBVbrPUDb7A7xpBQYHhvxgmS5LVyD31DM2gVA
/uLbw98heH7YJbqN0iSWQPvocsWMwFun8RgYVPJnCC3ZzFsogUbkAZPO4v3gv54X
TFneRWcKKCqVUI9n1f9mKMZnjkyox0LsbBO51lMN5odTYjGete3kHpaquai9m5QO
jhV2xx+NMa2KCOoTfUVvfDd0TwDdFM4RPMmyLb39qHC+vh1fzmAnC49fnxX3qOXb
8ET2YY5R9CJmCUAtJYXNO8wKHZ8dt33RPGlgLiz0GpDGh+Qd+hoo2eYlycC/0upS
deYxHhnkZsAIr7Tf8O/fypPgU2h5Vz2J8FUFZ7T2S0dOoEE=
-----END CERTIFICATE-----
Generated at Sun Jan 25 11:05:26 2026 by rpki-client