This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS203057.roa
File:                     AS203057.roa (raw, json)
Hash identifier:          3pYQPaehLMw5AMaZHuAdu43uTC2YzbYK36hFIYmwS0Q=
Subject key identifier:   89:EE:F7:82:18:4E:C5:AA:38:44:43:77:DB:C0:2B:41:F0:8E:0C:3E
Certificate issuer:       /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial:       11D14439975AF6EB9EA4E603138F4A49A87F0430
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS203057.roa
Signing time:             Fri 16 Jan 2026 10:38:31 +0000
ROA not before:           Fri 16 Jan 2026 10:33:31 +0000
ROA not after:            Fri 15 Jan 2027 10:38:31 +0000
asID:                     203057
IP address blocks:        82.22.167.0/24 maxlen: 24
                          82.26.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 05:21:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:d1:44:39:97:5a:f6:eb:9e:a4:e6:03:13:8f:4a:49:a8:7f:04:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
        Validity
            Not Before: Jan 16 10:33:31 2026 GMT
            Not After : Jan 15 10:38:31 2027 GMT
        Subject: CN=89EEF782184EC5AA38444377DBC02B41F08E0C3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:83:cc:08:57:2a:15:66:79:bc:cc:4d:a0:db:
                    dd:45:fe:a0:70:4d:ec:b9:63:01:66:29:9b:fa:f6:
                    a3:a0:3d:de:80:c4:93:b3:b8:57:c7:c6:c1:80:a0:
                    fb:2d:08:4c:e2:01:b4:14:ba:c3:fc:d7:72:3d:c4:
                    7e:dc:3a:27:28:79:62:46:69:9b:15:1f:8a:b0:22:
                    12:38:d5:33:7e:59:90:e3:d0:b5:91:47:1a:63:5c:
                    6d:ed:75:49:bd:67:0f:48:6a:2d:ce:14:25:a3:cd:
                    18:76:7e:12:fe:dc:51:a7:0a:74:b9:97:8e:38:0e:
                    34:df:4d:6e:ff:cc:44:d3:fa:ab:61:b1:00:0b:0f:
                    ec:72:45:24:00:69:9c:7e:34:a6:1e:59:68:d9:e8:
                    26:74:83:ae:75:4f:2f:b4:c3:bf:7b:6c:9c:ec:b1:
                    b2:c6:0a:b9:2d:a6:fa:e2:01:5b:14:70:31:35:ee:
                    ed:28:bb:5c:b8:47:8e:64:30:09:34:85:b9:14:1b:
                    a9:02:37:fc:49:04:fe:e4:0d:4c:c7:9c:71:33:50:
                    1b:94:57:40:e8:7f:9c:2d:4d:7c:ae:c8:68:13:af:
                    72:bc:dd:0d:b7:54:de:2e:14:33:3e:b7:7b:fe:47:
                    fa:9e:5e:df:f8:13:f8:78:fb:1e:6f:d9:0a:bc:3a:
                    5e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:EE:F7:82:18:4E:C5:AA:38:44:43:77:DB:C0:2B:41:F0:8E:0C:3E
            X509v3 Authority Key Identifier:
                keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS203057.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.22.167.0/24
                  82.26.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:da:7f:e5:f2:52:2c:09:14:a2:e1:d1:bb:81:5f:bc:5d:29:
         48:45:e3:ed:e0:56:ab:f4:e1:60:c1:e9:07:ce:97:a4:b9:7f:
         ef:95:d1:8f:f8:be:59:12:23:bf:f3:76:1f:09:e1:1e:29:a2:
         06:b6:cb:22:f6:c2:b9:c9:3b:14:70:8a:03:bb:d3:73:9b:59:
         c0:5a:dd:a1:3c:ba:d5:06:19:43:05:2c:fe:d8:9e:48:af:63:
         4b:78:22:59:2d:32:d7:f6:4c:de:a7:4f:99:ae:92:56:7c:8c:
         9a:9d:d6:7f:7d:98:1a:72:72:c1:bf:b3:3c:46:02:46:65:0e:
         39:74:a4:e3:6c:51:57:37:4f:26:d3:9d:c3:44:b7:8d:b6:ea:
         1a:14:a1:84:9d:22:19:0a:a6:b9:90:79:c9:5b:9e:67:a9:ed:
         d0:03:2e:36:db:0d:c3:65:54:22:c6:b4:e7:26:af:2f:db:96:
         a7:e2:09:59:4f:2b:6a:c9:f4:c2:1f:14:89:67:53:3f:e9:0d:
         36:29:85:e9:df:1e:68:39:7e:c4:48:66:bf:fb:af:63:d0:48:
         98:0d:51:1c:69:f3:67:8a:6e:dd:98:c0:2b:26:08:67:65:e1:
         26:c3:bf:76:0f:ef:ca:3c:2f:4b:ef:f5:82:41:15:d9:dc:81:
         8d:15:ae:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:10:08 2026 by rpki-client