This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213639.roa
File:                     AS213639.roa (raw, json)
Hash identifier:          6Y1ryQPfZNinu0G1rLyhWX3XZ5gVp8aSi+5Sc9FgVnE=
Subject key identifier:   57:E2:C8:EE:AD:EA:AD:95:59:2B:EE:EC:D3:FB:6A:F4:94:8A:C0:3E
Certificate issuer:       /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial:       6A2ED7FF11DE2BF556B4BCAF7C913C86AA2A4DD5
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213639.roa
Signing time:             Tue 20 Jan 2026 06:34:10 +0000
ROA not before:           Tue 20 Jan 2026 06:29:10 +0000
ROA not after:            Tue 19 Jan 2027 06:34:10 +0000
asID:                     213639
IP address blocks:        82.38.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:2e:d7:ff:11:de:2b:f5:56:b4:bc:af:7c:91:3c:86:aa:2a:4d:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
        Validity
            Not Before: Jan 20 06:29:10 2026 GMT
            Not After : Jan 19 06:34:10 2027 GMT
        Subject: CN=57E2C8EEADEAAD95592BEEECD3FB6AF4948AC03E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:aa:b5:45:0c:b3:bf:8e:b7:8d:2c:07:4d:82:
                    29:e0:f4:da:5b:bb:cb:12:5f:23:fb:11:d7:fd:9e:
                    52:24:44:14:16:04:85:24:9a:f4:fe:b2:a8:a1:6a:
                    7b:ad:e6:67:4c:7d:e9:29:36:ab:0b:a0:1a:de:48:
                    63:d1:8b:aa:3f:d8:9e:fc:c7:dc:cb:5c:18:d0:9d:
                    82:03:ad:a3:4f:02:c6:9e:ac:4b:13:ce:5f:cc:11:
                    f4:3b:b9:e4:dc:95:38:9f:0b:72:ed:04:01:da:a9:
                    55:eb:88:0f:4e:03:d3:06:f5:be:b7:aa:85:3b:77:
                    d1:34:cc:24:ac:25:a5:67:52:7b:1d:67:b9:f6:b0:
                    cb:22:e1:3d:49:ce:8d:91:bb:1d:1a:fc:1b:d8:fc:
                    8f:a9:b4:eb:97:70:5d:15:a6:27:12:0e:52:f4:43:
                    70:ef:d7:95:c1:b0:12:71:97:d3:07:83:75:b0:e0:
                    ef:01:dc:75:8b:7b:f6:7e:f9:47:64:4a:b4:fa:ef:
                    3c:0a:dd:a8:e2:c5:22:d5:f3:34:81:1e:72:be:29:
                    3b:3a:2f:5e:f2:4e:6a:a8:67:dc:a6:9d:a7:a1:5b:
                    04:42:a4:5c:e6:8c:dc:c3:b8:9e:25:d3:58:6a:05:
                    aa:a9:74:b6:d2:4e:d8:7e:9b:16:f4:4e:bb:ce:7f:
                    70:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:E2:C8:EE:AD:EA:AD:95:59:2B:EE:EC:D3:FB:6A:F4:94:8A:C0:3E
            X509v3 Authority Key Identifier:
                keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.38.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:14:14:05:2f:05:13:c1:c0:d7:6c:98:d4:c6:43:ea:35:80:
         4f:0f:78:d3:87:cb:31:93:d8:c8:ff:5e:9a:23:91:67:f7:fc:
         92:a9:36:91:e5:d7:16:5e:50:6d:d0:4a:f4:49:2d:4b:f6:57:
         8d:2c:61:0a:82:5f:2a:2b:ad:4c:c5:c4:5b:05:bc:f0:dc:86:
         73:02:2d:42:e0:89:d3:aa:5a:06:5f:20:33:80:ad:a2:e0:d1:
         65:74:75:e4:ec:43:ad:e4:3e:b0:a2:95:ef:ee:70:b1:59:8d:
         3b:af:2e:6b:19:99:84:4e:0c:68:52:4a:89:9d:f8:a5:06:ff:
         7e:03:36:21:94:94:ed:97:e1:ec:f7:1c:dd:10:5c:47:ff:20:
         91:c7:5f:b9:9e:a8:5d:52:a1:74:30:5a:bd:b1:74:75:3a:82:
         48:4b:c2:09:f0:2b:93:d4:cd:af:ae:da:12:cc:89:88:ec:4d:
         b3:5f:62:68:2f:44:fd:1b:1e:8e:69:4e:9d:04:58:1f:3b:36:
         30:32:97:39:97:b8:71:4f:cd:b9:21:bb:81:54:38:86:a1:15:
         0a:ff:08:ad:ca:ca:a5:c9:5c:29:c4:49:db:6d:7f:de:f4:b3:
         c9:26:2e:be:1f:61:a2:1d:d7:81:77:2c:7c:be:2b:85:d5:aa:
         0d:03:e9:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:49:47 2026 by rpki-client