This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215172.roa
File:                     AS215172.roa (raw, json)
Hash identifier:          bG3J7DbzkmC5pBPZk3Ehe56lCEMr3fe7AxqkBvVT1Ks=
Subject key identifier:   A0:1D:A3:A0:D2:76:ED:E9:9C:82:6A:F8:CC:E3:4C:44:96:0A:7B:7B
Certificate issuer:       /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial:       5C057772A75E2DDA52C78E01213D43CBD543C655
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215172.roa
Signing time:             Mon 19 Jan 2026 18:21:40 +0000
ROA not before:           Mon 19 Jan 2026 18:16:40 +0000
ROA not after:            Mon 18 Jan 2027 18:21:40 +0000
asID:                     215172
IP address blocks:        82.39.145.0/24 maxlen: 24
                          178.83.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:05:77:72:a7:5e:2d:da:52:c7:8e:01:21:3d:43:cb:d5:43:c6:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
        Validity
            Not Before: Jan 19 18:16:40 2026 GMT
            Not After : Jan 18 18:21:40 2027 GMT
        Subject: CN=A01DA3A0D276EDE99C826AF8CCE34C44960A7B7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:4d:32:b0:6c:1e:73:35:27:54:78:ca:6f:49:
                    cf:9d:f7:f7:b7:79:4b:de:eb:e5:f7:d5:e0:a7:73:
                    80:61:57:f4:3b:24:64:f9:26:85:d2:d9:dd:6b:3f:
                    98:e6:0e:50:25:4a:9c:5e:9d:cf:2a:29:f4:90:7f:
                    2e:47:dc:d9:f2:0c:0e:71:8c:95:b1:a3:77:88:bd:
                    d7:3d:ea:2f:d8:29:6f:5b:bf:e0:b8:c8:96:b5:19:
                    68:53:7a:8c:0e:1c:0c:19:a3:96:b6:61:85:1d:22:
                    22:cf:63:5b:54:a1:9b:81:60:92:6b:1a:01:21:e1:
                    20:e8:d4:73:f9:39:9a:fc:bf:6a:38:be:ba:aa:0e:
                    ba:2f:3d:4d:8f:81:a2:36:e2:29:78:81:e0:07:6e:
                    84:9c:23:99:c1:16:1f:a7:5a:95:c5:76:91:50:1c:
                    72:11:6c:43:66:3b:a8:3b:5e:a8:d6:b1:ad:ad:03:
                    25:86:97:e5:47:af:e0:83:b5:fd:57:96:4b:14:23:
                    08:68:21:70:89:78:39:8e:bd:e1:9c:83:c4:89:fd:
                    8d:b0:ca:10:83:3b:4e:aa:d8:59:eb:d4:79:cf:7e:
                    e9:00:10:36:97:c1:e4:96:b3:ae:ac:76:aa:bc:1e:
                    72:62:70:dc:b3:ef:b9:37:87:83:16:0f:18:50:48:
                    e5:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:1D:A3:A0:D2:76:ED:E9:9C:82:6A:F8:CC:E3:4C:44:96:0A:7B:7B
            X509v3 Authority Key Identifier:
                keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215172.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.39.145.0/24
                  178.83.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:68:b6:9a:9d:8b:1d:2b:28:71:dd:b2:e8:d0:76:69:0a:89:
         70:7b:c1:de:bc:17:75:ca:51:65:79:24:8a:ea:3f:0f:9a:12:
         6c:c2:7e:66:c9:f3:f4:df:f0:d4:e7:d2:5f:c5:87:f3:65:96:
         11:1d:65:43:5f:3e:17:70:fd:a4:9e:ce:6c:4c:cc:10:14:89:
         e9:ca:47:9f:3a:b8:e2:d1:dc:4e:11:e4:40:5f:53:90:ff:7d:
         e4:e4:db:e0:ee:b3:12:07:ed:ad:6c:5a:58:2b:f1:cd:15:1c:
         1e:2c:a1:00:a3:dc:0d:3d:f6:59:27:7d:b7:55:d1:3e:91:f8:
         b6:a8:7a:0d:0d:0d:4b:e6:92:9a:40:e1:f8:42:ac:4a:38:82:
         d4:56:2f:c6:f1:76:31:e3:07:be:7c:3b:b6:56:c2:ef:3d:a9:
         c9:a9:07:7a:a7:9a:e8:be:a9:2a:c1:88:df:c7:c0:fd:64:0f:
         76:d8:df:53:80:81:88:98:29:74:17:91:00:48:b6:b1:a1:de:
         7f:64:f0:19:2f:52:b0:db:cf:24:19:42:bb:6e:3e:9e:7b:86:
         49:0c:e8:79:07:d8:c7:d0:cc:bd:6d:42:45:58:a1:ee:fc:00:
         38:70:e0:b2:36:80:69:e8:9e:8b:3d:6e:5a:10:87:b4:82:d7:
         e1:70:c7:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:21:04 2026 by rpki-client