This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215294.roa
File:                     AS215294.roa (raw, json)
Hash identifier:          M3MFc5+Y2HXYnY1Skcs5zFTo214+9JDlqQRFOayFUpI=
Subject key identifier:   EF:4C:D6:C0:49:56:1C:7E:A7:FF:22:55:22:EA:75:7D:48:EC:20:7A
Certificate issuer:       /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial:       46EE8F82362D374E832118E98F230B8FBFDF17A8
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215294.roa
Signing time:             Thu 08 Jan 2026 10:45:10 +0000
ROA not before:           Thu 08 Jan 2026 10:40:10 +0000
ROA not after:            Thu 07 Jan 2027 10:45:10 +0000
asID:                     215294
IP address blocks:        82.39.66.0/24 maxlen: 24
                          82.39.67.0/24 maxlen: 24
                          82.39.68.0/24 maxlen: 24
                          82.39.69.0/24 maxlen: 24
                          82.39.70.0/24 maxlen: 24
                          82.39.71.0/24 maxlen: 24
                          82.39.72.0/24 maxlen: 24
                          82.39.73.0/24 maxlen: 24
                          82.39.74.0/24 maxlen: 24
                          82.39.75.0/24 maxlen: 24
                          82.39.76.0/24 maxlen: 24
                          82.39.77.0/24 maxlen: 24
                          82.39.78.0/24 maxlen: 24
                          82.39.79.0/24 maxlen: 24
                          82.39.80.0/24 maxlen: 24
                          82.41.246.0/24 maxlen: 24
                          82.41.247.0/24 maxlen: 24
                          82.41.248.0/24 maxlen: 24
                          82.41.249.0/24 maxlen: 24
                          82.41.250.0/24 maxlen: 24
                          82.41.251.0/24 maxlen: 24
                          82.41.252.0/24 maxlen: 24
                          82.41.253.0/24 maxlen: 24
                          82.41.254.0/24 maxlen: 24
                          82.41.255.0/24 maxlen: 24
                          178.83.4.0/24 maxlen: 24
                          178.83.11.0/24 maxlen: 24
                          178.83.19.0/24 maxlen: 24
                          178.83.27.0/24 maxlen: 24
                          178.83.38.0/24 maxlen: 24
                          178.83.52.0/24 maxlen: 24
                          178.83.67.0/24 maxlen: 24
                          178.83.91.0/24 maxlen: 24
                          178.83.118.0/24 maxlen: 24
                          2a13:9500:115::/48 maxlen: 48
                          2a13:9500:123::/48 maxlen: 48
                          2a13:9500:124::/48 maxlen: 48
                          2a13:9500:125::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 05:21:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:ee:8f:82:36:2d:37:4e:83:21:18:e9:8f:23:0b:8f:bf:df:17:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
        Validity
            Not Before: Jan  8 10:40:10 2026 GMT
            Not After : Jan  7 10:45:10 2027 GMT
        Subject: CN=EF4CD6C049561C7EA7FF225522EA757D48EC207A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d8:6a:03:cf:4d:b9:12:f4:f1:5e:f9:a5:32:
                    2a:22:16:15:46:fd:75:14:52:03:fa:2c:51:03:82:
                    aa:47:e6:0e:11:4c:06:03:c9:27:f5:30:c9:58:8e:
                    bb:12:c1:a1:cc:67:38:e2:ac:85:cd:10:af:00:d0:
                    7e:46:40:ff:f6:b3:95:b7:6b:6b:fa:db:00:2a:4b:
                    27:70:87:13:19:64:68:5a:a6:13:b6:0e:5a:bd:2b:
                    75:91:51:c3:a1:75:37:97:32:b6:48:09:7f:13:ba:
                    4f:45:04:5a:92:c1:c8:6f:0c:ea:b1:9d:df:68:eb:
                    d6:e7:74:8d:ec:ce:7b:9c:75:04:4f:2e:5d:6c:84:
                    eb:68:2f:ca:18:c8:62:44:8e:db:b4:8b:7e:a1:1b:
                    b8:3e:1b:0f:84:fa:61:c9:d7:59:89:ac:cd:b4:af:
                    e5:9b:e8:5e:7c:53:58:2e:79:50:d0:35:9d:2d:95:
                    a7:5b:35:e9:ee:9e:5d:15:4b:ca:27:a2:6b:44:de:
                    e6:b2:f3:4f:d2:c9:05:0a:d2:00:8e:73:3b:af:73:
                    d4:c1:58:dd:51:bd:3b:44:17:ed:14:4c:ea:08:56:
                    35:48:99:b2:6e:cd:73:03:9c:b9:43:04:ee:6c:c4:
                    47:22:9a:da:6e:2d:88:b8:14:28:bc:c7:f8:b9:6e:
                    65:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:4C:D6:C0:49:56:1C:7E:A7:FF:22:55:22:EA:75:7D:48:EC:20:7A
            X509v3 Authority Key Identifier:
                keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215294.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.39.66.0-82.39.80.255
                  82.41.246.0-82.41.255.255
                  178.83.4.0/24
                  178.83.11.0/24
                  178.83.19.0/24
                  178.83.27.0/24
                  178.83.38.0/24
                  178.83.52.0/24
                  178.83.67.0/24
                  178.83.91.0/24
                  178.83.118.0/24
                IPv6:
                  2a13:9500:115::/48
                  2a13:9500:123::-2a13:9500:125:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         88:e3:e3:38:0e:1c:fe:50:e9:e7:98:0d:48:64:25:4c:db:df:
         c5:02:31:1c:78:81:39:30:8c:ac:14:4d:df:40:10:1a:b3:b4:
         c2:8d:23:06:6c:b6:f3:28:65:22:b7:58:67:53:6f:88:a1:8c:
         c0:12:78:fc:92:35:9a:1f:ae:f8:5f:80:3f:77:f3:dc:e1:03:
         78:1b:a8:0f:eb:25:21:34:83:8c:47:6e:bd:e5:23:60:0a:75:
         87:00:96:e6:31:fa:97:aa:2a:31:51:25:bd:8c:07:4d:8d:b8:
         bb:f8:05:a5:7a:a3:98:b0:21:8c:75:82:4e:50:77:66:51:e7:
         c0:49:19:01:e0:38:1b:ed:5e:14:16:ab:4b:d0:61:88:81:82:
         63:67:f2:63:09:c2:48:bf:e4:ed:16:a6:e4:8c:ed:8e:2e:31:
         eb:ce:2c:5e:63:05:85:99:d4:81:e3:9d:18:8f:8c:7f:e0:a4:
         23:98:15:43:de:62:5e:49:d3:cc:08:cb:22:60:ff:1e:d4:88:
         d9:87:ac:94:80:f6:10:f4:63:fd:42:96:c0:9a:3a:16:09:e8:
         0a:50:71:4a:19:f0:15:23:41:dd:6b:54:da:c9:88:af:3f:f3:
         02:ff:ae:79:dd:3e:58:53:fe:d2:0c:90:ac:7e:d2:7f:81:e2:
         f8:56:ae:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:06:29 2026 by rpki-client