This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS30058.roa
File:                     AS30058.roa (raw, json)
Hash identifier:          i+AwBQiZ54nvoN8X4iwYkPcv4TRR8SYig55ujqCBosI=
Subject key identifier:   C3:A9:C0:CC:DF:D1:6E:90:BB:12:61:65:D5:D8:F3:13:C0:29:18:16
Certificate issuer:       /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial:       295F9EACF1C18ACCE193FADC53B6B314C1F4A3A5
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS30058.roa
Signing time:             Fri 14 Nov 2025 06:45:41 +0000
ROA not before:           Fri 14 Nov 2025 06:40:41 +0000
ROA not after:            Fri 13 Nov 2026 06:45:41 +0000
asID:                     30058
IP address blocks:        82.21.1.0/24 maxlen: 24
                          82.26.169.0/24 maxlen: 24
                          2a13:9500:10a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:5f:9e:ac:f1:c1:8a:cc:e1:93:fa:dc:53:b6:b3:14:c1:f4:a3:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
        Validity
            Not Before: Nov 14 06:40:41 2025 GMT
            Not After : Nov 13 06:45:41 2026 GMT
        Subject: CN=C3A9C0CCDFD16E90BB126165D5D8F313C0291816
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:99:49:dd:31:fd:77:8e:70:86:f7:51:f7:37:
                    7d:39:d9:b5:40:c5:8f:72:81:35:32:75:91:0f:ab:
                    cd:cf:d2:06:c7:b4:5d:3c:fe:b9:8e:d2:26:b2:04:
                    98:cf:89:2c:6e:ea:06:cb:9b:fd:07:9b:bb:14:eb:
                    3a:8e:5b:ad:e5:7b:80:20:b2:fe:5f:d0:e5:fa:b2:
                    0a:0b:33:86:f8:33:64:10:4a:7b:8c:c3:20:db:82:
                    cb:bd:aa:05:38:b6:57:fb:90:81:f8:0c:15:6e:4b:
                    38:cf:ab:a3:c6:5a:70:45:75:c4:6f:dc:d4:43:ce:
                    38:be:ce:33:74:03:b7:5d:3d:fe:48:79:a3:15:e3:
                    5d:ac:3c:8f:5d:ca:0f:fd:49:9c:90:41:bf:d7:45:
                    30:2c:bf:bf:d0:d9:eb:ae:76:a5:c5:6d:ca:4f:3c:
                    b5:14:5a:01:54:61:34:ae:99:a9:ee:2a:d0:f7:4d:
                    00:08:41:16:f4:9e:ea:e7:e2:93:c9:ee:19:2b:c2:
                    d0:fa:6e:e3:e3:a2:7d:64:5c:4e:0a:e6:e1:d6:bf:
                    00:a4:dc:1a:b8:8c:21:0a:33:7d:f7:e1:bc:7a:11:
                    de:9d:8a:42:60:97:51:04:5c:83:4f:89:06:15:94:
                    07:d9:7f:b6:e5:eb:c3:25:22:f1:cc:11:88:c2:56:
                    ce:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:A9:C0:CC:DF:D1:6E:90:BB:12:61:65:D5:D8:F3:13:C0:29:18:16
            X509v3 Authority Key Identifier:
                keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS30058.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.21.1.0/24
                  82.26.169.0/24
                IPv6:
                  2a13:9500:10a::/48

    Signature Algorithm: sha256WithRSAEncryption
         0f:2f:bc:f1:18:0a:29:c3:a2:b5:e8:9f:5b:5b:9f:dc:26:86:
         80:44:ae:22:86:5a:71:87:b0:71:fa:20:d7:e2:4d:b9:2a:7f:
         8e:e1:86:c6:93:46:5c:7f:e3:6a:fe:90:ce:a9:49:ac:31:ce:
         61:e9:d9:04:8a:67:65:e0:07:5d:c2:aa:e1:f2:54:63:02:99:
         30:ad:2e:a6:3d:05:0c:d2:0d:78:02:4a:20:d5:4b:5c:49:96:
         d2:f3:c9:18:42:01:3c:1d:67:22:9e:1f:bb:31:a3:d3:c2:83:
         b0:b5:36:1d:65:6b:96:d0:ec:4c:a7:df:27:d7:10:5b:cf:17:
         e4:9a:78:b7:15:b0:9a:09:84:5d:ab:61:72:be:07:97:a5:1a:
         ba:e0:49:f1:bd:fd:89:a5:94:f9:17:b1:8f:a5:84:b9:37:ad:
         f7:3e:81:42:13:a1:e7:98:79:ed:a4:7d:1b:d1:a4:11:08:2e:
         9b:10:53:49:7f:e0:fa:87:19:0f:a1:6b:31:de:be:1d:a9:2d:
         38:50:0a:29:2c:f7:b1:da:30:4b:d1:13:0b:84:b0:26:eb:5f:
         07:76:57:79:99:d2:fc:30:a9:ae:f4:1d:56:12:57:e1:32:cd:
         27:d3:b2:f2:88:dd:3d:51:9b:dc:20:9a:72:f9:3e:2f:34:f5:
         9e:c8:66:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:47:25 2025 by rpki-client