This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS395839.roa
File:                     AS395839.roa (raw, json)
Hash identifier:          eICWEvDFxhhFa1TGJ/vnElN/HjH9j9T3xvJZIKniAG0=
Subject key identifier:   78:43:F1:5C:87:71:AB:BF:E0:98:BF:6A:CD:BC:99:B2:D5:80:9C:6A
Certificate issuer:       /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial:       608D665C5813261787B63A3D5AEAB31F19087546
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS395839.roa
Signing time:             Wed 12 Nov 2025 07:37:44 +0000
ROA not before:           Wed 12 Nov 2025 07:32:44 +0000
ROA not after:            Wed 11 Nov 2026 07:37:44 +0000
asID:                     395839
IP address blocks:        82.26.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:8d:66:5c:58:13:26:17:87:b6:3a:3d:5a:ea:b3:1f:19:08:75:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
        Validity
            Not Before: Nov 12 07:32:44 2025 GMT
            Not After : Nov 11 07:37:44 2026 GMT
        Subject: CN=7843F15C8771ABBFE098BF6ACDBC99B2D5809C6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:36:9e:af:d0:de:bb:07:4b:b4:50:39:52:76:
                    63:3f:17:a2:c8:9b:c7:61:03:ed:df:b8:5c:b6:5f:
                    b7:9f:86:82:88:94:c5:38:2c:5f:a6:9f:fc:a6:a2:
                    7b:c3:ce:dc:7d:86:2d:3f:f2:1a:2a:8b:05:a3:d9:
                    b5:ba:56:0e:ed:d5:81:17:14:b0:72:e3:8b:3b:8b:
                    57:e5:8a:b6:b2:a7:76:48:d0:b1:0e:6f:db:59:0a:
                    9a:5a:e8:33:a7:79:aa:eb:be:8f:bc:23:e5:7a:ea:
                    19:e6:0f:2e:6a:cb:b7:08:e0:0a:ff:fe:85:d0:d2:
                    2c:69:27:76:f3:94:69:4c:a5:04:e2:98:f9:0f:d0:
                    7f:41:0e:a0:dd:e3:46:05:82:8e:a1:62:78:62:a8:
                    f6:19:eb:67:1a:3b:ee:c5:9e:6d:37:f7:da:a5:2c:
                    75:ce:8d:1a:68:58:7d:a2:05:1b:77:ca:08:e7:5b:
                    69:7f:9e:79:7e:b9:2c:38:04:19:89:73:81:43:44:
                    a6:61:c2:af:89:b5:10:b3:3f:5e:67:c6:89:7f:19:
                    b7:f6:1a:3d:c8:16:91:b7:70:27:ad:ac:f4:ae:5f:
                    74:c0:14:52:75:40:bd:9f:e8:8f:cf:e6:4d:86:a6:
                    81:7a:b9:65:ba:2c:7d:e0:49:9f:78:d1:cd:8b:6c:
                    a3:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:43:F1:5C:87:71:AB:BF:E0:98:BF:6A:CD:BC:99:B2:D5:80:9C:6A
            X509v3 Authority Key Identifier:
                keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS395839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.26.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:4b:a5:5e:46:d3:c5:e3:3f:7c:d4:41:a1:c0:16:48:1c:e1:
         d1:b0:1f:c0:bb:02:ef:ee:dd:95:62:d2:e0:83:4c:37:01:1b:
         b2:60:23:9a:67:f3:30:9e:01:30:15:1f:84:47:e5:f2:6c:05:
         7d:99:71:1c:64:64:a7:ac:6c:bc:49:1b:81:9f:d8:5a:d7:8f:
         ff:34:99:78:81:45:17:de:c7:0d:48:72:82:86:ab:49:c6:74:
         21:6a:4c:b0:06:00:03:cc:b6:6f:8b:5a:89:67:9b:a8:99:fa:
         7c:4a:99:a3:68:5d:26:ac:5d:77:6f:e6:83:e8:95:da:25:7e:
         4a:52:ef:5b:48:95:be:6c:07:48:8d:ec:6f:6f:24:c9:fe:25:
         23:30:e6:2e:dc:3c:77:bc:34:6f:ba:ae:1f:92:1a:b6:6c:0f:
         77:34:e5:e2:02:60:61:54:f3:e2:5d:11:53:32:66:f0:a0:36:
         05:62:52:ee:21:1a:ec:9a:53:1c:54:93:f8:9f:dd:a0:39:6e:
         a7:30:17:e8:c0:81:d8:28:1f:65:05:b2:55:97:f8:8b:75:81:
         fd:54:22:9a:14:db:e0:cf:7a:44:45:0d:8b:2a:9b:57:ea:3d:
         70:e2:4d:97:54:90:e4:ac:e3:52:19:1e:2f:9a:9e:0b:8c:d4:
         1e:a5:e4:65
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUYI1mXFgTJheHtjo9WuqzHxkIdUYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNTExMTIwNzMyNDRaFw0yNjExMTEwNzM3NDRaMDMxMTAvBgNV
BAMTKDc4NDNGMTVDODc3MUFCQkZFMDk4QkY2QUNEQkM5OUIyRDU4MDlDNkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDINp6v0N67B0u0UDlSdmM/F6LI
m8dhA+3fuFy2X7efhoKIlMU4LF+mn/ymonvDztx9hi0/8hoqiwWj2bW6Vg7t1YEX
FLBy44s7i1flirayp3ZI0LEOb9tZCppa6DOnearrvo+8I+V66hnmDy5qy7cI4Ar/
/oXQ0ixpJ3bzlGlMpQTimPkP0H9BDqDd40YFgo6hYnhiqPYZ62caO+7Fnm0399ql
LHXOjRpoWH2iBRt3ygjnW2l/nnl+uSw4BBmJc4FDRKZhwq+JtRCzP15nxol/Gbf2
Gj3IFpG3cCetrPSuX3TAFFJ1QL2f6I/P5k2GpoF6uWW6LH3gSZ940c2LbKN9AgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUeEPxXIdxq7/gmL9qzbyZstWAnGowHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMzk1ODM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUhpd
MA0GCSqGSIb3DQEBCwUAA4IBAQAOS6VeRtPF4z981EGhwBZIHOHRsB/AuwLv7t2V
YtLgg0w3ARuyYCOaZ/MwngEwFR+ER+XybAV9mXEcZGSnrGy8SRuBn9ha14//NJl4
gUUX3scNSHKChqtJxnQhakywBgADzLZvi1qJZ5uomfp8SpmjaF0mrF13b+aD6JXa
JX5KUu9bSJW+bAdIjexvbyTJ/iUjMOYu3Dx3vDRvuq4fkhq2bA93NOXiAmBhVPPi
XRFTMmbwoDYFYlLuIRrsmlMcVJP4n92gOW6nMBfowIHYKB9lBbJVl/iLdYH9VCKa
FNvgz3pERQ2LKptX6j1w4k2XVJDkrONSGR4vmp4LjNQepeRl
-----END CERTIFICATE-----
Generated at Sat Dec 6 21:47:14 2025 by rpki-client