This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS51430.roa
File:                     AS51430.roa (raw, json)
Hash identifier:          dFWzIyIt/rn04bGgX8klWjfSDcPh2QvSmgXS77mlepg=
Subject key identifier:   10:D7:A8:12:96:6B:FE:1C:94:60:CB:A7:0E:83:A5:89:5E:57:BF:C2
Certificate issuer:       /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial:       3A243D060852A5A5A7E33C6E20841ABB8A3D23B1
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS51430.roa
Signing time:             Thu 04 Dec 2025 09:47:05 +0000
ROA not before:           Thu 04 Dec 2025 09:42:05 +0000
ROA not after:            Thu 03 Dec 2026 09:47:05 +0000
asID:                     51430
IP address blocks:        82.21.212.0/24 maxlen: 24
                          82.22.247.0/24 maxlen: 24
                          82.23.201.0/24 maxlen: 24
                          82.23.230.0/24 maxlen: 24
                          82.23.237.0/24 maxlen: 24
                          82.24.247.0/24 maxlen: 24
                          82.25.240.0/24 maxlen: 24
                          82.25.247.0/24 maxlen: 24
                          82.26.232.0/24 maxlen: 24
                          82.26.247.0/24 maxlen: 24
                          82.27.228.0/24 maxlen: 24
                          82.27.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:24:3d:06:08:52:a5:a5:a7:e3:3c:6e:20:84:1a:bb:8a:3d:23:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
        Validity
            Not Before: Dec  4 09:42:05 2025 GMT
            Not After : Dec  3 09:47:05 2026 GMT
        Subject: CN=10D7A812966BFE1C9460CBA70E83A5895E57BFC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:01:92:cc:22:a8:55:d0:f5:c7:71:ab:46:9c:
                    cf:cf:e1:c2:cc:b4:ca:a8:b9:8b:79:f6:9d:1e:9f:
                    6c:19:94:3d:17:c8:6e:53:9b:20:9f:65:1c:ef:17:
                    a9:36:a1:ce:9d:24:c1:1f:3b:2c:89:40:37:88:09:
                    66:fb:6d:85:58:18:42:a5:0c:d9:5d:49:a8:b9:69:
                    e9:bc:dc:ec:35:ed:cb:a3:a2:17:f5:da:1c:b7:2b:
                    90:27:f8:4f:47:15:63:37:7e:be:f2:34:d8:b1:c1:
                    96:c2:36:a4:d2:26:a2:a1:da:04:f2:4a:f2:9e:d9:
                    97:b9:af:26:eb:57:94:e1:cc:d6:d2:ae:97:d5:4d:
                    62:a6:d4:ae:62:ec:df:7e:26:b2:0b:1c:f2:86:67:
                    2d:91:fe:cf:a4:cb:da:f0:4f:26:24:b9:f5:0d:f7:
                    88:40:5e:d3:5d:c4:3c:cd:46:b5:aa:e5:2c:65:97:
                    48:c2:68:4f:c7:e6:6e:5c:b2:79:06:11:3d:b6:fc:
                    9f:ac:a7:2f:29:e9:bd:1c:ab:af:3b:35:2e:48:c7:
                    39:ad:47:a7:dc:d2:cc:ac:90:95:4c:36:9a:1d:77:
                    02:40:49:50:ae:79:6b:78:7b:52:ab:bc:83:f0:7f:
                    60:f3:fd:eb:8b:1f:71:d7:2b:17:33:08:dd:5b:a3:
                    1c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:D7:A8:12:96:6B:FE:1C:94:60:CB:A7:0E:83:A5:89:5E:57:BF:C2
            X509v3 Authority Key Identifier:
                keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS51430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.21.212.0/24
                  82.22.247.0/24
                  82.23.201.0/24
                  82.23.230.0/24
                  82.23.237.0/24
                  82.24.247.0/24
                  82.25.240.0/24
                  82.25.247.0/24
                  82.26.232.0/24
                  82.26.247.0/24
                  82.27.228.0/24
                  82.27.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:d3:03:4a:be:b3:e7:b8:ca:e4:f2:49:7c:76:0b:64:95:0b:
         94:d2:04:1d:4b:63:1f:14:4d:e1:50:56:2d:27:9f:bc:08:74:
         24:4f:69:9a:c4:93:20:c0:67:51:85:bb:2f:67:20:ed:29:9b:
         f5:24:b8:5d:08:10:40:8a:2c:01:7b:3b:90:45:20:d3:c7:2b:
         2d:99:95:dc:23:f3:a8:ae:43:8c:56:f9:23:1d:ca:3a:3d:67:
         58:69:f2:88:35:b8:bb:f2:6f:42:a6:83:52:2b:91:63:21:0f:
         79:f4:8a:74:d5:3c:bf:54:2d:e6:29:e3:77:24:1e:da:47:34:
         dd:37:0c:b0:48:3b:7e:57:ad:bc:57:ee:bd:2b:32:6a:3f:b3:
         a2:3f:20:7a:c1:f7:49:47:d2:39:87:1e:75:5c:34:d6:20:ee:
         aa:b4:7a:fa:be:35:02:e9:3a:34:c1:1a:79:2a:a7:e2:6e:f3:
         8e:23:19:02:dd:8c:7e:f3:95:1c:be:4a:94:ba:52:e9:15:04:
         fb:97:5c:de:4a:7f:c6:dc:da:ef:b2:54:48:4d:e5:6a:4c:f5:
         7d:83:5e:86:38:63:a6:7a:87:9a:19:21:ef:e7:17:51:99:d6:
         d2:16:f7:2a:e2:b7:b6:97:90:1f:2a:7f:8a:35:47:17:0a:e6:
         2e:bc:e5:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:47:51 2025 by rpki-client