This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS59642.roa
File:                     AS59642.roa (raw, json)
Hash identifier:          9jbX7TRlfmaiDo+nofdWWFGJbDN/lytY5ywpo9dIqWc=
Subject key identifier:   ED:88:46:7B:3A:4F:2F:39:66:38:E1:35:59:7E:8D:A9:AC:7F:63:BE
Certificate issuer:       /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial:       74E6B23833FB22AAFDC141041F205CCFE4DA7C1C
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS59642.roa
Signing time:             Wed 14 Jan 2026 11:38:16 +0000
ROA not before:           Wed 14 Jan 2026 11:33:16 +0000
ROA not after:            Wed 13 Jan 2027 11:38:16 +0000
asID:                     59642
IP address blocks:        82.29.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 05:21:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:e6:b2:38:33:fb:22:aa:fd:c1:41:04:1f:20:5c:cf:e4:da:7c:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
        Validity
            Not Before: Jan 14 11:33:16 2026 GMT
            Not After : Jan 13 11:38:16 2027 GMT
        Subject: CN=ED88467B3A4F2F396638E135597E8DA9AC7F63BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:66:44:43:08:74:46:e8:3c:2e:1e:e9:fa:60:
                    98:a8:30:f9:8c:02:83:fb:1a:16:2d:74:dd:1d:29:
                    6a:53:fe:49:35:d8:e6:89:8a:a6:ff:59:0e:89:90:
                    2c:d6:13:8b:2b:ba:53:9b:be:c1:3a:b3:7b:cf:90:
                    12:b1:71:7a:2d:52:1f:60:be:4d:a4:b3:a2:ea:58:
                    da:4f:08:95:f3:89:bf:80:ff:c9:43:f7:a0:27:f3:
                    df:9d:db:8d:f1:81:b1:25:4f:25:1b:49:c8:ff:50:
                    fd:12:f2:3c:58:68:e4:71:56:be:dd:e7:1b:17:01:
                    43:a7:15:c5:ee:4e:cd:ea:82:49:62:a5:ae:d1:27:
                    6c:8b:54:a1:b9:28:cf:50:26:92:6d:f4:1a:90:89:
                    27:8b:10:10:cc:40:bc:b2:dc:63:5c:65:30:89:1a:
                    b4:3b:80:96:7f:21:9f:cd:b5:38:7a:9d:37:af:32:
                    e4:1f:10:6f:82:d5:c1:2f:a8:dd:e4:19:f7:43:cf:
                    d3:07:e5:ba:46:1c:48:c4:df:2e:cc:4a:50:84:d8:
                    02:d6:1d:92:d0:f1:70:2e:3d:e2:9f:91:39:95:69:
                    ce:04:cc:27:cb:6e:ef:b8:34:35:01:1f:ba:31:bb:
                    83:8f:ed:d7:e2:3a:b1:2b:21:d4:94:8a:c5:e5:0e:
                    10:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:88:46:7B:3A:4F:2F:39:66:38:E1:35:59:7E:8D:A9:AC:7F:63:BE
            X509v3 Authority Key Identifier:
                keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS59642.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.29.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:40:49:3f:58:00:61:a3:42:04:0f:4d:12:46:e8:08:bb:64:
         d1:62:6a:ff:66:cd:45:73:63:e2:43:3e:5c:43:c5:a7:2b:1e:
         e8:2e:6d:7d:4d:19:fe:bd:01:18:e7:25:22:67:2c:1a:ab:58:
         0c:73:5a:d7:c9:73:0d:97:41:89:a1:aa:ed:01:b1:14:ad:0f:
         6e:00:42:55:58:bf:96:36:7b:8b:13:68:a5:a8:ae:8c:8e:34:
         c2:4e:fd:1e:a4:4b:cd:e0:58:bc:37:c2:f9:0a:ca:45:84:82:
         97:a0:96:ba:69:26:71:8d:46:6c:93:a1:d9:cf:6e:57:6f:12:
         6b:9f:3a:9f:c5:78:62:88:12:3a:a1:18:fe:45:05:06:f9:f8:
         a1:c3:69:fc:ea:1c:ad:94:a1:63:b6:ce:87:d6:08:15:35:9a:
         56:e9:54:f4:4d:1f:d8:49:98:ac:00:2d:e7:c0:59:2c:17:30:
         51:6a:47:ac:54:86:20:8c:75:34:e3:8b:2b:94:f6:41:2f:b1:
         d6:9f:42:52:8e:7b:37:1f:c3:7c:1a:75:f0:8a:94:5a:f6:21:
         ce:71:70:6e:3e:94:e2:2c:62:62:e5:6d:c4:f0:28:70:28:9d:
         34:54:dd:29:9c:01:02:85:4a:66:3f:75:e5:16:05:ec:f3:8d:
         48:11:52:a2
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUdOayODP7Iqr9wUEEHyBcz+TafBwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjAxMTQxMTMzMTZaFw0yNzAxMTMxMTM4MTZaMDMxMTAvBgNV
BAMTKEVEODg0NjdCM0E0RjJGMzk2NjM4RTEzNTU5N0U4REE5QUM3RjYzQkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGZkRDCHRG6DwuHun6YJioMPmM
AoP7GhYtdN0dKWpT/kk12OaJiqb/WQ6JkCzWE4srulObvsE6s3vPkBKxcXotUh9g
vk2ks6LqWNpPCJXzib+A/8lD96An89+d243xgbElTyUbScj/UP0S8jxYaORxVr7d
5xsXAUOnFcXuTs3qgklipa7RJ2yLVKG5KM9QJpJt9BqQiSeLEBDMQLyy3GNcZTCJ
GrQ7gJZ/IZ/NtTh6nTevMuQfEG+C1cEvqN3kGfdDz9MH5bpGHEjE3y7MSlCE2ALW
HZLQ8XAuPeKfkTmVac4EzCfLbu+4NDUBH7oxu4OP7dfiOrErIdSUisXlDhB5AgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQU7YhGezpPLzlmOOE1WX6Nqax/Y74wHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTNTk2NDIucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABSHWow
DQYJKoZIhvcNAQELBQADggEBAJhAST9YAGGjQgQPTRJG6Ai7ZNFiav9mzUVzY+JD
PlxDxacrHugubX1NGf69ARjnJSJnLBqrWAxzWtfJcw2XQYmhqu0BsRStD24AQlVY
v5Y2e4sTaKWoroyONMJO/R6kS83gWLw3wvkKykWEgpeglrppJnGNRmyTodnPbldv
EmufOp/FeGKIEjqhGP5FBQb5+KHDafzqHK2UoWO2zofWCBU1mlbpVPRNH9hJmKwA
LefAWSwXMFFqR6xUhiCMdTTjiyuU9kEvsdafQlKOezcfw3wadfCKlFr2Ic5xcG4+
lOIsYmLlbcTwKHAonTRU3SmcAQKFSmY/deUWBezzjUgRUqI=
-----END CERTIFICATE-----
Generated at Sun Jan 25 12:30:34 2026 by rpki-client