This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS211826.roa
File:                     AS211826.roa (raw, json)
Hash identifier:          uBSqfepwUwGsagqBY/eG96Qw4URm6sUpUsLTBG9ALaI=
Subject key identifier:   CD:C9:31:97:1D:61:C7:21:1C:FB:33:EF:A7:03:99:F7:54:F9:A0:82
Certificate issuer:       /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial:       79A2BF0EA67290AF192A725344A18B2A3C659A82
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS211826.roa
Signing time:             Mon 01 Dec 2025 21:55:12 +0000
ROA not before:           Mon 01 Dec 2025 21:50:12 +0000
ROA not after:            Mon 30 Nov 2026 21:55:12 +0000
asID:                     211826
IP address blocks:        45.153.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:a2:bf:0e:a6:72:90:af:19:2a:72:53:44:a1:8b:2a:3c:65:9a:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
        Validity
            Not Before: Dec  1 21:50:12 2025 GMT
            Not After : Nov 30 21:55:12 2026 GMT
        Subject: CN=CDC931971D61C7211CFB33EFA70399F754F9A082
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:12:ac:5e:a3:54:d0:fe:59:1e:f2:cb:11:51:
                    e0:c5:04:c4:b3:49:04:1e:17:ef:70:e6:22:b5:bb:
                    b8:20:eb:8d:d8:a8:8e:30:8c:d8:c7:51:b8:6b:16:
                    2d:84:cc:55:16:52:e3:27:0e:06:1d:96:df:a7:9d:
                    50:00:95:4d:7b:f3:fc:74:82:5d:63:58:81:90:0e:
                    4a:76:9f:f7:ee:19:f2:a0:1c:2e:36:d7:83:4f:15:
                    9a:86:35:bc:4e:d7:31:3f:f7:af:d5:b2:c0:9b:84:
                    82:31:89:9d:e1:f5:0b:aa:d7:e0:86:78:b1:ad:b3:
                    0d:af:65:ce:0f:85:3c:ee:dd:f7:85:80:a5:d6:fc:
                    93:4c:e5:b8:5c:0e:42:bb:bc:49:16:ef:b5:7c:7b:
                    2f:1a:ee:c9:7a:21:89:e7:81:fd:1f:b7:a1:74:fc:
                    c9:38:bb:05:e4:24:c7:57:74:7a:dc:6c:0d:7c:07:
                    40:0d:9c:e0:2f:7e:14:56:a5:8e:36:73:fa:f4:46:
                    ca:3b:9c:93:0d:28:e7:0e:a2:eb:7e:c2:ae:ae:fe:
                    08:b9:35:72:da:5a:82:d2:e8:79:7a:76:99:d7:c5:
                    74:41:68:22:a1:47:c6:bc:2d:f6:16:1c:d5:bf:49:
                    ff:71:67:89:dd:a2:0a:95:ab:02:a1:af:85:c1:a1:
                    f8:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:C9:31:97:1D:61:C7:21:1C:FB:33:EF:A7:03:99:F7:54:F9:A0:82
            X509v3 Authority Key Identifier:
                keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS211826.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.153.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:ae:6a:7e:d2:51:f4:c5:0e:e8:1a:87:f4:14:f0:fd:10:8d:
         63:45:28:ec:6f:ba:26:f0:df:f9:70:02:20:cf:35:0f:e1:e8:
         30:f6:2c:ee:fc:9a:bc:ab:31:b8:50:bf:2a:de:82:88:fb:14:
         1a:76:7b:03:4c:12:20:b6:77:50:32:c3:d5:75:e1:39:3b:28:
         a5:ad:2d:6b:98:c5:0e:6f:7e:48:6e:2b:ae:6c:42:fb:22:6a:
         49:d4:5f:63:ae:b1:be:a2:a9:d8:f8:81:85:a8:a3:f8:5b:58:
         2c:e7:fb:81:44:82:d8:09:fb:5e:14:82:66:ff:4a:8d:24:85:
         1a:95:4f:f5:66:80:76:eb:48:65:77:15:ad:27:23:06:a2:60:
         fd:77:74:e4:ff:de:0b:15:2d:8d:02:2f:f6:ab:03:2a:38:62:
         90:49:ce:9f:cd:5e:7e:b5:e3:31:07:5b:85:a6:12:b1:d8:ae:
         4f:60:85:a0:ff:31:49:6a:10:9a:66:55:1e:aa:a4:cf:41:be:
         11:bd:fb:4e:25:ea:65:8d:df:46:fc:92:3d:13:d4:c6:5f:e7:
         24:11:31:79:17:03:61:ca:25:94:aa:78:5f:9b:f5:72:f2:f3:
         32:6a:db:c9:db:08:c7:6b:ca:8e:1c:90:59:6c:df:7f:17:9e:
         74:a7:dd:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:37:57 2025 by rpki-client