This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS834.roa
File:                     AS834.roa (raw, json)
Hash identifier:          99iGbzuB5CgaiSOCDjn+5TAgF7e4oYGx2YhxH9vVAaY=
Subject key identifier:   EF:72:B5:B6:A0:D5:AE:C3:19:67:5A:6E:3D:58:EC:6F:C8:5F:F7:89
Certificate issuer:       /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Certificate serial:       6B43E9D6977659FC601AB07A133CCE95FA234CE7
Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS834.roa
Signing time:             Mon 15 Dec 2025 08:42:46 +0000
ROA not before:           Mon 15 Dec 2025 08:37:46 +0000
ROA not after:            Mon 14 Dec 2026 08:42:46 +0000
asID:                     834
IP address blocks:        62.182.32.0/23 maxlen: 24
                          62.182.34.0/23 maxlen: 24
                          188.119.70.0/24 maxlen: 24
                          193.32.186.0/24 maxlen: 24
                          193.187.111.0/24 maxlen: 24
                          194.93.51.0/24 maxlen: 24
                          212.115.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Dec 2025 11:19:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:43:e9:d6:97:76:59:fc:60:1a:b0:7a:13:3c:ce:95:fa:23:4c:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
        Validity
            Not Before: Dec 15 08:37:46 2025 GMT
            Not After : Dec 14 08:42:46 2026 GMT
        Subject: CN=EF72B5B6A0D5AEC319675A6E3D58EC6FC85FF789
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:f4:4d:1a:a1:62:f5:34:8e:3a:d8:13:b9:23:
                    bc:67:80:ca:88:3d:71:61:2c:00:ad:9f:ea:91:9b:
                    5f:10:17:b0:f4:87:00:72:18:b6:ce:aa:d0:94:4c:
                    ed:2f:f6:16:a4:52:e9:54:ef:6e:99:98:d5:bc:28:
                    ec:bc:53:55:23:88:2f:b9:56:47:22:d1:86:5f:60:
                    63:9b:a2:a0:ee:e8:ef:17:b0:b5:af:6e:d3:b3:a4:
                    07:e4:d2:87:f0:e5:d1:40:0b:d5:95:b6:13:52:4c:
                    27:27:ee:9c:98:91:08:54:b7:83:8b:e4:11:9a:a6:
                    10:18:64:58:21:70:cb:49:6c:f7:c3:ca:e4:91:51:
                    d6:09:99:30:6b:ca:e4:66:a3:c1:02:a0:ce:e2:1c:
                    fe:1c:e2:6b:c4:bf:f6:83:9e:81:d8:ab:59:8c:e1:
                    12:09:f0:cd:95:0f:bf:e1:1f:fe:b7:2c:e7:46:69:
                    53:4e:f3:70:39:30:42:aa:a1:60:28:d9:81:77:24:
                    4d:1d:97:39:03:17:ef:b2:49:28:97:ba:04:8c:aa:
                    e9:22:aa:56:47:26:cf:a5:d0:58:8b:cf:4d:b6:dd:
                    0d:a6:60:c9:e2:6a:1a:8f:e9:03:dc:c5:76:c5:c9:
                    59:5b:cb:ab:b7:33:6f:a2:34:95:63:cf:63:16:61:
                    ef:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:72:B5:B6:A0:D5:AE:C3:19:67:5A:6E:3D:58:EC:6F:C8:5F:F7:89
            X509v3 Authority Key Identifier:
                keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.182.32.0/22
                  188.119.70.0/24
                  193.32.186.0/24
                  193.187.111.0/24
                  194.93.51.0/24
                  212.115.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:91:53:99:55:be:42:91:7a:ed:c4:7e:4e:1e:31:fe:be:38:
         e9:29:d7:0d:68:ea:73:bc:68:84:3b:0d:e8:89:99:18:8d:0e:
         5a:b6:7d:a6:f1:c9:ff:2e:6e:43:59:aa:21:61:12:41:e3:b2:
         a3:c8:04:af:31:96:f9:23:60:92:13:78:ca:75:28:de:05:6b:
         b2:83:9b:99:13:4b:e5:0b:35:52:c6:25:0a:ef:52:71:d9:c5:
         e8:76:59:ff:a4:f0:12:66:cc:0e:29:b6:c7:3e:c4:2c:1f:96:
         31:b3:d1:6c:ea:c4:5c:2e:8e:c4:05:fa:2f:03:fd:06:9c:2c:
         6d:90:aa:d7:10:52:28:22:a3:96:af:be:a4:ab:7f:f6:d0:59:
         a2:84:6e:3d:4c:03:db:a8:4c:87:55:f3:dd:f0:cd:4d:89:14:
         cd:b5:08:af:45:8b:0f:7b:45:07:22:d0:5c:a9:1a:79:c5:6f:
         f5:89:18:87:f6:75:e2:39:72:4f:65:40:a5:98:18:3b:61:23:
         47:c3:de:ae:62:df:ef:cc:1b:bb:ff:43:eb:23:70:7d:30:e8:
         98:4b:fc:07:94:ed:7a:d1:41:ee:24:8a:72:8d:03:7b:f7:a9:
         7d:28:1d:3e:4b:c8:e4:14:86:63:eb:32:35:47:d1:8f:25:ec:
         98:72:81:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 20:17:24 2025 by rpki-client