This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS214025.roa
File:                     AS214025.roa (raw, json)
Hash identifier:          08nVFXwFxhSRBmvCYo9xxJug6CH1sEWTXG31Oexmzj0=
Subject key identifier:   62:C3:EF:4E:D2:00:EB:7A:30:B9:A8:0B:CC:92:D5:A6:4F:23:EC:00
Certificate issuer:       /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial:       669CCEA6A84E729701B847BC92B0208D291ADF4F
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS214025.roa
Signing time:             Fri 23 Jan 2026 12:57:24 +0000
ROA not before:           Fri 23 Jan 2026 12:52:24 +0000
ROA not after:            Fri 22 Jan 2027 12:57:24 +0000
asID:                     214025
IP address blocks:        46.203.98.0/24 maxlen: 24
                          46.203.203.0/24 maxlen: 24
                          92.112.45.0/24 maxlen: 24
                          92.112.107.0/24 maxlen: 24
                          92.113.112.0/23 maxlen: 24
                          92.113.124.0/23 maxlen: 24
                          92.113.142.0/23 maxlen: 24
                          92.113.169.0/24 maxlen: 24
                          92.113.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:9c:ce:a6:a8:4e:72:97:01:b8:47:bc:92:b0:20:8d:29:1a:df:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
        Validity
            Not Before: Jan 23 12:52:24 2026 GMT
            Not After : Jan 22 12:57:24 2027 GMT
        Subject: CN=62C3EF4ED200EB7A30B9A80BCC92D5A64F23EC00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:5b:cf:79:fc:e2:08:dc:3b:f4:f6:e6:ee:d0:
                    45:71:ec:8f:a4:b1:f6:df:11:86:fe:ed:10:8a:f0:
                    9e:39:87:06:f0:4f:eb:53:75:1d:80:d7:b8:f1:3f:
                    b0:06:21:61:d2:98:8d:96:df:05:04:70:ea:42:2b:
                    27:a7:2c:0e:b1:66:1e:af:28:aa:ec:a3:3f:39:fe:
                    d7:e6:fc:81:a2:5e:55:a2:ff:cb:09:65:04:47:ed:
                    cd:2c:13:7a:62:0f:11:65:a0:fa:a3:a5:76:f4:9a:
                    2e:ac:32:33:b2:34:bd:7c:1e:67:9c:4f:aa:7e:48:
                    5d:9e:f1:4b:5e:3d:06:fa:51:86:c6:a0:0b:18:af:
                    de:76:f3:58:1f:6a:7e:17:51:a6:96:66:60:7d:d8:
                    a7:a3:a9:91:b6:3f:94:d6:42:54:30:67:fd:be:bf:
                    68:4a:69:f2:e1:1c:22:e8:58:dc:df:14:87:3d:fe:
                    a6:18:dc:ad:40:a8:d6:c6:38:1f:64:aa:23:96:48:
                    13:c6:41:c6:91:08:cd:17:7f:41:7c:35:e1:e9:d0:
                    2a:a6:d5:54:9e:19:aa:fa:ca:d4:bf:4e:58:dd:3b:
                    d5:d9:67:18:f6:82:43:9d:7d:81:45:b2:f3:a9:35:
                    c8:06:38:fd:2c:08:91:df:9b:b1:d5:da:1d:36:41:
                    d7:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:C3:EF:4E:D2:00:EB:7A:30:B9:A8:0B:CC:92:D5:A6:4F:23:EC:00
            X509v3 Authority Key Identifier:
                keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS214025.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.203.98.0/24
                  46.203.203.0/24
                  92.112.45.0/24
                  92.112.107.0/24
                  92.113.112.0/23
                  92.113.124.0/23
                  92.113.142.0/23
                  92.113.169.0/24
                  92.113.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:64:e4:de:f6:1a:b2:f1:a2:6f:77:c6:aa:d3:8a:15:57:d4:
         cd:bb:eb:ae:c9:23:92:b5:ad:50:26:ce:de:23:b1:02:91:9e:
         5c:20:6e:15:2b:c0:c5:8a:d6:1f:81:86:e2:86:16:f0:cf:50:
         26:34:39:38:db:79:1e:ae:e2:ee:15:32:66:ca:cb:a7:a8:0e:
         48:ba:0c:70:81:89:c2:b7:c0:4a:7b:50:ff:1a:db:10:b7:55:
         4f:33:7b:8f:61:a4:52:a7:17:f4:e0:03:a4:54:1f:f4:99:95:
         28:34:b4:4d:34:1f:a4:ed:bb:6d:fc:3f:41:17:99:aa:d1:b8:
         85:a7:fe:11:14:5c:86:70:60:6f:27:fd:0c:65:0c:0b:b7:39:
         19:04:76:62:48:fa:39:7b:78:38:f3:36:af:13:38:53:d0:70:
         67:36:0c:02:29:02:dd:5a:95:be:b7:b3:33:7a:a9:38:3b:c7:
         90:0b:38:2e:e1:78:0b:0c:7c:78:10:a2:a2:39:cf:e0:96:e2:
         da:b1:30:36:03:c0:5f:34:18:1c:06:fc:87:ef:ea:ab:9e:21:
         37:ad:74:0d:d1:9b:d6:c4:5c:02:92:72:24:86:6d:64:77:e4:
         96:19:fd:db:75:b7:61:e6:83:63:8d:27:28:c6:c6:f8:c3:d4:
         31:2e:a9:d2
-----BEGIN CERTIFICATE-----
MIIFMDCCBBigAwIBAgIUZpzOpqhOcpcBuEe8krAgjSka308wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNjAxMjMxMjUyMjRaFw0yNzAxMjIxMjU3MjRaMDMxMTAvBgNV
BAMTKDYyQzNFRjRFRDIwMEVCN0EzMEI5QTgwQkNDOTJENUE2NEYyM0VDMDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbW895/OII3Dv09ubu0EVx7I+k
sfbfEYb+7RCK8J45hwbwT+tTdR2A17jxP7AGIWHSmI2W3wUEcOpCKyenLA6xZh6v
KKrsoz85/tfm/IGiXlWi/8sJZQRH7c0sE3piDxFloPqjpXb0mi6sMjOyNL18Hmec
T6p+SF2e8UtePQb6UYbGoAsYr95281gfan4XUaaWZmB92KejqZG2P5TWQlQwZ/2+
v2hKafLhHCLoWNzfFIc9/qYY3K1AqNbGOB9kqiOWSBPGQcaRCM0Xf0F8NeHp0Cqm
1VSeGar6ytS/TljdO9XZZxj2gkOdfYFFsvOpNcgGOP0sCJHfm7HV2h02QdfnAgMB
AAGjggI6MIICNjAdBgNVHQ4EFgQUYsPvTtIA63owuagLzJLVpk8j7AAwHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMjE0MDI1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQALsti
AwQALsvLAwQAXHAtAwQAXHBrAwQBXHFwAwQBXHF8AwQBXHGOAwQAXHGpAwQAXHGr
MA0GCSqGSIb3DQEBCwUAA4IBAQA9ZOTe9hqy8aJvd8aq04oVV9TNu+uuySOSta1Q
Js7eI7ECkZ5cIG4VK8DFitYfgYbihhbwz1AmNDk423keruLuFTJmysunqA5Iugxw
gYnCt8BKe1D/GtsQt1VPM3uPYaRSpxf04AOkVB/0mZUoNLRNNB+k7btt/D9BF5mq
0biFp/4RFFyGcGBvJ/0MZQwLtzkZBHZiSPo5e3g48zavEzhT0HBnNgwCKQLdWpW+
t7Mzeqk4O8eQCzgu4XgLDHx4EKKiOc/gluLasTA2A8BfNBgcBvyH7+qrniE3rXQN
0ZvWxFwCknIkhm1kd+SWGf3bdbdh5oNjjScoxsb4w9QxLqnS
-----END CERTIFICATE-----
Generated at Mon Jan 26 07:26:20 2026 by rpki-client