This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS54339.roa
File:                     AS54339.roa (raw, json)
Hash identifier:          pbW6r30faO+DklkW+mKcfxSo1xUTPlQHvDsmlRm13n8=
Subject key identifier:   80:8C:57:40:16:35:0B:9E:31:00:2A:CA:74:8F:47:4C:8D:DC:09:98
Certificate issuer:       /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial:       38277BB8194AA9043518C488030ABECD546A2152
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS54339.roa
Signing time:             Mon 17 Nov 2025 00:05:57 +0000
ROA not before:           Mon 17 Nov 2025 00:00:57 +0000
ROA not after:            Mon 16 Nov 2026 00:05:57 +0000
asID:                     54339
IP address blocks:        46.203.107.0/24 maxlen: 24
                          46.203.114.0/24 maxlen: 24
                          46.203.145.0/24 maxlen: 24
                          46.203.146.0/24 maxlen: 24
                          46.203.168.0/24 maxlen: 24
                          46.203.169.0/24 maxlen: 24
                          46.203.171.0/24 maxlen: 24
                          46.203.174.0/24 maxlen: 24
                          46.203.177.0/24 maxlen: 24
                          46.203.179.0/24 maxlen: 24
                          46.203.199.0/24 maxlen: 24
                          46.203.235.0/24 maxlen: 24
                          92.112.6.0/24 maxlen: 24
                          92.112.7.0/24 maxlen: 24
                          92.112.8.0/24 maxlen: 24
                          92.112.36.0/24 maxlen: 24
                          92.112.38.0/24 maxlen: 24
                          92.112.55.0/24 maxlen: 24
                          92.112.89.0/24 maxlen: 24
                          92.112.142.0/24 maxlen: 24
                          92.113.4.0/24 maxlen: 24
                          92.113.6.0/24 maxlen: 24
                          92.113.9.0/24 maxlen: 24
                          92.113.15.0/24 maxlen: 24
                          92.113.40.0/24 maxlen: 24
                          92.113.56.0/24 maxlen: 24
                          92.113.57.0/24 maxlen: 24
                          92.113.58.0/24 maxlen: 24
                          92.113.59.0/24 maxlen: 24
                          92.113.169.0/24 maxlen: 24
                          92.113.247.0/24 maxlen: 24
                          95.134.184.0/24 maxlen: 24
                          95.134.206.0/24 maxlen: 24
                          95.134.221.0/24 maxlen: 24
                          95.134.223.0/24 maxlen: 24
                          95.135.72.0/24 maxlen: 24
                          178.92.44.0/24 maxlen: 24
                          178.93.117.0/24 maxlen: 24
                          178.93.121.0/24 maxlen: 24
                          178.94.168.0/24 maxlen: 24
                          178.94.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Dec 2025 10:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:27:7b:b8:19:4a:a9:04:35:18:c4:88:03:0a:be:cd:54:6a:21:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
        Validity
            Not Before: Nov 17 00:00:57 2025 GMT
            Not After : Nov 16 00:05:57 2026 GMT
        Subject: CN=808C574016350B9E31002ACA748F474C8DDC0998
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e4:cb:1a:b3:57:25:fd:d8:c8:89:8f:c0:c4:
                    92:68:1b:82:3a:51:15:79:e4:f0:08:75:25:47:09:
                    05:b0:cc:a2:e1:59:6e:00:66:83:61:84:47:ee:b8:
                    a2:b2:e5:fc:ac:f9:10:0c:3b:07:99:74:5e:c9:76:
                    ef:5c:11:f7:b2:69:fb:15:d8:20:0b:6d:12:7f:f2:
                    6e:cc:6f:11:ba:16:e0:a9:1d:bc:92:73:65:0a:a5:
                    8c:24:64:42:1b:8b:f5:60:c5:24:dc:d6:ee:49:b3:
                    24:fc:44:cf:df:5a:8a:0b:ea:83:d8:f6:c9:b7:37:
                    66:34:be:c2:44:46:39:94:01:ad:1c:45:34:88:e2:
                    b2:07:25:fc:eb:4d:80:2c:ac:a9:a3:6f:d8:e6:93:
                    5f:80:97:54:ee:0c:67:95:56:48:ff:be:2c:a8:86:
                    f0:9c:a9:07:04:e8:c5:0e:83:cd:2f:27:ed:06:78:
                    63:6d:f6:6b:2b:c3:aa:24:68:a4:4c:1e:82:e7:cd:
                    dc:a4:8d:39:f5:40:dc:8b:90:d2:cf:43:0a:58:16:
                    fb:3d:49:ac:69:1a:ad:38:a3:5c:e5:be:93:f6:6c:
                    0d:75:f6:e6:b1:ad:8d:e9:bb:5e:39:82:12:94:5b:
                    e2:9b:f9:3b:97:ce:39:e9:d5:cd:ca:76:c6:77:dd:
                    ef:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:8C:57:40:16:35:0B:9E:31:00:2A:CA:74:8F:47:4C:8D:DC:09:98
            X509v3 Authority Key Identifier:
                keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS54339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.203.107.0/24
                  46.203.114.0/24
                  46.203.145.0-46.203.146.255
                  46.203.168.0/23
                  46.203.171.0/24
                  46.203.174.0/24
                  46.203.177.0/24
                  46.203.179.0/24
                  46.203.199.0/24
                  46.203.235.0/24
                  92.112.6.0-92.112.8.255
                  92.112.36.0/24
                  92.112.38.0/24
                  92.112.55.0/24
                  92.112.89.0/24
                  92.112.142.0/24
                  92.113.4.0/24
                  92.113.6.0/24
                  92.113.9.0/24
                  92.113.15.0/24
                  92.113.40.0/24
                  92.113.56.0/22
                  92.113.169.0/24
                  92.113.247.0/24
                  95.134.184.0/24
                  95.134.206.0/24
                  95.134.221.0/24
                  95.134.223.0/24
                  95.135.72.0/24
                  178.92.44.0/24
                  178.93.117.0/24
                  178.93.121.0/24
                  178.94.168.0/24
                  178.94.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:72:41:74:e8:b7:eb:ba:9a:2c:b9:bc:3b:3f:35:7e:f4:c1:
         c6:ee:99:e3:3f:fd:bf:c3:10:bd:ae:69:06:23:e7:e5:c2:fe:
         15:10:8f:c4:57:42:02:57:92:da:7a:9f:74:a5:1c:f6:df:b4:
         6b:4e:8c:24:ff:5f:84:78:b2:5d:8d:91:4f:61:a7:95:ef:68:
         a4:b6:9b:01:58:2b:6c:8e:12:56:55:45:43:d5:89:d9:b0:b5:
         7c:59:ac:28:64:39:34:b2:74:e7:4c:5e:b4:4e:56:1c:8f:51:
         01:5f:f3:c4:5f:1d:ea:16:db:46:b6:a1:09:83:52:79:6f:39:
         b2:e5:5f:98:14:a8:c1:18:4b:7e:9d:e9:20:8e:8b:a4:75:48:
         54:29:26:6a:b7:66:d8:56:96:c1:e3:c1:aa:cf:77:16:50:27:
         b7:e6:a0:7b:8b:78:70:9e:80:92:3f:ad:43:6b:32:b9:48:f0:
         5c:76:16:ab:9c:db:80:c5:13:a7:e6:4c:e5:a1:18:cc:d6:a0:
         13:b1:d4:d7:6e:4e:56:0c:a3:0f:24:68:88:3f:28:57:3f:71:
         9e:28:0a:29:66:65:ac:30:e5:45:bd:6c:0c:ae:49:7b:c8:75:
         79:82:f8:d2:d1:9b:be:e2:43:d5:fa:84:18:be:6e:f4:5f:08:
         74:d1:74:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 10 17:53:08 2025 by rpki-client