This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS64267.roa
File:                     AS64267.roa (raw, json)
Hash identifier:          TguoHeop7m5z2NTZ2StQsJ36SdK7kOJX0C3yjpsFkT4=
Subject key identifier:   D1:DE:12:7C:ED:FC:45:25:C2:BA:DB:45:82:F8:09:1E:F2:3C:21:3B
Certificate issuer:       /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial:       6C18A218CAA96E69813B55FDC7177A1638AD0F93
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS64267.roa
Signing time:             Thu 15 Jan 2026 00:06:38 +0000
ROA not before:           Thu 15 Jan 2026 00:01:38 +0000
ROA not after:            Thu 14 Jan 2027 00:06:38 +0000
asID:                     64267
IP address blocks:        91.124.36.0/24 maxlen: 24
                          92.112.141.0/24 maxlen: 24
                          92.113.215.0/24 maxlen: 24
                          95.135.183.0/24 maxlen: 24
                          178.92.246.0/24 maxlen: 24
                          178.93.30.0/24 maxlen: 24
                          178.94.149.0/24 maxlen: 24
                          178.95.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:18:a2:18:ca:a9:6e:69:81:3b:55:fd:c7:17:7a:16:38:ad:0f:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
        Validity
            Not Before: Jan 15 00:01:38 2026 GMT
            Not After : Jan 14 00:06:38 2027 GMT
        Subject: CN=D1DE127CEDFC4525C2BADB4582F8091EF23C213B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:04:75:12:80:57:e6:76:7a:37:c6:c9:ee:14:
                    a2:2d:4b:f7:93:b0:f8:b5:e1:20:76:74:07:c2:91:
                    06:72:9d:f8:97:74:64:5d:46:ec:04:b0:19:f5:f5:
                    be:11:86:6f:e9:c2:a9:dc:d3:01:5b:bf:62:cf:93:
                    83:cf:1b:5d:a8:7d:b0:6d:0a:26:d4:a4:21:27:57:
                    f2:c0:ee:46:b5:20:c1:e0:10:27:d4:41:7a:99:c0:
                    b5:77:95:ae:4e:0b:90:b6:78:84:f8:7f:d4:51:99:
                    36:50:45:18:83:cb:89:f4:74:dc:b5:ea:7f:90:06:
                    0a:88:c2:1d:48:92:6b:00:90:d5:1b:95:a9:0c:bb:
                    3c:63:5c:1c:3d:8b:c5:50:40:1a:c0:19:86:6b:29:
                    8d:b8:bf:2e:15:ff:50:22:6b:21:81:01:6b:42:3b:
                    50:bd:64:4f:99:06:2b:9f:32:36:e3:c1:45:dd:bf:
                    35:74:f8:fe:45:c3:6c:05:a9:a3:c0:36:14:be:93:
                    c4:b2:92:0e:41:01:fc:85:d9:cc:3d:c2:a5:85:6d:
                    78:ba:f5:8f:68:38:4c:bd:95:2e:e0:d7:76:06:49:
                    56:d9:c7:1f:c5:6a:e4:39:63:dd:7b:c7:52:ef:c9:
                    05:a0:ba:ec:0c:8f:26:11:25:b7:9e:b7:e4:2a:64:
                    87:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:DE:12:7C:ED:FC:45:25:C2:BA:DB:45:82:F8:09:1E:F2:3C:21:3B
            X509v3 Authority Key Identifier:
                keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS64267.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.124.36.0/24
                  92.112.141.0/24
                  92.113.215.0/24
                  95.135.183.0/24
                  178.92.246.0/24
                  178.93.30.0/24
                  178.94.149.0/24
                  178.95.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:53:41:b8:b7:72:ec:dc:fa:25:47:19:be:06:16:35:e6:b4:
         0e:b0:cb:af:95:d5:71:55:b1:68:e1:92:ea:40:1e:e7:98:f0:
         d3:7a:f8:8f:ba:bc:2f:ba:c7:55:74:ac:a3:38:5d:16:42:83:
         d1:c6:f7:e3:7d:a9:2d:a1:8b:be:d6:2b:42:1e:a6:81:ec:6a:
         4b:db:cf:fa:c0:dd:93:3c:97:76:21:53:97:f4:49:96:a8:e9:
         12:a7:41:70:0a:09:3b:5d:2d:4c:ee:85:f1:0c:d5:fc:4f:29:
         07:90:34:cf:57:09:dc:66:48:b3:bc:2a:34:05:2a:ca:c5:63:
         28:52:e3:69:da:d7:c6:6f:f8:4c:13:1d:4e:57:aa:84:d9:2c:
         cb:3a:2c:ce:45:3e:0b:b0:4c:4c:de:e1:48:f4:37:33:4e:7b:
         cd:4b:94:74:69:37:0f:6d:00:ff:ae:2b:87:c5:70:37:ba:07:
         99:61:bf:9f:1a:6d:fc:d9:17:73:4c:7e:37:2f:5a:cc:2f:19:
         ff:ac:03:2a:ef:48:e4:e8:31:96:21:76:c6:8b:d9:23:9a:0a:
         eb:79:43:1a:2a:3f:ec:c8:bb:0b:62:2c:47:c0:c1:f4:5c:3c:
         60:7e:68:67:3a:bd:0f:11:c3:ac:13:f5:07:05:5f:8d:08:97:
         d5:c1:30:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:04:55 2026 by rpki-client