This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS54252.roa
File:                     AS54252.roa (raw, json)
Hash identifier:          WnGviIXaLUt1nLBo2ZHCgpNo0NiBqUmAZg4F2m5RR64=
Subject key identifier:   8E:65:C1:4A:C9:6D:50:32:2B:F8:D6:52:73:59:C4:FF:21:AB:9F:7F
Certificate issuer:       /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial:       48AC7F65BEBD276298BDE932E416335599250E3C
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS54252.roa
Signing time:             Mon 15 Dec 2025 00:07:22 +0000
ROA not before:           Mon 15 Dec 2025 00:02:22 +0000
ROA not after:            Mon 14 Dec 2026 00:07:22 +0000
asID:                     54252
IP address blocks:        179.61.208.0/24 maxlen: 24
                          181.215.219.0/24 maxlen: 24
                          191.96.9.0/24 maxlen: 24
                          191.101.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 12:07:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:ac:7f:65:be:bd:27:62:98:bd:e9:32:e4:16:33:55:99:25:0e:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
        Validity
            Not Before: Dec 15 00:02:22 2025 GMT
            Not After : Dec 14 00:07:22 2026 GMT
        Subject: CN=8E65C14AC96D50322BF8D6527359C4FF21AB9F7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:44:84:c7:77:6e:b6:a0:67:a8:de:12:fc:5f:
                    0c:95:6e:90:5c:6b:53:6c:27:51:ec:77:ba:af:b2:
                    8d:ea:09:a4:c7:58:4b:a5:c6:64:43:46:3c:b7:12:
                    7e:cb:79:52:93:78:20:6c:07:d7:8e:73:82:32:a7:
                    19:8a:98:f3:96:8b:ea:fa:e4:4e:70:7e:87:2c:b9:
                    03:3a:48:df:e5:f1:0d:ac:d5:93:ad:ac:74:96:c2:
                    66:ef:12:3c:ea:ed:8b:f6:45:cb:10:74:42:87:fb:
                    14:a2:4f:d5:57:d3:09:3a:b2:ab:62:32:51:c6:ae:
                    86:bc:3a:99:b7:69:f7:0d:4d:fe:65:11:1f:81:5c:
                    90:66:36:07:45:19:51:7f:9f:67:60:8c:c9:b2:ae:
                    c2:9f:e8:5b:68:b6:42:f8:39:1c:50:0c:47:ff:4f:
                    75:3f:c6:75:4a:d6:d3:2e:62:5e:03:e4:d0:8a:98:
                    f6:ec:5b:45:0a:48:35:de:47:65:fc:e0:5f:8d:09:
                    66:d3:b2:47:39:2c:da:02:29:cc:9d:6d:61:4a:63:
                    e3:9e:45:d2:ae:5a:af:e7:74:4b:c0:d8:d0:45:28:
                    7f:83:ec:00:52:4c:16:8b:df:a3:e2:21:c8:90:b4:
                    b3:d3:93:37:c0:26:4e:5e:17:89:64:2c:81:32:45:
                    cc:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:65:C1:4A:C9:6D:50:32:2B:F8:D6:52:73:59:C4:FF:21:AB:9F:7F
            X509v3 Authority Key Identifier:
                keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS54252.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.61.208.0/24
                  181.215.219.0/24
                  191.96.9.0/24
                  191.101.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:95:ed:74:cc:08:8b:35:f4:3a:59:26:46:df:41:7b:01:85:
         d0:a3:2e:bf:61:3b:11:fb:1c:c9:f4:83:f2:76:19:4e:af:9e:
         e5:5c:06:1d:ca:40:a5:d8:d7:7e:8b:08:3f:df:24:4a:4b:25:
         19:e7:4a:8d:5f:5d:08:be:e2:b5:64:ce:8d:93:37:72:76:87:
         23:c6:60:d5:6d:b5:2a:87:27:02:dc:d8:3d:92:c0:32:55:18:
         38:00:f8:05:c1:98:93:4f:ce:10:02:36:0e:23:b6:54:c8:39:
         a0:c9:c6:ab:3c:5c:c1:03:da:2e:b1:5b:0f:09:3d:e3:ab:75:
         91:68:49:e7:b1:b4:80:32:29:67:d4:de:09:dc:c5:dd:46:d2:
         a9:42:0e:42:f9:34:1f:c4:b7:18:b2:6e:3e:22:11:e9:e0:b4:
         6c:4b:ff:21:6a:62:05:6d:92:81:be:f7:b9:1b:44:b7:ab:fd:
         66:92:ed:1c:80:89:80:b6:49:ae:ad:9e:ce:66:6f:46:f2:79:
         13:cc:48:5d:6e:b0:82:41:19:f3:4f:1d:4f:0d:5b:c6:57:b6:
         49:b8:2e:7e:47:c8:e5:0d:e1:f8:92:13:6e:ad:50:ae:4d:30:
         81:41:8a:75:8b:30:f3:0e:51:3c:40:83:61:0d:9a:dc:4d:82:
         88:b2:6b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 21:48:41 2025 by rpki-client