This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS58061.roa
File:                     AS58061.roa (raw, json)
Hash identifier:          i4UWPJ5UM6aJgQyOdyEaMqRSdxXCtICzAvfA18XiKSY=
Subject key identifier:   18:32:7D:99:60:8A:28:9E:56:A1:9C:04:10:AF:5E:88:B3:C7:D0:20
Certificate issuer:       /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial:       64D06B02205BEB98F8925D89FD20280711DF01D8
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS58061.roa
Signing time:             Mon 08 Dec 2025 10:23:22 +0000
ROA not before:           Mon 08 Dec 2025 10:18:22 +0000
ROA not after:            Mon 07 Dec 2026 10:23:22 +0000
asID:                     58061
IP address blocks:        82.38.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 07:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:d0:6b:02:20:5b:eb:98:f8:92:5d:89:fd:20:28:07:11:df:01:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
        Validity
            Not Before: Dec  8 10:18:22 2025 GMT
            Not After : Dec  7 10:23:22 2026 GMT
        Subject: CN=18327D99608A289E56A19C0410AF5E88B3C7D020
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:4d:7a:b7:5d:f1:bb:59:05:c1:5f:bf:56:39:
                    8f:d7:a3:9c:7e:bc:b0:90:7b:45:78:30:3e:a6:57:
                    97:35:f1:66:54:83:c1:52:8e:54:96:c3:25:5f:43:
                    7a:96:d8:61:40:aa:b3:c3:27:4c:bf:bb:e2:be:26:
                    15:1e:c5:f4:da:96:5f:b5:b2:0e:16:4e:93:fc:82:
                    47:70:6e:58:86:2d:a4:8e:77:a4:3e:c6:fd:9f:46:
                    1b:8f:00:a2:08:9e:fa:a8:2b:d1:aa:e2:0a:9e:09:
                    63:b4:4a:ca:1f:00:c2:c4:7f:97:c8:30:71:74:71:
                    87:bc:b9:05:86:68:16:ce:7c:ab:8b:83:a1:29:ba:
                    53:6b:4f:9d:5e:22:8b:98:a1:80:92:aa:79:2d:06:
                    e3:86:aa:48:3d:ad:38:b6:09:65:fc:42:8c:1d:5a:
                    7a:f0:8f:8c:d3:65:0a:41:0f:a8:44:68:47:68:7b:
                    67:38:7c:11:f0:8f:db:38:6d:93:e8:cb:0c:11:27:
                    d8:b6:0b:50:b9:73:58:26:58:50:f3:58:46:91:ed:
                    3e:7f:8d:43:18:25:ac:e1:57:5f:36:0a:ab:aa:dc:
                    ae:66:14:58:82:da:d9:26:71:18:74:59:54:85:44:
                    38:f6:30:e4:ea:80:de:f3:49:83:b0:eb:fe:f1:7b:
                    fb:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:32:7D:99:60:8A:28:9E:56:A1:9C:04:10:AF:5E:88:B3:C7:D0:20
            X509v3 Authority Key Identifier:
                keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS58061.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.38.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:bc:b4:0b:33:e4:36:c3:00:a8:e0:2f:5c:33:34:b9:e8:db:
         93:85:3a:63:8d:b6:9d:05:71:f9:80:29:bc:74:1c:27:8a:06:
         4c:e6:4d:b4:4f:20:60:30:6b:49:91:f9:08:c0:19:fd:d5:09:
         d6:37:58:72:63:46:a8:45:9b:0a:ec:9b:e0:ce:40:01:5c:bd:
         ee:e5:13:b6:97:1d:1d:1b:2a:08:49:eb:ba:19:cc:80:fb:4a:
         f4:46:ec:4f:31:8c:f2:c4:c0:3c:63:49:fd:6c:95:b8:51:a1:
         6d:ee:2d:3a:49:b2:87:85:ca:90:ea:1a:fa:a5:d2:13:14:52:
         2d:45:4e:af:20:eb:c3:a1:ab:94:e0:79:8c:19:b4:84:31:67:
         ab:31:c6:fb:c7:ba:fa:03:5b:da:a9:7e:a9:4a:67:f2:2f:c6:
         5b:1c:9e:a9:04:96:2d:f3:b7:d5:d8:19:63:42:89:d8:ca:10:
         83:0a:e7:a2:64:e2:31:bf:5c:52:ae:0c:6e:75:9d:e9:b7:a0:
         fd:37:2a:3a:5e:0c:dc:a8:28:a1:00:86:99:43:10:fc:20:88:
         34:06:26:f7:12:15:c1:3e:3c:a7:7c:48:d5:2a:e9:64:f0:5e:
         f7:b3:b1:f0:50:b2:db:6c:db:aa:c0:8e:56:c6:3a:e9:39:00:
         e0:05:44:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 15:41:53 2025 by rpki-client