This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS214480.roa
File:                     AS214480.roa (raw, json)
Hash identifier:          U6HWUlHGQ/ALexzJU2wKa9e544JysibExaPGD1iBxck=
Subject key identifier:   F6:E5:53:E6:64:59:4A:16:81:98:3C:EB:32:B0:A8:3C:8B:A2:5D:7E
Certificate issuer:       /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial:       7DB980E3CFA3F1C2CC1357DF1D491473B9373195
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS214480.roa
Signing time:             Mon 08 Dec 2025 14:07:12 +0000
ROA not before:           Mon 08 Dec 2025 14:02:12 +0000
ROA not after:            Mon 07 Dec 2026 14:07:12 +0000
asID:                     214480
IP address blocks:        46.202.82.0/23 maxlen: 24
                          46.202.82.0/24 maxlen: 24
                          46.202.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Dec 2025 08:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:b9:80:e3:cf:a3:f1:c2:cc:13:57:df:1d:49:14:73:b9:37:31:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
        Validity
            Not Before: Dec  8 14:02:12 2025 GMT
            Not After : Dec  7 14:07:12 2026 GMT
        Subject: CN=F6E553E664594A1681983CEB32B0A83C8BA25D7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d8:66:82:d3:89:77:37:36:29:97:15:75:f4:
                    f5:3b:7a:22:5c:21:bb:e7:be:26:53:68:7f:4d:01:
                    ed:91:45:5d:b3:de:4e:44:bf:90:a3:7f:48:0e:41:
                    ac:6a:ff:14:e7:05:6a:d3:70:ea:c6:ea:54:8f:0f:
                    ce:49:91:5b:cb:b8:ab:1f:fd:df:63:8d:6d:dd:eb:
                    f2:e3:ed:3b:0a:cd:f2:94:6b:b6:6a:9a:ae:1c:73:
                    f4:5a:a0:ac:c6:65:d8:cd:27:af:41:c1:e9:5b:44:
                    03:e9:1b:2e:e6:bf:0d:aa:d8:e2:cc:56:66:95:25:
                    42:a7:71:e1:a9:9b:64:95:94:1f:36:85:1b:7e:69:
                    3e:1e:96:61:33:aa:4e:59:dd:b5:fe:6d:51:5a:78:
                    8d:c4:83:b2:27:0f:88:39:16:91:e7:6b:66:d4:a8:
                    57:ed:22:74:9d:ac:b6:06:83:8c:45:99:8a:58:e0:
                    df:63:2e:da:f2:ac:5f:11:6d:6d:0e:88:2f:74:ec:
                    ac:c7:8d:3c:5b:09:65:c2:6a:b9:fb:06:f0:19:77:
                    d2:06:d1:b1:29:42:cf:7f:85:55:3a:6f:79:1d:cf:
                    6f:2e:4c:26:bc:ef:4a:c1:f1:8d:8f:fe:31:45:89:
                    03:eb:57:dc:31:72:c7:38:4e:3c:6b:f6:9a:3f:a7:
                    e9:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:E5:53:E6:64:59:4A:16:81:98:3C:EB:32:B0:A8:3C:8B:A2:5D:7E
            X509v3 Authority Key Identifier:
                keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS214480.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.202.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         97:c6:d0:cc:70:31:9b:7c:39:d6:8f:5a:3f:45:47:99:1f:61:
         1c:23:b4:76:ad:44:8c:61:1b:24:30:f8:61:75:ec:c3:3b:60:
         0f:8a:d1:8e:40:7e:e1:eb:9d:34:7c:06:94:d5:de:7f:28:dc:
         f8:e4:8d:49:3e:d0:2e:3b:47:46:ec:53:a8:4a:f4:21:5b:94:
         e5:00:d5:27:d5:81:74:69:6f:51:b9:cc:d0:d4:87:d9:e8:f4:
         22:72:6d:c0:52:8b:c5:c6:dd:3e:2b:ad:73:15:6a:75:d0:23:
         71:e9:2f:9b:88:1e:76:85:c9:a0:a7:71:86:5c:85:60:23:af:
         e3:bd:42:2c:b8:d9:e9:5c:c3:35:bf:cf:63:af:e1:65:b7:10:
         f0:27:b6:60:68:c3:3e:73:52:a6:02:2d:3a:80:c7:3e:54:6e:
         94:1d:00:65:43:05:c7:f3:87:6b:86:ad:54:e4:88:f2:6d:64:
         ca:10:ef:ce:49:5a:ba:62:3f:c0:55:fa:5b:d0:18:db:42:41:
         49:dd:7a:cb:a5:b2:3b:73:84:f3:42:1b:22:71:78:e9:c9:e4:
         f2:47:6d:e1:aa:7e:a3:5d:85:4c:2e:46:39:e3:8b:eb:6e:90:
         0a:0d:75:c1:ff:cc:7e:42:70:ac:e0:58:2d:20:90:59:aa:f5:
         4e:35:18:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 00:25:22 2025 by rpki-client