This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS64267.roa
File:                     AS64267.roa (raw, json)
Hash identifier:          n/mHYeuMYxK/0H5fmihbpa6kMNb3Xf2FN25AFawd+dg=
Subject key identifier:   1B:6F:21:34:73:E0:4A:27:F9:81:67:2C:5D:7B:94:08:9B:3E:11:69
Certificate issuer:       /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial:       683A32E3ABF9DFD212C9C09F85FCC9413FF1374D
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS64267.roa
Signing time:             Mon 15 Dec 2025 00:07:23 +0000
ROA not before:           Mon 15 Dec 2025 00:02:23 +0000
ROA not after:            Mon 14 Dec 2026 00:07:23 +0000
asID:                     64267
IP address blocks:        91.124.36.0/24 maxlen: 24
                          92.112.141.0/24 maxlen: 24
                          92.112.144.0/24 maxlen: 24
                          92.113.215.0/24 maxlen: 24
                          95.135.183.0/24 maxlen: 24
                          178.92.246.0/24 maxlen: 24
                          178.93.30.0/24 maxlen: 24
                          178.94.149.0/24 maxlen: 24
                          178.95.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Dec 2025 08:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:3a:32:e3:ab:f9:df:d2:12:c9:c0:9f:85:fc:c9:41:3f:f1:37:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
        Validity
            Not Before: Dec 15 00:02:23 2025 GMT
            Not After : Dec 14 00:07:23 2026 GMT
        Subject: CN=1B6F213473E04A27F981672C5D7B94089B3E1169
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ce:b0:7b:c9:7f:ad:7a:b4:3e:01:7e:3b:0d:
                    42:df:b2:2b:f7:9c:c1:20:ed:60:c1:02:c0:97:cf:
                    6b:b3:68:66:94:70:75:6a:a1:18:df:04:ae:d2:cd:
                    d2:a9:1d:94:52:b4:ed:9a:a6:9e:78:1a:8f:12:55:
                    99:01:b7:55:d8:8e:e9:4e:f4:fc:cc:32:58:81:78:
                    90:43:c9:f1:47:30:84:d6:bc:72:29:91:fe:c2:b6:
                    e5:d7:3d:ec:a2:ca:63:60:26:fd:72:54:2f:16:59:
                    1c:63:8c:29:5d:48:60:97:33:83:3b:6e:1a:63:a7:
                    c8:f2:03:80:9a:eb:2a:63:d1:2f:f0:51:9e:76:12:
                    e0:85:55:ae:c1:b6:09:fc:69:7f:be:7f:10:31:4b:
                    0a:1a:10:14:22:99:09:33:df:5e:c2:31:09:94:a1:
                    1e:71:51:8b:e5:8b:05:83:90:7a:97:5b:41:a2:57:
                    47:96:26:12:9a:7f:33:c7:25:4b:a7:a4:f0:c9:97:
                    ba:39:7e:bb:9d:8e:9c:a7:a0:4d:2e:90:43:94:d3:
                    8d:5c:05:81:f5:b2:a2:a9:25:60:8a:61:cb:c6:9a:
                    03:ea:54:44:1a:b6:2b:08:e6:5d:5e:51:08:20:aa:
                    39:f2:fd:09:be:de:cd:6a:79:20:1e:03:8b:27:3d:
                    2c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:6F:21:34:73:E0:4A:27:F9:81:67:2C:5D:7B:94:08:9B:3E:11:69
            X509v3 Authority Key Identifier:
                keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS64267.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.124.36.0/24
                  92.112.141.0/24
                  92.112.144.0/24
                  92.113.215.0/24
                  95.135.183.0/24
                  178.92.246.0/24
                  178.93.30.0/24
                  178.94.149.0/24
                  178.95.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:9d:87:fb:07:5c:62:bc:7c:72:0e:5b:06:bc:5f:26:b3:95:
         97:94:da:4e:ac:2d:b2:c6:73:5f:e3:4f:e7:91:ab:6a:4b:ba:
         eb:11:8d:12:cd:ac:24:03:51:a2:b1:f3:fe:77:27:d7:85:94:
         18:b3:bb:c7:d8:c4:b6:68:d5:60:ff:0f:7b:ee:63:14:cc:b0:
         f0:4e:8d:a8:08:47:73:cc:30:0f:4b:64:36:0b:b0:86:86:6a:
         9b:84:52:51:20:6f:31:a3:bc:96:fe:1c:67:c1:bf:9b:3e:c5:
         68:38:d1:32:e5:87:06:7a:fc:37:dd:4c:c8:c7:6d:42:a3:4d:
         ae:d7:21:56:f4:2e:cf:13:19:de:4a:7b:5c:ac:3d:32:3c:fd:
         3f:e2:fe:91:4c:57:42:2f:7b:62:32:9f:ac:98:be:bb:17:90:
         bc:af:60:0b:4c:2b:a3:b2:e3:e7:9f:1c:48:ed:2a:8a:bf:4f:
         ef:1b:92:18:38:01:2e:c7:ae:dc:e6:7d:97:63:1d:d3:25:8c:
         68:55:0e:91:ec:d0:99:f5:69:f6:6a:60:78:3e:f5:97:54:7b:
         eb:31:b7:8b:b4:6f:62:4e:62:b6:49:c0:95:8e:cb:80:de:78:
         81:7c:66:4f:b4:b3:79:3c:d6:ad:05:34:9e:d3:bb:77:48:46:
         dd:d3:24:fd
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUaDoy46v539ISycCfhfzJQT/xN00wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNTEyMTUwMDAyMjNaFw0yNjEyMTQwMDA3MjNaMDMxMTAvBgNV
BAMTKDFCNkYyMTM0NzNFMDRBMjdGOTgxNjcyQzVEN0I5NDA4OUIzRTExNjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfzrB7yX+terQ+AX47DULfsiv3
nMEg7WDBAsCXz2uzaGaUcHVqoRjfBK7SzdKpHZRStO2app54Go8SVZkBt1XYjulO
9PzMMliBeJBDyfFHMITWvHIpkf7CtuXXPeyiymNgJv1yVC8WWRxjjCldSGCXM4M7
bhpjp8jyA4Ca6ypj0S/wUZ52EuCFVa7Btgn8aX++fxAxSwoaEBQimQkz317CMQmU
oR5xUYvliwWDkHqXW0GiV0eWJhKafzPHJUunpPDJl7o5frudjpynoE0ukEOU041c
BYH1sqKpJWCKYcvGmgPqVEQatisI5l1eUQggqjny/Qm+3s1qeSAeA4snPSwnAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUG28hNHPgSif5gWcsXXuUCJs+EWkwHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTNjQyNjcucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwTwYIKwYBBQUHAQcBAf8EQDA+MDwEAgABMDYDBABbfCQD
BABccI0DBABccJADBABccdcDBABfh7cDBACyXPYDBACyXR4DBACyXpUDBACyX+Ew
DQYJKoZIhvcNAQELBQADggEBAEqdh/sHXGK8fHIOWwa8XyazlZeU2k6sLbLGc1/j
T+eRq2pLuusRjRLNrCQDUaKx8/53J9eFlBizu8fYxLZo1WD/D3vuYxTMsPBOjagI
R3PMMA9LZDYLsIaGapuEUlEgbzGjvJb+HGfBv5s+xWg40TLlhwZ6/DfdTMjHbUKj
Ta7XIVb0Ls8TGd5Ke1ysPTI8/T/i/pFMV0Ive2Iyn6yYvrsXkLyvYAtMK6Oy4+ef
HEjtKoq/T+8bkhg4AS7HrtzmfZdjHdMljGhVDpHs0Jn1afZqYHg+9ZdUe+sxt4u0
b2JOYrZJwJWOy4DeeIF8Zk+0s3k81q0FNJ7Tu3dIRt3TJP0=
-----END CERTIFICATE-----
Generated at Tue Dec 16 22:30:41 2025 by rpki-client