This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/3139332e33362e3136322e302f32342d3234203d3e20323134303235.roa
File:                     3139332e33362e3136322e302f32342d3234203d3e20323134303235.roa (raw, json)
Hash identifier:          LZfNmHvc6428BQYagVIEmFkYSUX/HBpgmXeV1Iw5Y8A=
Subject key identifier:   1B:12:42:0B:77:15:6F:A2:98:33:0D:44:D0:2C:19:55:D0:B6:4B:54
Certificate issuer:       /CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8
Certificate serial:       3A8D64E124C2B93EB1223CC15F9A8289A3FA7459
Authority key identifier: 7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/3139332e33362e3136322e302f32342d3234203d3e20323134303235.roa
Signing time:             Wed 28 Jan 2026 13:00:53 +0000
ROA not before:           Wed 28 Jan 2026 12:55:53 +0000
ROA not after:            Wed 27 Jan 2027 13:00:53 +0000
asID:                     214025
IP address blocks:        193.36.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 07:28:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:8d:64:e1:24:c2:b9:3e:b1:22:3c:c1:5f:9a:82:89:a3:fa:74:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8
        Validity
            Not Before: Jan 28 12:55:53 2026 GMT
            Not After : Jan 27 13:00:53 2027 GMT
        Subject: CN=1B12420B77156FA298330D44D02C1955D0B64B54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:68:09:bc:86:0f:10:f8:1c:80:85:b9:d5:be:
                    bb:bf:e4:5a:df:a6:36:65:5b:9c:58:5b:a2:ed:a8:
                    12:db:4a:09:d7:d6:d4:9d:2e:18:2e:e7:8a:34:43:
                    e9:fa:e9:7f:19:b9:b4:0e:19:e7:5a:39:55:76:17:
                    61:67:d4:30:78:60:8b:e7:cb:11:63:9f:04:f3:b2:
                    b9:18:2c:5d:d1:61:ab:9b:08:73:a7:52:df:c7:39:
                    92:f4:a9:d1:4a:30:9f:dd:6d:72:4d:e2:55:45:fe:
                    af:a5:68:c7:a0:5a:87:5f:00:51:80:1a:31:c9:31:
                    ef:f2:da:2e:4b:36:65:6c:d8:a9:10:bc:d1:39:48:
                    2d:f3:54:0e:df:3e:01:33:79:91:fb:cd:71:d0:37:
                    04:76:8b:df:78:b5:c3:81:e2:11:60:2c:f0:af:46:
                    4b:8b:05:27:5d:12:5c:0a:b6:d5:cd:7e:36:f1:00:
                    0f:50:68:75:9c:25:04:8e:ed:de:00:97:55:80:05:
                    ab:7f:0c:cb:11:6d:bd:34:71:e9:40:d6:f8:8e:d8:
                    8c:44:cd:03:ba:99:dc:26:44:c1:85:67:c4:e8:01:
                    b8:c1:eb:e2:85:c5:95:f0:3d:57:71:f9:c9:f0:0f:
                    7a:d6:05:14:c2:d8:cd:93:57:01:14:ad:79:33:48:
                    bf:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:12:42:0B:77:15:6F:A2:98:33:0D:44:D0:2C:19:55:D0:B6:4B:54
            X509v3 Authority Key Identifier:
                keyid:7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/3139332e33362e3136322e302f32342d3234203d3e20323134303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.36.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d4:3e:f0:4b:c2:dc:e9:aa:85:01:dd:2f:3c:b6:82:76:2b:f1:
         b2:d3:f5:2e:2d:7a:df:43:89:81:f6:71:a1:a9:cb:07:f6:29:
         24:a6:dc:5e:09:6f:e5:94:c3:f7:2a:22:df:ed:3f:b9:ee:06:
         eb:54:d3:86:ce:b1:61:d5:0b:93:ce:6a:65:c6:16:6c:f5:c6:
         51:9f:f8:25:bc:ea:e6:da:d5:c4:c6:1d:26:79:80:56:18:b5:
         2c:1a:06:57:83:3c:20:b0:d5:e0:c1:30:e3:c2:11:93:a9:d0:
         5a:17:14:80:e3:7a:5a:ab:91:f9:08:96:1b:3a:82:3f:d7:3f:
         02:24:4e:6a:fb:5b:f6:7d:c6:11:cb:20:99:ec:83:2e:2d:ad:
         29:3b:70:91:1f:a9:8e:f7:f0:15:39:82:0e:60:ae:9e:ad:c4:
         eb:ed:0a:d9:9d:d5:23:74:60:3d:a9:19:64:c6:da:0e:17:8e:
         4b:2f:95:d7:d6:6d:7c:f9:5b:0b:ab:49:3b:89:17:bc:b9:19:
         1e:ea:4c:a7:22:1f:cb:52:ae:3a:06:2f:4a:2f:ea:2c:69:ad:
         bd:00:69:f9:01:d5:5c:3d:14:70:2b:74:42:6e:63:b8:24:f8:
         c1:d3:06:c5:65:6e:7a:43:b3:18:4c:b3:54:ab:d1:45:5c:70:
         7f:ae:d1:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:00:57 2026 by rpki-client