This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/3139332e33362e3136332e302f32342d3234203d3e20343031383338.roa
File:                     3139332e33362e3136332e302f32342d3234203d3e20343031383338.roa (raw, json)
Hash identifier:          9PcCN5Z7X2gVcaVQUXr2raOB0lHQ4JMiOIxpPegtNKs=
Subject key identifier:   6F:95:31:96:18:F6:60:AB:47:6A:18:4B:68:03:B7:5B:50:D2:66:AB
Certificate issuer:       /CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8
Certificate serial:       5F60AC3574E3A0759BDC99E165D8B0DA994F2EE4
Authority key identifier: 7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/3139332e33362e3136332e302f32342d3234203d3e20343031383338.roa
Signing time:             Wed 28 Jan 2026 13:00:51 +0000
ROA not before:           Wed 28 Jan 2026 12:55:51 +0000
ROA not after:            Wed 27 Jan 2027 13:00:51 +0000
asID:                     401838
IP address blocks:        193.36.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 07:28:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:60:ac:35:74:e3:a0:75:9b:dc:99:e1:65:d8:b0:da:99:4f:2e:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8
        Validity
            Not Before: Jan 28 12:55:51 2026 GMT
            Not After : Jan 27 13:00:51 2027 GMT
        Subject: CN=6F95319618F660AB476A184B6803B75B50D266AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2c:81:50:a3:ad:85:f9:ef:57:6f:fd:67:45:
                    e2:c7:99:29:13:4e:b4:dd:3d:a0:d1:41:2a:0d:9c:
                    2a:fb:57:00:e5:60:ba:59:49:e2:16:f0:72:3b:40:
                    17:72:bd:09:71:82:c4:7e:ae:c4:c0:3a:5d:96:9d:
                    16:bf:ba:4f:75:ce:2b:78:4e:33:50:20:2c:83:3b:
                    a1:29:ac:4a:aa:47:d4:ae:cd:0a:c5:d3:4a:b2:57:
                    18:69:2c:d0:59:66:de:4b:33:26:33:3f:e3:ac:9f:
                    13:b2:59:cd:68:5c:79:21:d9:b3:69:0f:96:73:2c:
                    c1:89:00:74:75:c9:48:f6:a4:d8:c1:bd:67:c6:c5:
                    0b:10:90:7e:c8:ce:7f:04:61:00:cb:e1:a1:06:b7:
                    ec:b7:c3:2a:fb:45:90:a5:7e:ec:38:e0:fe:4a:00:
                    24:5e:bf:3f:b7:fe:c9:e4:36:52:97:ce:a8:28:b8:
                    aa:8d:41:56:9e:7b:48:f3:f0:a8:91:27:a4:f1:35:
                    4c:58:a5:4e:75:b0:86:27:4d:8a:b7:7d:e7:54:87:
                    2d:12:9d:ca:b6:a9:f3:6f:99:76:91:a1:fb:22:13:
                    62:86:74:74:5a:63:c3:cd:d3:e5:07:d8:dc:6a:37:
                    05:5b:87:fd:58:57:03:6d:f5:f9:40:85:02:9b:3d:
                    bb:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:95:31:96:18:F6:60:AB:47:6A:18:4B:68:03:B7:5B:50:D2:66:AB
            X509v3 Authority Key Identifier:
                keyid:7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/3139332e33362e3136332e302f32342d3234203d3e20343031383338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.36.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:b7:fc:49:bb:b1:38:ca:fa:a3:b0:80:3d:04:c9:27:1a:50:
         f4:99:61:79:0f:d6:19:90:a9:f0:42:dc:d8:47:b8:df:fe:61:
         d7:9a:45:67:f9:97:8b:ca:4f:49:9d:e8:4b:57:40:cc:0f:54:
         0c:ee:5d:ef:55:ea:8c:bb:06:06:df:22:a7:eb:1b:2c:79:11:
         47:51:8b:4c:26:a4:99:59:40:ae:fe:05:bf:5d:8f:d0:b3:3c:
         5f:76:32:87:61:9d:20:a5:80:1a:4f:8c:59:4c:b3:cf:84:fc:
         ac:ea:21:5f:48:ed:11:a1:80:da:c8:94:f3:c9:2f:eb:15:76:
         fe:ec:27:d1:c4:d1:e0:7e:b4:fe:b3:00:c5:0c:a1:b4:e9:a5:
         e6:93:0a:20:8c:8f:4e:9a:e7:3c:c8:b2:c2:35:0a:c7:34:82:
         a6:ce:c0:ec:90:6d:cf:0f:d6:dd:b1:e8:c8:6a:54:c5:9f:13:
         72:88:c5:62:a8:96:67:1a:93:11:54:b0:42:ff:56:76:b3:33:
         a3:c2:b5:a1:c6:a3:a8:69:60:ae:09:2d:53:3d:75:8f:8a:52:
         c7:10:8b:51:64:ac:13:80:bb:88:e6:17:ad:00:18:89:bc:73:
         93:1b:4d:40:18:5c:50:bc:77:9f:7c:86:06:92:e6:5b:22:8c:
         1c:ff:90:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:00:24 2026 by rpki-client