This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS141376.roa
File:                     AS141376.roa (raw, json)
Hash identifier:          oyRzqXMSeMioVMPEV+X9ZnECTTPNWJ7S3SnsmqVOEQI=
Subject key identifier:   91:51:D8:F0:14:AD:7D:E6:65:A9:B0:C6:45:B1:0D:D1:03:F4:20:DA
Certificate issuer:       /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial:       3F03E05F5C45C57EEF52FA7207683118F3E5B364
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS141376.roa
Signing time:             Thu 08 Jan 2026 12:39:52 +0000
ROA not before:           Thu 08 Jan 2026 12:34:52 +0000
ROA not after:            Thu 07 Jan 2027 12:39:52 +0000
asID:                     141376
IP address blocks:        155.117.2.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 00:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:03:e0:5f:5c:45:c5:7e:ef:52:fa:72:07:68:31:18:f3:e5:b3:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
        Validity
            Not Before: Jan  8 12:34:52 2026 GMT
            Not After : Jan  7 12:39:52 2027 GMT
        Subject: CN=9151D8F014AD7DE665A9B0C645B10DD103F420DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:6c:5e:ed:05:ad:09:1e:41:07:25:f6:6c:0f:
                    9a:22:0a:ff:7b:59:f0:55:dc:b2:a1:42:10:38:16:
                    07:fc:3d:ca:1e:bd:ed:6d:98:86:06:33:f1:39:15:
                    9b:7c:f9:b0:cf:e2:91:f6:f4:dd:5f:c4:fe:d4:ca:
                    d0:40:8f:78:cc:f4:f5:9c:f5:9e:b2:bb:fb:74:35:
                    9c:11:bd:30:37:73:05:3e:49:88:22:c4:19:15:c6:
                    fe:b9:c6:f9:64:cf:4e:54:5a:96:c8:38:11:5d:36:
                    66:e2:b5:fe:b5:6c:42:ec:9e:44:c2:5e:3f:39:aa:
                    c8:db:9e:7b:9c:52:4d:c4:73:80:5b:61:fc:01:ff:
                    46:52:e9:e1:88:91:9a:43:f4:76:70:4f:30:fc:37:
                    84:fc:77:77:92:e3:2f:94:86:a7:38:74:c8:a7:bd:
                    ab:c9:42:36:12:7a:ef:29:e8:2d:b4:fd:3d:d0:c3:
                    c3:e1:f2:5e:96:ef:cd:ed:f3:03:84:5f:28:83:d4:
                    a3:14:32:7d:41:0c:80:b1:be:4f:4f:13:be:70:56:
                    ec:65:f4:7e:94:f3:fb:79:34:70:69:18:ac:1e:57:
                    e7:94:dc:23:de:3f:db:68:60:28:95:bd:7e:ad:0d:
                    a9:03:65:79:9f:b1:c0:e2:e8:7a:d1:f8:47:96:15:
                    c7:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:51:D8:F0:14:AD:7D:E6:65:A9:B0:C6:45:B1:0D:D1:03:F4:20:DA
            X509v3 Authority Key Identifier:
                keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS141376.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.117.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         46:08:d1:80:82:21:b6:91:24:38:f6:bf:ae:2a:16:d6:bb:e2:
         f5:6d:d7:50:0b:54:e1:04:0c:62:ca:e5:6c:7d:03:b0:55:92:
         51:86:81:14:c3:53:a4:e8:2b:97:70:70:4d:f4:f5:b9:f8:76:
         3c:59:0a:f9:ea:19:1e:e6:60:35:85:d4:84:27:a2:e7:29:61:
         47:56:4b:fc:b4:e4:55:59:72:ef:43:48:3a:1c:43:2b:c0:eb:
         5b:4e:ad:38:b4:28:0c:1f:75:0a:09:23:a6:7f:ba:f8:42:9d:
         d0:69:8f:92:bd:a2:5f:02:66:5e:7b:70:9c:84:29:da:bb:7a:
         c6:8f:6e:e9:82:98:6d:25:c7:a4:be:aa:35:a0:46:e2:b1:24:
         4d:c5:40:d8:de:92:ed:91:40:f2:8e:61:9a:2f:bd:ed:c7:5c:
         94:9b:e0:71:72:3e:e9:54:30:85:32:48:8a:d0:64:59:db:05:
         4a:41:6a:10:f8:8a:69:79:99:4a:3a:e0:08:7d:50:b8:49:d3:
         72:40:91:a5:58:67:e8:51:3a:df:46:6c:f7:15:9b:c5:9e:89:
         ec:04:21:b4:af:6f:be:5b:ae:79:dc:ee:e6:9e:a2:f0:0b:11:
         0a:03:23:14:df:39:41:38:a0:fa:cf:c1:36:c3:01:41:ef:99:
         ae:a0:6c:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 08:14:27 2026 by rpki-client