This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e34352e302f32342d3234203d3e20383334.roa
File:                     352e3139392e34352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          E5GLSdhiOTT+P7OEBtz6F0ACrsVLFh/MHLQkxtnGLhw=
Subject key identifier:   FB:37:61:43:3D:FA:4F:96:A0:14:9C:5F:3F:C8:EC:32:A8:AF:54:D8
Certificate issuer:       /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial:       72F833F8842B20DFFD40ADFC7888FA0BF6325F42
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e34352e302f32342d3234203d3e20383334.roa
Signing time:             Fri 06 Feb 2026 04:14:21 +0000
ROA not before:           Fri 06 Feb 2026 04:09:21 +0000
ROA not after:            Fri 05 Feb 2027 04:14:21 +0000
asID:                     834
IP address blocks:        5.199.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Feb 2026 10:48:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:f8:33:f8:84:2b:20:df:fd:40:ad:fc:78:88:fa:0b:f6:32:5f:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
        Validity
            Not Before: Feb  6 04:09:21 2026 GMT
            Not After : Feb  5 04:14:21 2027 GMT
        Subject: CN=FB3761433DFA4F96A0149C5F3FC8EC32A8AF54D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a4:fb:c4:8d:c0:ed:ed:c3:f4:33:2d:23:29:
                    63:0a:be:82:c5:28:61:97:ea:75:01:ea:06:2b:5d:
                    0b:b6:0c:39:81:88:e6:48:4b:c7:00:2e:05:81:cd:
                    ec:a2:83:bb:8d:a2:70:80:6a:44:a8:6a:28:44:71:
                    a7:b9:8f:9a:08:d5:ed:3b:38:60:bc:93:52:b7:47:
                    6f:3f:85:18:01:bb:71:cd:74:d0:7a:b0:74:1f:37:
                    6b:22:2b:35:30:b2:d3:c4:91:59:ca:49:d3:e0:ab:
                    cf:01:35:f7:86:25:07:b4:a7:89:ca:60:19:43:ff:
                    bf:83:c5:0e:78:eb:b7:d6:7e:80:45:63:be:0e:a9:
                    68:75:0f:ed:64:db:f3:ac:1e:96:cf:83:84:a1:bb:
                    ee:37:74:64:a9:a6:d4:7f:3f:de:e9:97:a6:a6:bd:
                    af:d2:8d:62:91:ab:7b:71:b9:53:dc:b0:88:a4:65:
                    8b:5d:23:9e:cb:4f:98:8b:f0:d3:9e:39:c9:88:ec:
                    99:78:7a:a2:d0:d5:68:2b:0d:7c:7e:21:8c:a0:10:
                    08:a0:09:e1:72:69:9b:c2:ae:81:85:30:03:df:86:
                    54:f2:47:85:0e:9a:9b:e9:ac:44:fc:e8:3c:d1:23:
                    aa:8b:7f:7c:af:af:13:bb:4b:df:07:1a:f5:aa:30:
                    98:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:37:61:43:3D:FA:4F:96:A0:14:9C:5F:3F:C8:EC:32:A8:AF:54:D8
            X509v3 Authority Key Identifier:
                keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e34352e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.199.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:8d:d8:72:c4:58:c5:ec:ee:cf:b9:52:52:cb:f7:aa:1e:bd:
         4d:57:8f:fb:ee:88:e9:f0:77:c1:c7:51:d3:d9:fd:1e:35:b7:
         55:0b:24:1c:8e:7a:8a:9c:e7:e2:d5:9a:30:7c:71:6a:03:af:
         fc:9c:11:f0:40:4f:3b:ff:62:20:a8:0e:dd:96:82:d7:e1:70:
         ea:dd:b2:34:cc:bc:71:98:7c:86:f1:7c:04:cd:02:7a:47:44:
         a8:88:e5:f0:ba:cc:42:90:07:55:78:ad:4d:72:ef:58:7c:aa:
         a7:5b:41:ec:84:1a:23:2b:2f:af:9a:14:83:6e:25:15:00:31:
         e5:19:84:3e:b5:73:4f:b6:20:f8:ae:d4:8a:18:f9:cc:78:1b:
         50:ee:a8:e3:5a:9c:43:6b:3f:4f:0f:f5:63:89:11:bb:dd:4a:
         94:5e:d0:5f:17:fb:b7:a8:35:4c:60:a2:e3:a9:31:57:a6:78:
         71:30:36:dd:09:3b:ca:18:0c:16:71:17:ed:78:e8:96:0f:44:
         2f:d6:2c:d2:f4:e1:be:d2:32:ef:55:8f:0e:c7:28:df:86:07:
         1d:30:7f:b3:39:39:e5:75:ea:4d:76:e6:ea:cb:2a:af:1b:d5:
         04:5f:b8:41:75:52:7d:86:5d:d5:60:03:00:55:80:da:2c:61:
         cc:14:72:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 14 17:23:56 2026 by rpki-client