This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/34362e3138332e32392e302f32342d3234203d3e20383334.roa
File:                     34362e3138332e32392e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          cCNMl/j8O4+QWokqGu7uLfEk807f860f4W6iD80yDww=
Subject key identifier:   47:4D:6B:2B:1F:5E:39:76:2A:D1:28:B1:4B:FE:23:01:A9:90:52:73
Certificate issuer:       /CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00
Certificate serial:       785C3B203EFE152F953EB18738B1D13E5E3B1DA4
Authority key identifier: 24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/34362e3138332e32392e302f32342d3234203d3e20383334.roa
Signing time:             Tue 27 Jan 2026 04:43:55 +0000
ROA not before:           Tue 27 Jan 2026 04:38:55 +0000
ROA not after:            Tue 26 Jan 2027 04:43:55 +0000
asID:                     834
IP address blocks:        46.183.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 30 Jan 2026 12:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:5c:3b:20:3e:fe:15:2f:95:3e:b1:87:38:b1:d1:3e:5e:3b:1d:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00
        Validity
            Not Before: Jan 27 04:38:55 2026 GMT
            Not After : Jan 26 04:43:55 2027 GMT
        Subject: CN=474D6B2B1F5E39762AD128B14BFE2301A9905273
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:4a:4d:13:e5:dd:9e:b9:02:9e:f3:a8:6c:a1:
                    57:94:27:b3:ab:a5:79:d6:7c:02:71:96:f8:3b:eb:
                    43:ad:7c:4a:f3:4f:0b:cb:fb:66:91:59:9f:2e:6a:
                    ff:74:12:a5:cc:9e:00:c2:a5:59:1a:32:14:bc:ca:
                    3a:f3:89:d7:25:e0:fa:cc:a6:8b:b0:a4:65:9c:f6:
                    fa:71:7b:7a:27:ec:58:59:f0:db:66:0e:25:22:97:
                    de:a9:7b:f5:6a:70:8d:15:f4:d2:86:d1:d2:96:94:
                    ce:90:2e:45:c0:90:f5:db:e3:03:a6:e5:f5:22:00:
                    5d:59:b1:5e:d8:e3:85:01:59:80:0b:e0:da:02:b6:
                    db:66:db:49:33:cd:23:72:00:49:c6:88:90:52:9d:
                    97:14:c4:a8:3d:45:69:3a:94:b8:7e:85:12:7e:3d:
                    ce:a1:21:23:0b:c0:22:e0:0e:31:b6:42:14:d4:f4:
                    af:d0:82:d6:18:da:45:b3:f3:c3:8f:47:46:cb:5f:
                    ec:dd:85:09:d2:82:24:8d:db:c4:33:c0:11:51:09:
                    bb:ce:d1:b8:0f:15:d4:7d:ff:8b:75:4d:16:a8:df:
                    a1:c0:a5:66:7b:9c:b7:88:e8:e6:09:b7:00:08:09:
                    b0:03:26:35:99:52:b0:40:8b:8a:f7:1c:f5:8f:d1:
                    33:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:4D:6B:2B:1F:5E:39:76:2A:D1:28:B1:4B:FE:23:01:A9:90:52:73
            X509v3 Authority Key Identifier:
                keyid:24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/34362e3138332e32392e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.183.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:3d:10:40:73:1f:f3:1f:7e:d2:0e:8e:aa:5b:0d:7a:77:c3:
         f1:bb:85:a2:4c:3f:b9:8f:cb:74:8d:cb:c8:2f:39:43:2b:e7:
         ef:0d:e1:93:c9:c2:82:62:6f:60:e4:bd:64:b7:1d:c5:db:c2:
         1b:29:b8:80:5d:99:bd:28:21:7e:f2:8f:d0:7f:e2:5d:f2:06:
         19:2a:a6:34:fb:cf:32:e0:63:fb:ca:dd:14:5f:82:95:27:50:
         3d:7e:69:6b:e0:d2:ff:68:71:e2:89:ce:46:f2:5e:37:63:9e:
         76:e8:a8:2e:f2:9b:b3:40:ae:56:50:d7:55:a9:f8:89:76:0f:
         40:4d:8b:05:2a:08:13:89:1c:35:cf:7c:e3:f4:b2:29:d5:a2:
         87:3b:c4:eb:d4:93:4e:e1:4e:31:10:4d:90:e6:f8:1b:88:1d:
         d1:a3:bf:54:cf:b1:01:5b:4f:c5:8c:a4:30:54:f0:ce:c6:5a:
         d5:82:d4:67:67:bf:c1:df:c4:40:b9:18:d5:99:34:1c:95:df:
         bc:ad:46:13:bd:2d:72:03:c9:d0:6f:61:ae:bc:a5:93:a2:ef:
         22:ef:2f:c4:2e:8b:ea:c1:e3:1c:76:db:0b:df:a4:1a:b1:10:
         f0:31:77:0e:2f:72:47:ad:be:9c:b2:8c:c7:79:8f:ec:d1:6f:
         f8:82:82:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 21:00:48 2026 by rpki-client