This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/34362e3138332e33312e302f32342d3234203d3e20383334.roa
File:                     34362e3138332e33312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          sUL1Un4mrUIulXB1hFi4zMCmkeeullp5kTLJ3eXsXVI=
Subject key identifier:   EE:20:89:13:DD:25:DF:1B:E4:69:A1:CB:7B:55:48:50:CF:00:A6:A2
Certificate issuer:       /CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00
Certificate serial:       0EB2128E60BCCC2FDEF79716862620A373A21A47
Authority key identifier: 24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/34362e3138332e33312e302f32342d3234203d3e20383334.roa
Signing time:             Wed 11 Feb 2026 14:41:10 +0000
ROA not before:           Wed 11 Feb 2026 14:36:10 +0000
ROA not after:            Wed 10 Feb 2027 14:41:10 +0000
asID:                     834
IP address blocks:        46.183.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Feb 2026 01:48:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:b2:12:8e:60:bc:cc:2f:de:f7:97:16:86:26:20:a3:73:a2:1a:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00
        Validity
            Not Before: Feb 11 14:36:10 2026 GMT
            Not After : Feb 10 14:41:10 2027 GMT
        Subject: CN=EE208913DD25DF1BE469A1CB7B554850CF00A6A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:21:34:96:6b:d5:a4:57:4c:0e:72:34:00:cc:
                    d3:aa:b1:be:5d:6c:85:93:de:98:35:e4:da:09:36:
                    a9:03:db:b8:7f:59:b0:53:7b:a1:34:4f:81:13:71:
                    09:79:a9:dd:6b:e0:01:e3:65:ad:9f:87:01:8a:04:
                    2e:56:82:1a:cb:fd:75:89:e5:9e:7f:15:ab:69:a5:
                    2b:ae:3e:7b:e9:07:7a:70:1f:b6:5f:23:0e:80:3e:
                    b7:9a:b2:e1:05:be:03:a4:84:f0:3d:09:f6:9a:b7:
                    ba:70:35:fc:e5:99:5e:3c:2e:16:3e:df:6b:6d:b9:
                    02:ba:83:04:83:35:d0:f3:45:27:49:e0:f3:53:74:
                    c2:c3:85:a3:af:76:74:78:f0:11:45:b2:3a:2a:b4:
                    bc:a2:61:7e:de:76:65:3e:f7:f6:f9:57:5e:97:f5:
                    00:a6:d5:cb:46:30:38:64:5b:7e:56:e9:19:74:fb:
                    cc:de:dd:63:9f:43:56:fd:5c:ae:62:bd:fb:b4:52:
                    74:23:bb:0d:66:ec:7c:d0:b5:56:65:71:83:11:80:
                    fa:0d:f9:89:ff:f8:56:64:38:33:59:e9:51:88:ec:
                    80:aa:e2:77:a7:27:93:1d:49:52:c7:04:85:db:16:
                    f3:08:c0:31:6c:98:bf:b2:ce:ab:e7:64:f5:f2:78:
                    84:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:20:89:13:DD:25:DF:1B:E4:69:A1:CB:7B:55:48:50:CF:00:A6:A2
            X509v3 Authority Key Identifier:
                keyid:24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/34362e3138332e33312e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.183.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:1a:24:ba:0c:9a:c6:b9:2b:eb:6d:be:56:dc:54:ba:03:20:
         7c:7a:c6:12:64:05:96:5c:b9:6a:c0:9b:52:30:18:1c:2f:f4:
         4f:c8:70:f9:2d:86:63:37:8f:b2:28:d0:48:48:01:bf:36:a3:
         68:57:15:6b:7b:f4:98:45:b8:e9:87:9f:1f:77:6e:e4:bd:29:
         88:a0:dd:f0:7e:52:c2:5e:05:96:47:c8:a0:4b:39:7d:21:09:
         5b:08:8e:e7:95:3e:60:2e:85:e7:07:d8:0f:c6:45:70:31:7b:
         97:71:ee:b9:3e:aa:24:e1:74:39:55:18:78:92:b2:51:e0:5e:
         50:90:d0:d3:e1:f7:ee:f8:b6:d7:a0:e2:d1:25:0d:9a:76:09:
         4f:a7:57:3e:1a:da:22:97:cb:f2:e2:45:52:79:99:09:0e:a3:
         40:20:4d:54:6d:71:15:29:41:41:b7:b3:f2:90:3f:01:59:f1:
         3c:81:cc:30:b9:22:d0:39:4c:23:86:97:b6:07:d2:f6:a2:df:
         db:15:06:c6:fb:8c:de:87:7f:f6:2a:a8:86:e8:a1:a8:6e:a7:
         2a:d1:8f:e4:01:cc:69:b6:1b:2a:9a:b9:46:e9:d5:fe:6e:6a:
         cc:b1:e5:cd:a3:ac:85:13:d6:66:68:b9:19:3d:21:3a:30:0a:
         f5:3a:e7:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 14 17:27:17 2026 by rpki-client