This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e39352e36362e302f32342d3234203d3e20383334.roa
File:                     34352e39352e36362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          DiSpfV3bV2xIHjQ3l8Wv8IpCjLqmaKM9An9EJWuSHHI=
Subject key identifier:   A7:97:C1:65:2F:D9:50:78:8D:51:E3:D7:84:C3:06:8C:99:54:39:7B
Certificate issuer:       /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial:       14BBF237137C3D7F1100DD0D48D3EEFA9418A42A
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e39352e36362e302f32342d3234203d3e20383334.roa
Signing time:             Sun 08 Feb 2026 09:12:36 +0000
ROA not before:           Sun 08 Feb 2026 09:07:36 +0000
ROA not after:            Sun 07 Feb 2027 09:12:36 +0000
asID:                     834
IP address blocks:        45.95.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 22:40:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:bb:f2:37:13:7c:3d:7f:11:00:dd:0d:48:d3:ee:fa:94:18:a4:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
        Validity
            Not Before: Feb  8 09:07:36 2026 GMT
            Not After : Feb  7 09:12:36 2027 GMT
        Subject: CN=A797C1652FD950788D51E3D784C3068C9954397B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:d4:27:ee:6b:f5:71:fb:d2:7a:9a:9d:99:64:
                    50:90:aa:2e:07:16:7d:fc:2b:60:81:e5:fe:39:84:
                    63:94:d0:47:b3:f3:eb:4f:1e:95:29:2c:f1:50:0d:
                    8d:5e:ad:90:9e:4a:b3:a9:00:10:7d:f8:d2:0a:fa:
                    03:19:d5:20:60:26:ce:18:2d:49:80:1d:e8:ef:93:
                    f9:fc:96:70:91:ee:8e:80:ec:10:84:43:8a:fc:b7:
                    87:95:2a:23:1d:be:63:8a:90:09:ca:2d:12:53:db:
                    44:16:21:75:5d:df:a4:e6:7c:8c:77:99:e9:b7:dc:
                    3a:63:f8:45:75:25:eb:df:70:49:36:7a:1c:4e:ee:
                    16:c6:61:e1:07:af:3e:f6:77:fd:44:ae:66:1c:26:
                    db:aa:c3:bf:58:6e:9e:77:e9:39:1b:5c:f4:86:25:
                    0d:89:e7:5e:55:31:a7:38:86:7a:c6:4e:ee:2d:ce:
                    74:be:ce:83:1a:a2:95:b9:30:74:8e:62:64:74:21:
                    b2:24:1f:45:db:1c:aa:60:ab:db:09:62:f5:e7:04:
                    66:9c:f2:43:a0:46:7a:31:0e:fb:b4:00:1a:b1:54:
                    74:7b:b4:51:e2:8c:3f:12:9b:69:a8:a9:50:48:33:
                    46:b8:f6:68:ec:38:53:4a:45:e3:71:44:b3:14:ad:
                    31:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:97:C1:65:2F:D9:50:78:8D:51:E3:D7:84:C3:06:8C:99:54:39:7B
            X509v3 Authority Key Identifier:
                keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e39352e36362e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.95.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:3f:d1:24:d1:51:9e:50:fb:32:c4:ec:c7:36:ee:19:5a:01:
         ab:4e:04:c0:6d:96:25:42:a2:31:35:e5:dc:ab:76:ae:98:1c:
         ff:4e:63:9a:a7:30:38:2c:0e:29:fd:36:91:33:d3:21:30:e8:
         07:b4:04:57:5b:b5:c2:31:62:a2:b1:90:25:57:e9:49:cc:45:
         95:c0:cc:04:e8:21:34:f6:08:21:17:74:fe:1d:97:c9:84:f2:
         d6:be:27:43:d3:ed:cd:88:15:a4:e6:76:57:f3:c2:89:5e:a2:
         da:ce:4f:b2:04:4b:5b:6c:43:3c:3f:64:2b:40:eb:07:23:63:
         da:e6:4f:30:5f:d8:4d:2c:28:6a:43:a1:9b:4e:23:1e:0f:c0:
         fb:3e:40:0c:6c:7e:18:bf:6b:c6:e9:67:cd:57:7a:12:4e:a2:
         59:4f:86:9c:95:9d:10:71:5b:ce:c1:64:1d:7f:db:c3:30:05:
         b0:e9:4c:2b:ff:c0:2a:d5:b3:cb:dc:2e:72:34:6e:40:2e:e3:
         76:1f:30:ba:5e:2e:5a:05:d6:9e:45:13:52:ff:5a:53:bd:73:
         3c:d4:99:a1:3e:22:92:30:34:25:bf:cb:53:97:e0:be:0d:1a:
         b9:68:4b:93:7e:bb:f5:ce:8c:f9:dc:b4:15:d6:36:59:8d:19:
         2a:23:e4:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 12:04:01 2026 by rpki-client