This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS45671.roa
File:                     AS45671.roa (raw, json)
Hash identifier:          FYKjNw0PLTn2d9uBj12frAJTgXfPYoQ9HYv93EHjI7A=
Subject key identifier:   F2:5A:7A:EE:82:52:3B:62:47:FE:06:22:6E:12:0F:2A:B3:D4:FA:D2
Certificate issuer:       /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial:       600485C9B9167679A076AA553DA63F23479DA179
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS45671.roa
Signing time:             Wed 03 Dec 2025 08:55:12 +0000
ROA not before:           Wed 03 Dec 2025 08:50:12 +0000
ROA not after:            Wed 02 Dec 2026 08:55:12 +0000
asID:                     45671
IP address blocks:        179.61.228.0/24 maxlen: 24
                          179.61.240.0/24 maxlen: 24
                          181.214.17.0/24 maxlen: 24
                          181.214.43.0/24 maxlen: 24
                          181.214.112.0/24 maxlen: 24
                          181.214.162.0/24 maxlen: 24
                          181.214.163.0/24 maxlen: 24
                          181.214.174.0/24 maxlen: 24
                          181.215.168.0/24 maxlen: 24
                          191.101.37.0/24 maxlen: 24
                          191.101.141.0/24 maxlen: 24
                          191.101.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 10:42:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:04:85:c9:b9:16:76:79:a0:76:aa:55:3d:a6:3f:23:47:9d:a1:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
        Validity
            Not Before: Dec  3 08:50:12 2025 GMT
            Not After : Dec  2 08:55:12 2026 GMT
        Subject: CN=F25A7AEE82523B6247FE06226E120F2AB3D4FAD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:97:0d:a7:c5:a2:14:07:0a:2e:e7:08:ab:24:
                    c3:ed:f2:a7:72:dc:26:ff:41:03:b9:66:58:51:99:
                    fd:6c:77:e0:e0:c3:33:c1:a2:c8:78:59:02:61:90:
                    e7:8c:4e:b2:3c:b8:ef:01:a2:6b:34:49:40:b3:8a:
                    e4:6b:0f:f8:d1:59:c1:24:b4:c3:9d:32:0f:59:5c:
                    02:74:19:10:78:b1:a4:2e:a7:d9:30:ba:63:41:d4:
                    d0:01:96:1b:1d:61:46:85:c8:c9:60:36:c7:47:0f:
                    28:8d:f7:6b:04:48:05:52:f9:e9:b1:f7:e8:63:dd:
                    9c:ef:e1:04:00:b9:ad:5e:e6:78:2c:72:ce:98:89:
                    a5:7c:8e:09:61:88:1d:40:37:ab:29:a6:40:76:d5:
                    c0:d9:79:1e:b4:6d:af:8e:f6:a6:0a:bd:77:75:9e:
                    d9:b6:2d:9a:61:e6:e0:56:ba:7f:82:1c:a6:d3:25:
                    bf:ba:2f:71:f4:67:c8:43:70:11:71:81:c6:3e:6c:
                    66:47:a2:0d:80:2d:3b:15:08:96:d5:05:03:ac:94:
                    72:7f:a5:91:15:2c:eb:a3:95:15:ee:66:6d:bd:95:
                    a9:e9:63:48:34:59:ec:b8:88:3b:40:ed:c5:4e:d6:
                    ce:5f:80:57:35:58:1c:6b:4f:f9:3c:cf:39:82:85:
                    f7:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:5A:7A:EE:82:52:3B:62:47:FE:06:22:6E:12:0F:2A:B3:D4:FA:D2
            X509v3 Authority Key Identifier:
                keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS45671.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.61.228.0/24
                  179.61.240.0/24
                  181.214.17.0/24
                  181.214.43.0/24
                  181.214.112.0/24
                  181.214.162.0/23
                  181.214.174.0/24
                  181.215.168.0/24
                  191.101.37.0/24
                  191.101.141.0/24
                  191.101.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:d2:29:d7:41:cd:5c:c6:2f:41:3b:5f:cd:39:d0:b1:b6:fa:
         1e:c7:64:e3:fd:38:68:2e:3a:55:54:71:cf:93:c6:eb:08:98:
         d3:1b:bc:d5:25:8d:c3:b1:14:a9:8b:8c:33:75:d6:cc:69:e7:
         5a:7d:4b:6e:54:c5:e1:8a:fd:4c:57:64:d1:69:73:f8:59:f5:
         f9:89:06:f5:dc:02:e2:9d:08:a5:19:67:07:7a:25:b5:7e:52:
         15:5c:58:95:c0:34:5a:f9:bf:0c:4e:38:39:a8:a0:a5:9d:6d:
         3b:7c:a9:91:fd:0f:20:6a:bd:dc:21:51:bf:3f:1a:44:0f:92:
         80:14:99:2d:21:55:c3:03:51:e1:8f:bf:2e:10:3d:75:cc:8c:
         86:91:7d:c1:d4:4a:86:7c:c3:83:9c:48:bc:9f:95:a4:8d:e2:
         4b:ef:34:34:f4:53:a8:ec:f3:0f:d0:8a:5e:d9:67:63:33:e6:
         62:5e:43:5b:e2:e7:f0:88:cf:23:d3:ec:84:81:70:7f:b7:8f:
         2a:c4:ce:38:b2:9a:76:b6:f7:71:af:5f:c0:01:7e:15:bb:79:
         30:83:d2:ff:7c:8e:88:5f:e0:e7:3f:81:e3:d4:47:9a:06:60:
         73:9f:52:30:77:5e:0e:55:64:7c:41:32:e7:33:af:52:91:ae:
         68:ba:aa:4e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Dec 5 18:34:13 2025 by rpki-client