This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS48314.roa
File:                     AS48314.roa (raw, json)
Hash identifier:          SaMEskNyDxirlR4dxapzjoTdy8Y6OXZYm/RtZH6GDIQ=
Subject key identifier:   C6:3E:0C:32:50:90:04:D3:3D:34:E1:1B:EF:23:AF:3D:51:EB:CA:3C
Certificate issuer:       /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial:       38463961E5006002A1BE12747CA62F1D3963A512
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS48314.roa
Signing time:             Tue 11 Nov 2025 07:44:16 +0000
ROA not before:           Tue 11 Nov 2025 07:39:16 +0000
ROA not after:            Tue 10 Nov 2026 07:44:16 +0000
asID:                     48314
IP address blocks:        194.110.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 10:42:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:46:39:61:e5:00:60:02:a1:be:12:74:7c:a6:2f:1d:39:63:a5:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
        Validity
            Not Before: Nov 11 07:39:16 2025 GMT
            Not After : Nov 10 07:44:16 2026 GMT
        Subject: CN=C63E0C32509004D33D34E11BEF23AF3D51EBCA3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ad:44:3e:aa:04:3a:81:e1:61:c9:ae:06:66:
                    3d:2b:33:be:bd:9a:cc:77:5f:83:c0:d0:ee:8f:20:
                    9a:80:e1:17:2a:7b:8b:ed:7d:d4:48:71:5f:09:c0:
                    93:b4:4e:1c:f7:55:ec:8c:a9:7e:00:22:1f:31:86:
                    00:c9:cd:33:17:6d:1b:6c:98:9a:3d:11:f3:fa:1c:
                    c1:bb:1c:e8:f1:9a:e9:81:d6:bc:37:55:61:44:26:
                    b3:2b:71:ef:53:f3:b1:de:18:e0:38:49:20:ae:e4:
                    f4:4d:ad:48:a5:bd:b0:41:fc:f0:67:8b:b8:57:93:
                    b7:a7:88:13:33:1d:c5:49:99:51:70:5e:1a:d1:1b:
                    ba:4f:29:f7:57:77:24:92:7a:c5:94:0b:5f:11:44:
                    b3:13:6b:99:69:06:1e:0f:11:b9:f9:c2:34:2c:74:
                    26:e3:ac:50:92:b2:e7:b2:9f:11:8b:d5:bb:38:f2:
                    31:52:55:0d:7a:ac:25:2f:00:9f:1c:53:4f:46:aa:
                    1e:3f:e9:df:17:1d:0c:de:0a:17:b4:c5:f8:09:70:
                    20:58:f9:eb:f4:a2:78:e8:d2:c4:74:4f:8b:61:50:
                    9f:fa:be:da:88:63:7a:d7:49:f2:81:6b:d0:24:52:
                    26:af:5a:86:c5:b1:c0:ec:1b:6a:24:23:5e:80:44:
                    1e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:3E:0C:32:50:90:04:D3:3D:34:E1:1B:EF:23:AF:3D:51:EB:CA:3C
            X509v3 Authority Key Identifier:
                keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS48314.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.110.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:83:ab:0a:da:a2:54:28:69:a8:f4:3f:83:dd:be:08:de:1f:
         93:c5:1b:76:ff:da:f4:63:60:7c:78:48:c0:27:a3:97:4b:7a:
         02:b2:2e:6f:e6:69:63:f9:cf:84:0f:1d:80:c3:0e:dd:aa:dc:
         7b:56:ea:11:91:c7:3d:85:17:c5:35:e4:b3:31:6f:32:06:27:
         36:75:6b:73:3c:9a:4a:fa:cc:43:ad:6a:f7:80:1a:11:b8:af:
         71:ca:92:3d:50:6d:85:4c:95:31:98:9a:b4:d6:fc:ce:cd:a0:
         de:3e:02:bb:37:98:b4:5a:8d:ee:60:a4:63:8c:aa:ce:d3:73:
         92:99:ec:fb:f7:f7:0e:48:80:23:fb:b9:3a:d7:b4:b0:55:e5:
         54:99:ef:aa:8b:c8:8b:da:81:87:3c:d8:a0:b0:10:13:4d:de:
         d5:bd:bf:a7:d3:3e:db:7e:59:86:54:ae:21:00:39:f2:35:89:
         eb:64:92:7b:6a:f6:dd:32:62:4b:26:fb:30:74:b9:c8:52:65:
         2d:8f:2d:83:f5:45:f2:24:e2:f9:d6:37:df:e3:5c:79:a4:6f:
         09:d0:1f:87:70:f9:9f:7f:77:c9:0c:0d:09:7f:99:8f:c1:1d:
         0f:1b:6b:e9:6a:0b:06:0e:b9:4b:25:ef:37:26:9e:6f:06:55:
         1a:6d:df:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 18:46:47 2025 by rpki-client