This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS9457.roa
File:                     AS9457.roa (raw, json)
Hash identifier:          HHqGJLtXh4G9NSDuOf3UatzrRNqxg4g7jpbHC3tehyY=
Subject key identifier:   25:A3:DE:8B:A8:7A:8B:69:DA:F5:F3:FE:D9:3F:D9:14:38:A1:99:91
Certificate issuer:       /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial:       451E2195D682C75F66A1C0A265B55A16E18C6391
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS9457.roa
Signing time:             Sat 31 Jan 2026 09:33:02 +0000
ROA not before:           Sat 31 Jan 2026 09:28:02 +0000
ROA not after:            Sat 30 Jan 2027 09:33:02 +0000
asID:                     9457
IP address blocks:        181.41.210.0/23 maxlen: 23
                          193.107.208.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Feb 2026 09:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:1e:21:95:d6:82:c7:5f:66:a1:c0:a2:65:b5:5a:16:e1:8c:63:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
        Validity
            Not Before: Jan 31 09:28:02 2026 GMT
            Not After : Jan 30 09:33:02 2027 GMT
        Subject: CN=25A3DE8BA87A8B69DAF5F3FED93FD91438A19991
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a1:2c:05:fe:dd:1f:22:d2:21:5c:ae:01:6d:
                    be:82:10:bc:fa:4f:53:1a:94:2c:9f:aa:79:5a:c2:
                    6c:02:52:0e:32:43:a6:53:1e:6f:e4:82:5b:7c:14:
                    fc:69:01:ed:4b:2c:6e:36:7d:28:00:8e:f7:88:fd:
                    0d:db:5f:1b:84:96:cc:3a:c1:dc:c1:3a:09:af:54:
                    6d:6e:42:ca:e0:62:e6:fd:1a:e4:ba:79:e2:44:fc:
                    14:36:3f:b6:44:a9:3e:72:f4:91:32:b3:5b:4b:9a:
                    71:96:48:77:67:eb:7d:9d:49:34:a5:87:1a:ab:cc:
                    36:55:2e:65:9b:1d:25:83:bd:9f:2f:6a:73:16:a6:
                    ff:6f:71:23:76:ab:79:fa:f5:b1:9e:73:2a:9a:6d:
                    01:a4:8c:f0:47:ea:67:6a:e0:36:76:eb:cd:9f:0a:
                    07:ad:26:75:76:82:d7:08:ee:10:51:96:ec:d6:cd:
                    f0:41:13:f5:d7:28:c0:fc:8b:e3:b9:24:0f:cf:e5:
                    33:99:e4:32:e1:7a:22:47:7c:4d:1c:e0:94:20:ab:
                    19:bf:da:8b:08:d9:54:81:ef:e7:e9:a3:0f:98:37:
                    9f:17:65:d6:e8:21:63:1d:c8:6e:f2:85:13:11:80:
                    44:86:e6:b9:0b:71:50:f2:11:1a:26:20:e1:eb:82:
                    48:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:A3:DE:8B:A8:7A:8B:69:DA:F5:F3:FE:D9:3F:D9:14:38:A1:99:91
            X509v3 Authority Key Identifier:
                keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS9457.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.41.210.0/23
                  193.107.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         19:5d:f4:c4:27:e3:d7:3d:70:82:4a:6e:29:33:d8:c1:4f:3c:
         67:ce:be:b3:34:e7:00:45:ad:e8:42:92:11:7a:24:0c:a2:e5:
         29:d6:c0:3b:a9:03:6c:50:06:b2:e2:10:d7:ae:4b:82:b5:d1:
         3e:f8:37:14:14:11:bf:fd:31:e1:5f:d2:54:de:1a:ac:9b:78:
         16:4b:a1:02:4f:3e:0e:d8:95:27:d9:fa:4b:45:89:a7:ea:b0:
         f7:a8:88:b4:89:1a:26:a2:0e:c4:a6:21:e8:c6:23:66:aa:49:
         ad:45:db:c7:26:bb:3e:71:2a:eb:1d:b5:ce:51:d1:0f:01:6b:
         5b:b0:be:26:ee:ac:c2:b0:0f:e7:4b:c3:c1:44:74:31:b5:67:
         ee:91:59:75:05:8a:95:a2:53:52:51:ed:8a:b3:62:ee:b2:fe:
         52:b3:08:8c:3d:e6:e6:a4:83:ed:b0:64:ca:a5:d8:37:33:e5:
         cd:86:b2:d2:c2:6d:dd:98:55:b6:c3:05:a6:79:36:13:b8:71:
         cd:ac:ba:96:c8:e9:d4:59:e0:92:e1:b8:29:66:d5:16:5d:1f:
         62:d8:3f:92:cf:b6:fc:0c:a3:74:c0:49:d7:ac:2c:2e:11:58:
         c8:d8:aa:5d:88:a7:45:fd:a6:40:dc:48:50:ba:a6:7d:20:20:
         1c:7d:12:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 12:58:28 2026 by rpki-client