This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS135391.roa
File:                     AS135391.roa (raw, json)
Hash identifier:          EfRnZV9+BfpGZ3q0TGsue/jptuKEIsVA1o2LHtEn3x8=
Subject key identifier:   10:80:69:11:C2:BB:FD:CC:D6:0A:AB:2C:2E:70:8B:45:E3:7B:04:F0
Certificate issuer:       /CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Certificate serial:       064330780FD25062BA7A25D881CD5CDCCD9C8CB9
Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS135391.roa
Signing time:             Wed 04 Feb 2026 12:57:32 +0000
ROA not before:           Wed 04 Feb 2026 12:52:32 +0000
ROA not after:            Wed 03 Feb 2027 12:57:32 +0000
asID:                     135391
IP address blocks:        193.187.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Feb 2026 12:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:43:30:78:0f:d2:50:62:ba:7a:25:d8:81:cd:5c:dc:cd:9c:8c:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c
        Validity
            Not Before: Feb  4 12:52:32 2026 GMT
            Not After : Feb  3 12:57:32 2027 GMT
        Subject: CN=10806911C2BBFDCCD60AAB2C2E708B45E37B04F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d2:8f:4b:e4:e2:6e:a8:e5:12:31:ec:2b:ac:
                    f7:b6:af:c8:00:f5:81:1e:51:9a:3f:31:64:59:54:
                    82:d4:7d:87:36:30:51:ff:4e:d8:28:8a:51:f4:38:
                    c4:ff:94:3d:01:4f:a3:a4:eb:eb:17:ed:d6:47:3d:
                    e6:97:a8:4f:67:40:8e:02:67:6a:26:30:a4:30:c4:
                    98:f0:ee:bf:30:fe:f1:65:4b:88:6a:30:db:84:72:
                    53:85:6a:10:bd:64:bd:6c:17:3f:94:b7:de:64:f5:
                    3b:ec:63:3d:cc:7d:6e:fe:b2:9f:c2:4c:da:8e:95:
                    81:7f:73:2e:f9:33:da:09:25:42:26:5f:ea:e5:33:
                    dc:90:77:b7:fe:c8:5c:d9:82:04:6d:6f:8e:13:5c:
                    de:10:0e:1f:a8:f9:33:93:73:c3:ad:8c:c1:85:6a:
                    15:49:79:b4:ff:50:d4:23:49:10:51:49:b2:e8:4e:
                    3f:cf:95:aa:ad:3e:ba:8b:8d:22:08:2f:58:ec:ff:
                    89:b4:0c:f6:79:8d:c7:d3:01:f3:3f:bb:91:23:ef:
                    98:c5:62:1f:d1:97:8c:42:3f:92:67:28:d5:ff:28:
                    bd:d7:38:b0:d7:8b:04:59:32:93:bc:4c:9d:ed:88:
                    57:a6:6e:d4:71:75:9a:23:2b:f3:dc:cf:b0:6c:6d:
                    e4:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:80:69:11:C2:BB:FD:CC:D6:0A:AB:2C:2E:70:8B:45:E3:7B:04:F0
            X509v3 Authority Key Identifier:
                keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS135391.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.187.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:66:9f:36:41:27:4c:61:17:81:30:42:96:9b:67:90:a8:52:
         ee:82:43:d9:07:e1:87:03:5c:8e:51:e0:ca:7d:94:6d:5b:ff:
         98:38:93:be:4d:64:67:15:eb:2d:b1:1b:52:f4:66:96:53:79:
         d0:9b:0f:11:de:c8:eb:11:5c:0f:b1:3d:31:6c:a7:27:53:81:
         d2:1f:23:78:6f:33:82:8e:2b:28:60:6b:1f:20:03:0b:fe:3f:
         e1:a5:1e:2a:ee:aa:c9:18:a3:e7:82:02:61:b3:71:44:a1:a9:
         13:21:b9:a3:c3:f6:be:db:25:ed:92:d3:52:2a:de:ac:98:6f:
         5e:68:06:41:30:8f:66:81:da:b2:a2:58:9c:ba:2e:35:49:b0:
         57:22:ae:b4:6d:dd:fe:e0:5a:48:eb:cd:4b:20:54:b6:55:d5:
         2e:60:29:a1:a8:96:f5:0d:48:3e:58:b1:76:ed:0a:47:ac:21:
         2e:bc:84:45:40:d6:29:45:00:12:0c:ba:84:9c:f7:73:e9:6b:
         dc:ae:2e:25:88:6f:9a:23:ed:4b:d3:16:cb:a8:11:39:5a:be:
         4b:3c:d8:f8:73:65:f1:86:d4:9a:00:1e:d8:79:1c:e3:1d:ac:
         ed:ac:6a:3c:dc:e9:c4:48:f8:45:4e:f7:d3:b6:6b:6e:8e:c6:
         85:4b:44:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 5 13:59:05 2026 by rpki-client