This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS197715.roa
File:                     AS197715.roa (raw, json)
Hash identifier:          fOx+wOliM+HszzMZVyRTWm3ixkzUy7nEKdEASprok9U=
Subject key identifier:   30:77:EC:F4:67:DF:DE:05:A5:09:65:2D:0E:14:13:A9:2E:D4:AA:48
Certificate issuer:       /CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Certificate serial:       0E5B346CDD748BBCA34F4C7CCC74ECEBECD914BD
Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS197715.roa
Signing time:             Wed 04 Feb 2026 12:57:35 +0000
ROA not before:           Wed 04 Feb 2026 12:52:35 +0000
ROA not after:            Wed 03 Feb 2027 12:57:35 +0000
asID:                     197715
IP address blocks:        193.38.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Feb 2026 12:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:5b:34:6c:dd:74:8b:bc:a3:4f:4c:7c:cc:74:ec:eb:ec:d9:14:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c
        Validity
            Not Before: Feb  4 12:52:35 2026 GMT
            Not After : Feb  3 12:57:35 2027 GMT
        Subject: CN=3077ECF467DFDE05A509652D0E1413A92ED4AA48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ba:fa:68:3f:2e:8f:60:00:2c:98:c7:5c:7b:
                    a8:eb:8e:6d:b6:b3:66:9e:37:a5:c7:73:34:cc:b0:
                    1f:9e:89:a4:85:7f:62:16:14:7c:92:39:ab:53:0c:
                    c4:89:f4:53:8f:fd:cf:1f:60:3b:0b:d8:b7:bc:d7:
                    6f:0c:49:06:cd:2f:c4:dc:d2:41:78:9a:c1:3b:8c:
                    f8:84:af:5f:fa:a9:18:4f:ad:f5:33:34:b6:81:18:
                    1e:26:4f:b5:c5:36:d4:07:c4:34:c9:d7:b9:be:df:
                    ac:fb:cc:2c:2c:69:f5:63:53:a0:40:3f:8e:93:43:
                    ee:2b:e8:2e:fc:2f:46:1d:03:ef:6b:f0:be:94:47:
                    ac:ef:94:4c:68:42:2b:b6:6b:cb:9a:dc:6b:e6:f3:
                    3e:55:5d:6e:d6:f2:e9:df:a1:e1:98:0e:7f:67:35:
                    dd:fd:86:10:ed:33:22:d6:b6:72:76:eb:43:19:26:
                    b7:3c:cb:00:5f:7f:51:c1:81:a3:12:6f:2a:62:96:
                    f8:2d:6f:e6:c3:bd:26:1e:22:ad:80:d3:3d:71:79:
                    a4:b7:43:fa:dd:8a:5a:d6:51:fc:40:1b:e6:ec:ba:
                    4e:74:7d:1f:b7:43:72:5d:f1:58:d8:84:fc:b5:c7:
                    e5:3f:93:9e:74:7c:15:21:bf:25:e6:f3:77:e6:a0:
                    e6:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:77:EC:F4:67:DF:DE:05:A5:09:65:2D:0E:14:13:A9:2E:D4:AA:48
            X509v3 Authority Key Identifier:
                keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS197715.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.38.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         dc:35:ca:d8:51:d5:80:db:9d:cc:b2:74:37:02:e4:87:ff:04:
         51:9d:ec:49:7e:a8:90:d6:a6:62:97:9b:29:f7:b9:38:7c:2b:
         9b:99:54:15:9c:22:90:65:d4:0a:7c:83:d1:dd:f1:71:60:58:
         7b:28:08:93:7d:11:2a:55:e9:c0:7b:5a:fc:86:41:89:dc:7f:
         a8:7e:37:41:02:1f:4b:a9:ba:e0:ed:b3:ba:d3:74:82:31:04:
         78:e7:3d:c3:8f:e3:be:25:5a:86:2d:58:b4:06:4f:b9:0f:9c:
         b1:76:45:24:6d:ec:2b:e9:db:bd:5b:bb:88:86:0b:a4:1f:a1:
         90:83:b5:7c:78:0e:8c:fe:fa:77:c3:62:45:f6:7a:b3:17:09:
         44:a0:7e:f0:36:0c:58:10:da:84:16:fa:48:dd:e6:d2:54:ae:
         5a:1c:be:cc:07:46:64:30:b9:52:18:71:a1:bf:5e:d2:94:0e:
         cb:46:5e:a2:94:3b:1a:0d:e9:47:07:7f:e9:89:ab:d5:8f:ec:
         57:4a:e5:db:a0:ad:1b:28:e0:ef:5a:54:89:c9:64:33:ef:73:
         23:38:21:ff:e4:6b:77:2d:c7:b4:72:96:65:b4:c3:d2:56:6e:
         af:53:75:60:a2:48:59:f6:51:e5:25:49:c9:04:45:16:cf:a9:
         47:fc:4b:0b
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUDls0bN10i7yjT0x8zHTs6+zZFL0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWRmYmZmMjE3MTA1ZGY4ODc3ZDQ2M2Y2ZTliYWMyOGE0
MDg0ZDIwYzAeFw0yNjAyMDQxMjUyMzVaFw0yNzAyMDMxMjU3MzVaMDMxMTAvBgNV
BAMTKDMwNzdFQ0Y0NjdERkRFMDVBNTA5NjUyRDBFMTQxM0E5MkVENEFBNDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfuvpoPy6PYAAsmMdce6jrjm22
s2aeN6XHczTMsB+eiaSFf2IWFHySOatTDMSJ9FOP/c8fYDsL2Le8128MSQbNL8Tc
0kF4msE7jPiEr1/6qRhPrfUzNLaBGB4mT7XFNtQHxDTJ17m+36z7zCwsafVjU6BA
P46TQ+4r6C78L0YdA+9r8L6UR6zvlExoQiu2a8ua3Gvm8z5VXW7W8unfoeGYDn9n
Nd39hhDtMyLWtnJ260MZJrc8ywBff1HBgaMSbypilvgtb+bDvSYeIq2A0z1xeaS3
Q/rdilrWUfxAG+bsuk50fR+3Q3Jd8VjYhPy1x+U/k550fBUhvyXm83fmoOblAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUMHfs9Gff3gWlCWUtDhQTqS7UqkgwHwYDVR0j
BBgwFoAUnfv/IXEF34h31GP26brCikCE0gwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTViNGQ5ZTgtNDExMS00Mzk0LWEzYTYtYmQ4MjUxZTdm
YmJkLzAvOURGQkZGMjE3MTA1REY4ODc3RDQ2M0Y2RTlCQUMyOEE0MDg0RDIwQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25mdl9JWEVGMzRoMzFHUDI2YnJDaWtD
RTBndy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzU1YjRkOWU4LTQxMTEt
NDM5NC1hM2E2LWJkODI1MWU3ZmJiZC8wL0FTMTk3NzE1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSYu
MA0GCSqGSIb3DQEBCwUAA4IBAQDcNcrYUdWA253MsnQ3AuSH/wRRnexJfqiQ1qZi
l5sp97k4fCubmVQVnCKQZdQKfIPR3fFxYFh7KAiTfREqVenAe1r8hkGJ3H+ofjdB
Ah9Lqbrg7bO603SCMQR45z3Dj+O+JVqGLVi0Bk+5D5yxdkUkbewr6du9W7uIhguk
H6GQg7V8eA6M/vp3w2JF9nqzFwlEoH7wNgxYENqEFvpI3ebSVK5aHL7MB0ZkMLlS
GHGhv17SlA7LRl6ilDsaDelHB3/piavVj+xXSuXboK0bKODvWlSJyWQz73MjOCH/
5Gt3Lce0cpZltMPSVm6vU3VgokhZ9lHlJUnJBEUWz6lH/EsL
-----END CERTIFICATE-----
Generated at Thu Feb 5 13:59:06 2026 by rpki-client