This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS198376.roa
File:                     AS198376.roa (raw, json)
Hash identifier:          HP84gEFTZL8tsAWBpudnZJJ29oDO3sNtQ97Aw7VSSi4=
Subject key identifier:   25:00:30:6A:9A:57:6F:BD:26:41:67:E2:6A:67:DD:E0:F6:3A:17:AD
Certificate issuer:       /CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Certificate serial:       6BE6C7601018040A601F5FC7093E2FA280BE6CBA
Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS198376.roa
Signing time:             Wed 04 Feb 2026 12:57:38 +0000
ROA not before:           Wed 04 Feb 2026 12:52:38 +0000
ROA not after:            Wed 03 Feb 2027 12:57:38 +0000
asID:                     198376
IP address blocks:        84.54.0.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Feb 2026 12:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:e6:c7:60:10:18:04:0a:60:1f:5f:c7:09:3e:2f:a2:80:be:6c:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c
        Validity
            Not Before: Feb  4 12:52:38 2026 GMT
            Not After : Feb  3 12:57:38 2027 GMT
        Subject: CN=2500306A9A576FBD264167E26A67DDE0F63A17AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5b:30:bc:04:ee:d6:60:6e:b6:c6:72:34:83:
                    ba:be:31:4c:69:1a:5d:92:1d:9e:fb:8b:4b:5c:42:
                    75:a0:b0:31:62:22:b0:18:22:88:49:23:9e:f2:00:
                    7f:6f:1e:29:be:96:cd:34:9c:06:ff:ee:ca:4a:68:
                    ae:fd:58:1e:36:45:7d:97:dc:41:82:cd:f7:a5:33:
                    17:ce:fb:72:45:bc:c4:5b:9c:a1:fc:de:cd:e2:46:
                    89:f6:56:25:9f:0d:54:5b:fd:39:54:af:1d:a0:78:
                    26:a4:7a:30:2d:86:0f:b6:5a:96:8a:67:1d:17:09:
                    16:0b:9a:dd:b8:de:1a:d6:42:04:5e:89:a7:ba:25:
                    d4:ec:37:5a:23:4c:51:20:a2:2d:c3:47:76:91:5d:
                    8e:e4:6d:70:01:5a:de:de:c7:a4:4b:f1:8c:2a:28:
                    3f:a2:36:2e:c7:1e:90:64:fa:59:eb:c3:22:cf:f5:
                    4f:de:54:da:cc:2d:e0:de:e5:1b:24:02:2c:0b:a9:
                    d8:f1:58:01:bf:f4:68:f8:74:dc:21:c1:ed:f2:b1:
                    4b:4c:0f:52:e3:40:57:37:71:c2:24:d4:a4:66:6e:
                    26:be:81:5f:ba:13:32:72:41:1b:55:76:b9:53:aa:
                    a7:f3:a2:64:42:a1:a3:1f:a9:4a:f3:32:39:70:65:
                    07:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:00:30:6A:9A:57:6F:BD:26:41:67:E2:6A:67:DD:E0:F6:3A:17:AD
            X509v3 Authority Key Identifier:
                keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS198376.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  84.54.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         51:51:9a:7a:63:a5:1d:4d:7b:df:cc:84:6e:76:df:00:5e:f2:
         d4:a2:eb:c6:2a:f2:5d:6c:7c:71:0d:9f:63:2e:72:aa:59:1c:
         df:0a:bb:bd:da:64:60:27:ba:9a:f6:ae:1a:cc:57:8f:8a:e9:
         ee:69:af:33:fb:91:0d:72:cb:f7:56:6a:52:9d:29:da:97:a1:
         60:bb:bd:75:2e:86:12:d0:e3:02:dd:fb:2d:2d:eb:ef:33:77:
         d2:0f:fb:06:aa:8c:4b:2f:a9:af:73:eb:76:5f:0d:8a:82:b0:
         a4:b9:3f:45:1d:9c:6e:e9:40:96:84:22:e8:ff:f6:6e:a5:f0:
         c4:22:47:f1:fa:39:b5:85:79:74:8e:56:45:e6:37:01:c0:47:
         f4:ff:c0:9e:48:c7:fd:e7:a9:cb:9f:a2:fa:fb:8c:8f:da:8e:
         bd:f7:43:8d:d9:bf:3c:bd:eb:8e:78:d6:99:16:d7:c0:70:d8:
         75:34:2f:c2:16:0c:a3:71:c2:3c:c3:6e:5a:a8:4d:6a:35:db:
         2b:3f:38:82:56:dc:4d:da:08:3b:39:64:ea:e5:1b:91:0b:4e:
         b2:c0:d9:cf:40:7f:c7:4a:42:ea:da:ab:f9:fa:7a:04:50:46:
         ee:bf:1b:c6:1f:e9:f7:f2:46:6f:a0:2f:3d:6b:36:f3:92:fd:
         9e:54:ab:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 5 13:53:51 2026 by rpki-client