This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS200193.roa
File:                     AS200193.roa (raw, json)
Hash identifier:          paujKhnlT8nhj6RtWxrQgKqiv/IUhTVqubqaOF01XgM=
Subject key identifier:   B2:30:53:ED:4B:7C:AB:D3:D1:F6:1A:17:AD:18:C2:27:B7:96:22:0D
Certificate issuer:       /CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Certificate serial:       7B341B2EFDC6085EE4414F641F84FCBD60F25F0E
Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS200193.roa
Signing time:             Wed 04 Feb 2026 12:57:46 +0000
ROA not before:           Wed 04 Feb 2026 12:52:46 +0000
ROA not after:            Wed 03 Feb 2027 12:57:46 +0000
asID:                     200193
IP address blocks:        5.133.100.0/24 maxlen: 24
                          92.249.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Feb 2026 12:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:34:1b:2e:fd:c6:08:5e:e4:41:4f:64:1f:84:fc:bd:60:f2:5f:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c
        Validity
            Not Before: Feb  4 12:52:46 2026 GMT
            Not After : Feb  3 12:57:46 2027 GMT
        Subject: CN=B23053ED4B7CABD3D1F61A17AD18C227B796220D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c4:fa:cb:b1:54:6c:09:1c:c4:08:6a:79:17:
                    56:76:a9:1b:5c:c7:1c:aa:9b:0a:60:68:e6:0c:69:
                    b3:8f:cb:0d:0a:96:a6:00:a5:b6:16:ce:29:c5:e5:
                    85:41:e6:58:4c:b9:33:ac:23:f0:6f:f7:08:8b:b3:
                    7c:43:7f:bd:43:10:26:cb:7f:32:f0:38:2e:59:8f:
                    8b:88:f3:f1:ad:16:88:d5:db:6e:f6:d5:24:ed:a0:
                    23:95:60:89:12:48:48:82:e4:04:a8:6d:7c:cf:fa:
                    78:06:fa:7d:9f:66:61:2f:13:46:c4:d4:25:db:c4:
                    57:89:24:31:9e:d2:fc:25:62:f7:5c:ba:0a:95:43:
                    9b:cc:1f:9c:57:36:b5:97:0c:14:8f:b5:24:b0:88:
                    f6:fe:dd:1f:64:cf:ac:3a:12:5f:59:d3:94:51:3a:
                    22:51:21:a7:e0:11:ec:4a:3d:79:dd:ad:59:04:f7:
                    ef:e7:c2:f5:2f:f6:d9:06:bd:84:69:5f:ab:48:8b:
                    05:14:6e:24:31:29:bf:40:a1:63:28:fa:cc:48:27:
                    47:47:8e:3f:9b:ec:8f:30:09:be:f3:88:f0:c8:4b:
                    58:ea:cb:c9:ad:0b:26:ba:7f:c6:3c:e8:ce:27:f0:
                    8b:84:9f:66:ec:e7:5a:9b:74:8b:42:dd:f7:b4:78:
                    f9:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:30:53:ED:4B:7C:AB:D3:D1:F6:1A:17:AD:18:C2:27:B7:96:22:0D
            X509v3 Authority Key Identifier:
                keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS200193.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.133.100.0/24
                  92.249.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:66:89:29:d4:e7:f8:fa:78:f6:f4:ee:6d:74:81:6e:ea:b6:
         6c:91:25:66:46:d2:3f:73:90:82:a8:4c:07:50:39:37:1b:c4:
         36:8b:63:a2:ab:14:48:e1:a6:ab:c4:ac:a4:4e:30:38:02:9d:
         1c:1e:8f:4e:84:1b:34:98:50:32:78:19:4f:2d:2a:ce:44:4c:
         cf:2d:5d:9a:61:f5:4f:1b:cf:22:9c:25:61:d4:99:c5:7f:1e:
         4e:14:ff:77:b9:cc:af:43:08:04:1c:29:85:e2:2e:ec:bc:c8:
         54:8a:7d:18:32:7c:56:ba:98:54:43:f9:6e:da:9d:23:ea:40:
         ba:78:35:ac:6c:8f:aa:3f:44:49:d5:34:8f:9b:11:5b:b8:c3:
         05:31:f4:fc:e1:f2:44:a1:9e:0c:25:9d:af:16:d9:01:ed:47:
         f3:16:3c:30:82:bd:b1:5d:0e:3e:74:5e:2e:a7:a1:15:a1:3e:
         ac:7a:c9:35:5b:96:7e:ae:03:f4:52:8a:74:55:b7:41:2b:94:
         a0:4c:32:dd:4e:60:e6:64:42:9b:c6:1d:a5:0e:c9:e7:48:9f:
         e2:a8:a5:d6:b4:cc:30:a3:15:c3:28:55:dc:81:e5:c7:be:2b:
         1b:cd:72:0c:ee:f0:17:f4:16:e6:e9:2c:74:81:66:dd:e5:ec:
         91:3c:30:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 5 13:53:52 2026 by rpki-client