This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS203545.roa
File:                     AS203545.roa (raw, json)
Hash identifier:          GQqpsm1+6ou2IRoVDwiH/asmMOpXeIt8DdfwDQXwmr0=
Subject key identifier:   3C:5C:B5:F2:6F:DA:52:77:07:5F:5A:BB:EE:2A:D4:AF:29:88:9B:DB
Certificate issuer:       /CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Certificate serial:       7CC1F75A700430196E263212355EAC37472487F9
Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS203545.roa
Signing time:             Wed 04 Feb 2026 12:57:34 +0000
ROA not before:           Wed 04 Feb 2026 12:52:34 +0000
ROA not after:            Wed 03 Feb 2027 12:57:34 +0000
asID:                     203545
IP address blocks:        141.98.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Feb 2026 12:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:c1:f7:5a:70:04:30:19:6e:26:32:12:35:5e:ac:37:47:24:87:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c
        Validity
            Not Before: Feb  4 12:52:34 2026 GMT
            Not After : Feb  3 12:57:34 2027 GMT
        Subject: CN=3C5CB5F26FDA5277075F5ABBEE2AD4AF29889BDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:4f:08:07:39:3e:8b:b4:1b:f6:ed:73:d8:19:
                    fd:d0:1c:16:75:d6:a2:11:73:8e:ad:61:75:41:e6:
                    4f:d4:ae:79:ab:e8:04:ca:7e:f5:c3:c1:d2:77:c3:
                    c1:c5:f1:7d:6f:2a:58:a4:d6:3a:fa:cf:70:12:53:
                    9e:31:3c:a7:c8:1f:a8:78:4a:bf:fb:af:2c:94:da:
                    e5:4d:27:b6:17:7a:fd:0a:2b:61:2c:65:24:d6:8f:
                    dd:8c:36:42:27:3b:f1:81:01:ad:ac:47:07:de:4a:
                    73:99:13:57:5a:13:7c:23:8f:3a:c3:0d:b9:16:f1:
                    b6:ec:1a:51:34:4f:58:c4:53:3d:c9:cb:8b:78:e4:
                    85:7d:02:49:39:d8:ee:26:bb:ac:b1:aa:61:39:92:
                    38:ac:e3:13:72:b8:96:ab:13:d2:74:16:1a:3d:aa:
                    c1:9f:ba:8f:72:de:9a:4e:0e:3a:c1:e1:e1:e0:54:
                    64:bd:bf:1e:58:b7:22:35:fe:96:9f:11:70:e9:d7:
                    c8:29:be:86:8f:2a:32:4b:e9:c3:ba:d8:55:3e:b4:
                    0d:62:1f:a2:f5:b1:57:03:0e:77:cf:1f:5d:ce:12:
                    34:26:17:c4:54:63:d5:05:42:0f:81:e8:27:95:e3:
                    ef:8a:7c:85:10:0d:74:6d:09:68:91:d0:49:98:d7:
                    58:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:5C:B5:F2:6F:DA:52:77:07:5F:5A:BB:EE:2A:D4:AF:29:88:9B:DB
            X509v3 Authority Key Identifier:
                keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS203545.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.98.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:97:8f:92:fc:ef:0d:7e:56:3a:96:f4:b4:4f:a2:32:d0:9a:
         e4:a8:99:a7:7f:42:1b:25:ca:a7:14:10:49:9b:1f:6e:4c:d5:
         a3:2f:3a:0c:ac:a4:4b:6b:df:ad:dd:b8:e4:2b:80:80:5b:fc:
         8a:34:61:6b:a5:2a:94:14:e4:1a:60:dc:06:94:84:16:93:9c:
         61:4d:2d:42:aa:91:7d:2b:cf:2c:c2:8d:eb:24:9a:66:49:1c:
         22:9a:8d:79:cd:ab:28:fd:1a:4d:1e:f4:04:9d:05:65:56:5b:
         5c:60:94:d7:a0:7e:cf:fd:8c:36:8b:3f:f1:7d:51:4b:c0:2f:
         53:8c:ac:70:79:a6:a0:76:2c:a0:4b:aa:64:7b:9e:90:e5:2f:
         87:b8:20:aa:89:4f:12:38:ee:0c:d2:ed:cf:ff:97:04:f2:8e:
         a4:95:ca:06:09:65:d5:9c:b6:ec:d6:4d:bc:4c:ed:61:24:dc:
         45:0b:53:f4:dd:e6:64:31:61:1b:88:de:28:9b:86:c0:27:1e:
         5b:25:30:ad:fd:21:c2:51:3e:16:fe:20:9e:db:1f:66:22:31:
         de:34:c7:f7:3d:68:4d:80:5f:1d:18:6a:3e:85:f6:f9:a1:4c:
         99:e9:4e:47:bf:b3:5c:0d:41:3c:a6:10:93:d0:64:05:1f:fa:
         c6:b8:1d:2f
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUfMH3WnAEMBluJjISNV6sN0ckh/kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWRmYmZmMjE3MTA1ZGY4ODc3ZDQ2M2Y2ZTliYWMyOGE0
MDg0ZDIwYzAeFw0yNjAyMDQxMjUyMzRaFw0yNzAyMDMxMjU3MzRaMDMxMTAvBgNV
BAMTKDNDNUNCNUYyNkZEQTUyNzcwNzVGNUFCQkVFMkFENEFGMjk4ODlCREIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsTwgHOT6LtBv27XPYGf3QHBZ1
1qIRc46tYXVB5k/Urnmr6ATKfvXDwdJ3w8HF8X1vKlik1jr6z3ASU54xPKfIH6h4
Sr/7ryyU2uVNJ7YXev0KK2EsZSTWj92MNkInO/GBAa2sRwfeSnOZE1daE3wjjzrD
DbkW8bbsGlE0T1jEUz3Jy4t45IV9Akk52O4mu6yxqmE5kjis4xNyuJarE9J0Fho9
qsGfuo9y3ppODjrB4eHgVGS9vx5YtyI1/pafEXDp18gpvoaPKjJL6cO62FU+tA1i
H6L1sVcDDnfPH13OEjQmF8RUY9UFQg+B6CeV4++KfIUQDXRtCWiR0EmY11jnAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUPFy18m/aUncHX1q77irUrymIm9swHwYDVR0j
BBgwFoAUnfv/IXEF34h31GP26brCikCE0gwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTViNGQ5ZTgtNDExMS00Mzk0LWEzYTYtYmQ4MjUxZTdm
YmJkLzAvOURGQkZGMjE3MTA1REY4ODc3RDQ2M0Y2RTlCQUMyOEE0MDg0RDIwQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25mdl9JWEVGMzRoMzFHUDI2YnJDaWtD
RTBndy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzU1YjRkOWU4LTQxMTEt
NDM5NC1hM2E2LWJkODI1MWU3ZmJiZC8wL0FTMjAzNTQ1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjWIy
MA0GCSqGSIb3DQEBCwUAA4IBAQABl4+S/O8NflY6lvS0T6Iy0JrkqJmnf0IbJcqn
FBBJmx9uTNWjLzoMrKRLa9+t3bjkK4CAW/yKNGFrpSqUFOQaYNwGlIQWk5xhTS1C
qpF9K88swo3rJJpmSRwimo15zaso/RpNHvQEnQVlVltcYJTXoH7P/Yw2iz/xfVFL
wC9TjKxweaagdiygS6pke56Q5S+HuCCqiU8SOO4M0u3P/5cE8o6klcoGCWXVnLbs
1k28TO1hJNxFC1P03eZkMWEbiN4om4bAJx5bJTCt/SHCUT4W/iCe2x9mIjHeNMf3
PWhNgF8dGGo+hfb5oUyZ6U5Hv7NcDUE8phCT0GQFH/rGuB0v
-----END CERTIFICATE-----
Generated at Thu Feb 5 13:52:23 2026 by rpki-client