This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS213568.roa
File:                     AS213568.roa (raw, json)
Hash identifier:          +fVg17Im7t/pAzhgDt4ZwRZNt/5Vvuf7gv0TMT+FlCI=
Subject key identifier:   9C:51:4E:9C:C6:C3:B1:1E:B8:A8:F5:45:D7:26:9F:ED:6D:7F:D2:BF
Certificate issuer:       /CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Certificate serial:       56D7FF42522AD6C1CBE3C8593EFEB32469C32E25
Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS213568.roa
Signing time:             Wed 04 Feb 2026 12:57:33 +0000
ROA not before:           Wed 04 Feb 2026 12:52:33 +0000
ROA not after:            Wed 03 Feb 2027 12:57:33 +0000
asID:                     213568
IP address blocks:        92.249.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Feb 2026 12:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:d7:ff:42:52:2a:d6:c1:cb:e3:c8:59:3e:fe:b3:24:69:c3:2e:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c
        Validity
            Not Before: Feb  4 12:52:33 2026 GMT
            Not After : Feb  3 12:57:33 2027 GMT
        Subject: CN=9C514E9CC6C3B11EB8A8F545D7269FED6D7FD2BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:13:2a:5c:ee:d5:e1:d8:70:df:3b:eb:b7:98:
                    4b:e6:8e:01:53:26:33:6c:59:dd:c8:79:56:be:ef:
                    8e:d2:aa:f0:d1:49:42:fc:59:a7:3e:bc:f2:63:30:
                    8c:42:d6:70:d0:8b:e2:d2:de:89:25:b6:56:4b:65:
                    f7:1a:77:ee:ee:26:55:f2:6b:99:fa:e9:6d:48:50:
                    6d:4f:06:f9:ec:e9:7d:26:42:d6:cc:f7:a9:d8:aa:
                    dc:22:6a:a5:ce:71:19:22:78:0a:73:78:fd:3a:5c:
                    68:71:f5:45:cb:2a:54:a2:c8:ef:07:ad:82:dd:28:
                    ee:33:7f:00:7f:2b:36:4b:9b:5a:36:65:b2:6a:31:
                    ee:e9:1d:6b:7f:6a:ae:6c:db:fa:84:b0:8f:4e:c4:
                    3d:66:54:e5:a5:a9:5c:d3:e5:ff:26:af:f0:97:df:
                    ca:37:63:04:c1:09:b6:8e:e5:56:69:1b:43:28:40:
                    9b:18:a9:c1:8e:49:fa:6b:81:f0:f2:a0:5e:98:02:
                    00:65:b5:7f:21:84:48:94:a6:69:36:77:35:a0:eb:
                    02:b7:30:06:b0:5c:69:29:4d:ce:cf:84:e0:f8:47:
                    0a:ad:44:89:bf:84:a6:53:b9:9b:2a:c2:54:be:79:
                    08:6c:db:0d:1a:a7:de:9c:99:31:2c:ef:0f:71:c9:
                    4d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:51:4E:9C:C6:C3:B1:1E:B8:A8:F5:45:D7:26:9F:ED:6D:7F:D2:BF
            X509v3 Authority Key Identifier:
                keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS213568.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.249.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:c0:fb:9f:ea:d0:22:cd:0f:cc:4a:7d:a0:48:93:38:7f:a7:
         e0:2c:e6:7c:0c:10:00:c0:8e:b9:86:d0:19:59:43:67:c3:2b:
         08:06:4b:1a:6f:55:1a:8f:90:21:37:9a:09:fe:79:84:65:3c:
         c8:45:a8:fa:06:2a:3e:de:94:10:ae:22:5b:37:e8:74:29:d0:
         65:0d:77:7a:0e:00:70:23:a5:89:ee:9d:3f:55:d1:17:5c:3c:
         be:1e:81:19:f0:d0:62:a5:57:c8:2c:c6:e8:7d:0b:9c:e9:43:
         6a:3b:44:58:79:94:e5:6c:05:51:66:d7:24:02:30:35:bd:ee:
         25:0c:4f:ff:47:95:0b:05:00:81:03:cb:80:aa:05:4f:49:53:
         14:91:77:9b:a7:f0:91:8e:49:3a:c3:a1:32:80:40:c7:f6:b2:
         e1:18:7e:f8:1d:8e:55:39:56:4f:1d:67:9e:b8:37:41:b4:b9:
         cd:bd:ca:a6:84:cd:98:b5:f0:8e:d2:ac:50:d5:76:f2:35:b8:
         7c:5a:77:76:1c:c9:14:e6:56:18:4e:7a:3e:88:44:3f:05:90:
         ef:98:be:98:62:b1:03:1f:32:31:2e:76:ad:7e:97:54:d9:de:
         90:38:8d:11:66:d8:34:d4:63:c3:f3:48:02:81:10:f2:e0:d3:
         ff:39:06:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 5 13:59:24 2026 by rpki-client