This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS213637.roa
File:                     AS213637.roa (raw, json)
Hash identifier:          sSZlrGEod6MvlW/9wNx4ErPVozgzglDHupLPRD4sZOk=
Subject key identifier:   F1:CF:9E:FE:88:D8:84:0E:EB:73:A4:6B:0D:8D:FE:7C:BF:AB:A0:C5
Certificate issuer:       /CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Certificate serial:       40DE61657BE7330B6EFF1DC06B147E95169D310B
Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS213637.roa
Signing time:             Wed 04 Feb 2026 12:57:35 +0000
ROA not before:           Wed 04 Feb 2026 12:52:35 +0000
ROA not after:            Wed 03 Feb 2027 12:57:35 +0000
asID:                     213637
IP address blocks:        193.17.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Feb 2026 03:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:de:61:65:7b:e7:33:0b:6e:ff:1d:c0:6b:14:7e:95:16:9d:31:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c
        Validity
            Not Before: Feb  4 12:52:35 2026 GMT
            Not After : Feb  3 12:57:35 2027 GMT
        Subject: CN=F1CF9EFE88D8840EEB73A46B0D8DFE7CBFABA0C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:49:b1:51:ef:a8:a0:63:90:c9:61:de:6f:21:
                    64:90:ec:29:be:22:72:c8:76:10:94:bf:86:12:89:
                    ed:a8:93:90:95:53:e2:d1:7d:dd:3e:4e:0b:02:c4:
                    2b:94:50:11:38:8f:af:1a:fb:e4:dd:38:04:f3:3e:
                    2b:7d:2f:42:48:04:2b:47:75:11:08:2f:2d:19:69:
                    1c:d3:e5:9b:4b:ae:36:96:95:4c:64:dc:a3:e9:63:
                    9f:86:fc:b0:b7:ed:c0:4c:fe:1f:df:41:36:b3:ba:
                    4d:f6:ba:5f:6d:38:37:46:8e:40:0d:a7:c4:44:11:
                    42:e1:5a:b5:f4:10:58:1a:50:89:9a:ff:6c:98:dc:
                    fb:ce:7a:a5:d5:c3:68:3d:58:4f:4d:f0:1f:59:b6:
                    62:a7:10:fa:f9:56:bf:fd:9c:d0:18:9a:59:22:db:
                    9d:f7:41:b7:c2:5e:45:80:68:c0:44:26:d8:5c:c8:
                    b9:b2:48:df:06:8f:db:55:34:10:de:90:95:0f:bb:
                    d6:4d:5a:d1:c2:fb:c5:dc:cd:f9:6c:75:c5:80:a7:
                    8e:1e:ac:92:f2:38:4f:ea:36:d5:63:a7:13:b4:4a:
                    a0:79:3f:20:6e:b7:d6:f7:ba:d2:5a:49:17:f7:b4:
                    d4:a6:6a:26:51:47:21:cf:22:ec:1b:e8:a4:6f:d4:
                    b6:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:CF:9E:FE:88:D8:84:0E:EB:73:A4:6B:0D:8D:FE:7C:BF:AB:A0:C5
            X509v3 Authority Key Identifier:
                keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS213637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.17.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:cd:00:ac:49:ed:c8:8a:1d:c3:ad:03:44:40:10:3f:a2:b0:
         1a:2a:e7:e3:73:79:7c:9f:7f:e5:4b:fd:5e:df:d9:c9:cf:a3:
         2f:32:9c:63:bc:4c:c1:59:31:bd:15:6e:8e:a2:79:9b:2a:be:
         1d:b7:6e:7d:b3:fd:d6:45:27:23:91:01:f9:79:c8:77:da:f3:
         5f:11:da:20:4d:69:5a:a7:7b:4f:b8:ef:1c:29:de:48:10:b0:
         03:2a:61:3b:3f:3b:c2:38:66:4e:71:f0:dd:79:86:10:1c:3a:
         d8:bd:65:f6:27:e1:2c:ff:0b:c5:c1:10:85:ed:64:f9:c8:62:
         6d:3a:51:6c:ad:6b:1e:05:6a:4a:65:f1:de:86:3d:40:d8:e1:
         64:65:0f:5d:97:ed:12:99:5f:13:4c:06:76:54:5f:2a:f0:f8:
         68:0a:e9:2d:ba:01:bf:b3:88:ef:91:8e:dd:ac:2a:ce:e5:b0:
         17:ae:40:61:7d:9c:36:1d:af:48:d1:43:72:eb:5b:82:2f:ad:
         4a:20:83:97:23:65:00:9b:d1:9a:cb:d5:8c:5b:f0:24:f1:b4:
         6a:27:f0:f2:1c:e6:28:0b:dd:6d:da:fe:ec:7a:93:f9:d7:a2:
         fb:6b:52:b6:76:d1:54:3e:dc:7d:10:76:fc:67:64:eb:f8:cc:
         72:d4:7d:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 5 13:52:23 2026 by rpki-client