This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS274173.roa
File:                     AS274173.roa (raw, json)
Hash identifier:          IWpRNShEzLBK43LeSEnMhFKO5JXEfrpYUvQv9t5Md9o=
Subject key identifier:   13:6B:6E:EC:53:D3:87:9F:0B:CE:EC:5A:DB:20:39:7A:ED:D1:5A:25
Certificate issuer:       /CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Certificate serial:       5FF7593048FAFB50E47BDBE3646A8FE02A827BF3
Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS274173.roa
Signing time:             Wed 04 Feb 2026 12:57:46 +0000
ROA not before:           Wed 04 Feb 2026 12:52:46 +0000
ROA not after:            Wed 03 Feb 2027 12:57:46 +0000
asID:                     274173
IP address blocks:        194.93.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Feb 2026 12:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:f7:59:30:48:fa:fb:50:e4:7b:db:e3:64:6a:8f:e0:2a:82:7b:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c
        Validity
            Not Before: Feb  4 12:52:46 2026 GMT
            Not After : Feb  3 12:57:46 2027 GMT
        Subject: CN=136B6EEC53D3879F0BCEEC5ADB20397AEDD15A25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:fd:c6:63:c3:30:58:3c:af:d1:e2:27:7e:85:
                    96:b0:90:71:2a:67:8b:09:d2:69:fc:5c:15:95:b8:
                    10:2f:b6:44:aa:22:c8:0b:76:28:95:e4:ec:b7:0e:
                    37:a6:ac:f3:19:76:58:c3:38:05:f3:3b:2f:a9:db:
                    6a:9a:cd:be:41:8d:45:a6:b5:3e:0b:fc:3a:6a:a7:
                    a5:81:dd:b5:7d:1c:21:7e:1d:af:3e:54:10:58:69:
                    ae:83:9c:00:99:b6:cf:7d:81:eb:c8:35:03:e7:d3:
                    96:1b:d8:b0:1f:26:9e:04:34:7c:2e:2f:a3:f0:5c:
                    b2:d5:b2:75:3d:07:b7:f3:fa:ca:4c:ac:e7:d1:e5:
                    c0:68:d6:82:6f:a4:bd:a2:87:74:6e:ad:6c:e1:99:
                    27:21:b3:20:ee:bd:db:25:11:59:ca:55:8c:a9:a0:
                    78:19:5b:d4:a6:12:ac:ec:21:7b:39:a3:8d:37:7e:
                    75:ef:51:de:01:4d:8a:a4:20:03:e3:d4:d3:5a:89:
                    20:4b:1b:2c:37:46:5b:93:a8:4f:26:c5:08:96:36:
                    ad:44:47:04:fa:a1:32:95:0d:10:8b:e7:5b:ce:cd:
                    6c:e8:0b:73:e2:27:0f:4f:50:26:e9:c5:9f:ae:c1:
                    94:54:f5:b1:09:75:df:74:51:d3:59:10:89:60:21:
                    43:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:6B:6E:EC:53:D3:87:9F:0B:CE:EC:5A:DB:20:39:7A:ED:D1:5A:25
            X509v3 Authority Key Identifier:
                keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS274173.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.93.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:4d:a8:0c:4e:0f:25:41:c3:44:42:36:0d:55:bf:50:22:28:
         47:8b:91:df:b1:f5:16:04:7d:3d:23:33:61:4a:80:7b:6f:31:
         af:23:28:4e:4c:f1:dd:30:23:7e:ac:da:b4:2a:e5:95:97:da:
         09:07:8a:a2:58:b4:48:ae:80:ce:4b:b4:f4:89:bb:2d:fa:b5:
         5a:bb:5d:90:75:39:e0:c3:be:13:ca:d8:d8:bd:2a:38:90:f9:
         2f:3e:c8:2d:f1:1e:00:b9:74:c0:0c:49:39:52:ac:9c:bf:39:
         2a:2e:88:3f:56:a6:28:e6:63:28:03:6f:b0:99:35:41:a7:4f:
         a2:c6:71:3a:0a:23:cb:dc:15:77:3d:b2:7e:ba:9b:6a:ca:b5:
         3f:77:c4:d4:49:a6:8b:c5:35:9b:4f:90:3a:9b:dd:c7:8a:c1:
         39:c1:fd:57:37:1d:15:e7:d1:91:18:70:1e:f4:a6:44:19:33:
         ee:4f:e1:d0:0a:93:2b:f1:c6:0d:ca:24:f3:50:01:05:1b:f6:
         c5:15:ea:a0:63:06:fc:42:1c:b4:7f:d5:3d:53:88:0f:14:4b:
         a7:c1:c7:76:53:d0:aa:b5:b0:8e:38:71:6f:43:21:0b:79:c1:
         c1:27:34:c3:f3:4f:78:b0:78:e0:ce:78:1e:97:e3:91:4f:3d:
         36:29:06:d5
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUX/dZMEj6+1Dke9vjZGqP4CqCe/MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWRmYmZmMjE3MTA1ZGY4ODc3ZDQ2M2Y2ZTliYWMyOGE0
MDg0ZDIwYzAeFw0yNjAyMDQxMjUyNDZaFw0yNzAyMDMxMjU3NDZaMDMxMTAvBgNV
BAMTKDEzNkI2RUVDNTNEMzg3OUYwQkNFRUM1QURCMjAzOTdBRUREMTVBMjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM/cZjwzBYPK/R4id+hZawkHEq
Z4sJ0mn8XBWVuBAvtkSqIsgLdiiV5Oy3DjemrPMZdljDOAXzOy+p22qazb5BjUWm
tT4L/Dpqp6WB3bV9HCF+Ha8+VBBYaa6DnACZts99gevINQPn05Yb2LAfJp4ENHwu
L6PwXLLVsnU9B7fz+spMrOfR5cBo1oJvpL2ih3RurWzhmSchsyDuvdslEVnKVYyp
oHgZW9SmEqzsIXs5o403fnXvUd4BTYqkIAPj1NNaiSBLGyw3RluTqE8mxQiWNq1E
RwT6oTKVDRCL51vOzWzoC3PiJw9PUCbpxZ+uwZRU9bEJdd90UdNZEIlgIUOPAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUE2tu7FPTh58Lzuxa2yA5eu3RWiUwHwYDVR0j
BBgwFoAUnfv/IXEF34h31GP26brCikCE0gwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTViNGQ5ZTgtNDExMS00Mzk0LWEzYTYtYmQ4MjUxZTdm
YmJkLzAvOURGQkZGMjE3MTA1REY4ODc3RDQ2M0Y2RTlCQUMyOEE0MDg0RDIwQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25mdl9JWEVGMzRoMzFHUDI2YnJDaWtD
RTBndy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzU1YjRkOWU4LTQxMTEt
NDM5NC1hM2E2LWJkODI1MWU3ZmJiZC8wL0FTMjc0MTczLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwl08
MA0GCSqGSIb3DQEBCwUAA4IBAQCeTagMTg8lQcNEQjYNVb9QIihHi5HfsfUWBH09
IzNhSoB7bzGvIyhOTPHdMCN+rNq0KuWVl9oJB4qiWLRIroDOS7T0ibst+rVau12Q
dTngw74TytjYvSo4kPkvPsgt8R4AuXTADEk5UqycvzkqLog/VqYo5mMoA2+wmTVB
p0+ixnE6CiPL3BV3PbJ+uptqyrU/d8TUSaaLxTWbT5A6m93HisE5wf1XNx0V59GR
GHAe9KZEGTPuT+HQCpMr8cYNyiTzUAEFG/bFFeqgYwb8Qhy0f9U9U4gPFEunwcd2
U9CqtbCOOHFvQyELecHBJzTD8094sHjgzngel+ORTz02KQbV
-----END CERTIFICATE-----
Generated at Thu Feb 5 13:54:27 2026 by rpki-client