This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS29262.roa
File:                     AS29262.roa (raw, json)
Hash identifier:          DR/RnG7apvSEmfPTqikVHo7R7fxurgXxnxvc2j7nzcQ=
Subject key identifier:   EE:63:2B:19:57:C5:C6:BE:43:F0:4E:ED:ED:8F:CD:12:48:D6:99:9E
Certificate issuer:       /CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Certificate serial:       326A34DD7570B80F1910EE03C3F3A79AEA4EDD4F
Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS29262.roa
Signing time:             Wed 04 Feb 2026 12:57:52 +0000
ROA not before:           Wed 04 Feb 2026 12:52:52 +0000
ROA not after:            Wed 03 Feb 2027 12:57:52 +0000
asID:                     29262
IP address blocks:        62.182.32.0/24 maxlen: 24
                          62.182.33.0/24 maxlen: 24
                          62.182.34.0/24 maxlen: 24
                          62.182.35.0/24 maxlen: 24
                          77.241.72.0/24 maxlen: 24
                          77.241.73.0/24 maxlen: 24
                          77.241.74.0/24 maxlen: 24
                          77.241.75.0/24 maxlen: 24
                          139.28.32.0/22 maxlen: 22
                          139.28.240.0/24 maxlen: 24
                          139.28.241.0/24 maxlen: 24
                          194.169.92.0/24 maxlen: 24
                          194.169.93.0/24 maxlen: 24
                          194.169.94.0/24 maxlen: 24
                          194.169.95.0/24 maxlen: 24
                          2a02:f240::/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Feb 2026 03:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:6a:34:dd:75:70:b8:0f:19:10:ee:03:c3:f3:a7:9a:ea:4e:dd:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c
        Validity
            Not Before: Feb  4 12:52:52 2026 GMT
            Not After : Feb  3 12:57:52 2027 GMT
        Subject: CN=EE632B1957C5C6BE43F04EEDED8FCD1248D6999E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:db:07:46:80:46:be:40:47:d1:36:03:c5:e8:
                    c7:44:f5:31:d7:19:32:4a:29:31:9e:b0:db:05:93:
                    dd:d9:47:71:c6:86:9b:ba:8a:7f:34:dd:a8:97:ef:
                    4a:14:72:2f:76:84:07:cf:7d:f3:8c:d5:2d:9e:8a:
                    24:67:46:0f:31:88:70:7e:72:5a:65:62:61:ba:8f:
                    12:f4:1a:ad:00:d8:80:fd:ab:96:84:59:76:d4:aa:
                    3e:bf:07:61:25:31:15:2e:0f:1e:26:83:91:94:30:
                    f4:91:d1:06:9c:81:fe:06:9e:92:6d:e1:2c:fa:2b:
                    42:3b:ed:8a:9a:a5:74:dc:36:41:c2:b0:49:78:bd:
                    55:68:38:57:5c:2d:ce:40:44:4c:5e:42:b4:19:5d:
                    21:86:09:ab:c4:b7:79:96:6b:00:11:cd:d7:58:d4:
                    cc:09:b3:fc:1d:6c:d8:f7:e0:8f:67:18:a4:e9:fa:
                    61:b6:34:36:8a:9c:dd:06:4d:a8:2f:9d:31:27:c6:
                    c1:01:18:b5:42:29:29:05:7a:23:fa:24:f8:99:cb:
                    f0:d8:00:b8:03:2f:d0:be:f4:93:9d:3b:a6:3d:c5:
                    b3:32:41:ad:57:ab:3f:ad:a3:78:02:ac:40:ed:ca:
                    a3:95:ab:5c:b3:b3:98:2b:cc:cc:bd:7f:ba:fd:bd:
                    c7:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:63:2B:19:57:C5:C6:BE:43:F0:4E:ED:ED:8F:CD:12:48:D6:99:9E
            X509v3 Authority Key Identifier:
                keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS29262.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.182.32.0/22
                  77.241.72.0/22
                  139.28.32.0/22
                  139.28.240.0/23
                  194.169.92.0/22
                IPv6:
                  2a02:f240::/29

    Signature Algorithm: sha256WithRSAEncryption
         1f:3f:9d:54:94:a3:60:86:f3:b2:9d:f0:4d:07:ff:03:d0:20:
         db:16:7c:cd:25:22:f5:71:23:85:9a:78:17:52:60:67:b7:00:
         94:e6:d8:c3:73:cd:bb:23:75:99:66:34:b9:f1:06:cb:8b:1d:
         9f:7d:45:16:2a:db:15:a3:e4:5e:37:fa:75:b1:e2:cb:c1:62:
         52:97:dc:35:40:93:36:3c:bd:81:95:49:9d:fc:86:e2:fb:fc:
         32:56:a7:85:97:55:a8:ab:fd:79:b3:25:92:06:f7:15:44:63:
         e7:c5:b4:00:66:56:cf:6c:1d:91:1d:aa:cb:b9:e2:7e:5d:f7:
         51:bb:eb:0f:3c:f0:0a:29:07:26:6f:fe:e3:6a:fd:d1:5e:70:
         46:97:ec:c3:46:b5:f5:2b:9b:f4:be:93:0f:86:48:b7:fd:d8:
         c1:d3:fe:7f:88:b1:35:b5:c3:75:55:9d:20:1c:e7:6d:b2:74:
         e1:00:28:2d:e9:a1:51:4c:5c:74:3f:a7:0d:7f:ad:d7:c9:b2:
         3e:23:55:92:80:8b:23:d6:7d:5f:25:43:41:60:48:24:4a:72:
         5f:6e:b5:e2:11:ff:2a:7d:07:03:be:cc:c1:a5:81:0b:6b:72:
         78:2f:25:d6:cc:50:eb:7c:ab:00:80:a5:6a:de:2a:8e:9c:30:
         19:ea:8d:ca
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUMmo03XVwuA8ZEO4Dw/OnmupO3U8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWRmYmZmMjE3MTA1ZGY4ODc3ZDQ2M2Y2ZTliYWMyOGE0
MDg0ZDIwYzAeFw0yNjAyMDQxMjUyNTJaFw0yNzAyMDMxMjU3NTJaMDMxMTAvBgNV
BAMTKEVFNjMyQjE5NTdDNUM2QkU0M0YwNEVFREVEOEZDRDEyNDhENjk5OUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD02wdGgEa+QEfRNgPF6MdE9THX
GTJKKTGesNsFk93ZR3HGhpu6in803aiX70oUci92hAfPffOM1S2eiiRnRg8xiHB+
clplYmG6jxL0Gq0A2ID9q5aEWXbUqj6/B2ElMRUuDx4mg5GUMPSR0Qacgf4GnpJt
4Sz6K0I77YqapXTcNkHCsEl4vVVoOFdcLc5ARExeQrQZXSGGCavEt3mWawARzddY
1MwJs/wdbNj34I9nGKTp+mG2NDaKnN0GTagvnTEnxsEBGLVCKSkFeiP6JPiZy/DY
ALgDL9C+9JOdO6Y9xbMyQa1Xqz+to3gCrEDtyqOVq1yzs5grzMy9f7r9vcezAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQU7mMrGVfFxr5D8E7t7Y/NEkjWmZ4wHwYDVR0j
BBgwFoAUnfv/IXEF34h31GP26brCikCE0gwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTViNGQ5ZTgtNDExMS00Mzk0LWEzYTYtYmQ4MjUxZTdm
YmJkLzAvOURGQkZGMjE3MTA1REY4ODc3RDQ2M0Y2RTlCQUMyOEE0MDg0RDIwQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25mdl9JWEVGMzRoMzFHUDI2YnJDaWtD
RTBndy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzU1YjRkOWU4LTQxMTEt
NDM5NC1hM2E2LWJkODI1MWU3ZmJiZC8wL0FTMjkyNjIucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwRgYIKwYBBQUHAQcBAf8ENzA1MCQEAgABMB4DBAI+tiAD
BAJN8UgDBAKLHCADBAGLHPADBALCqVwwDQQCAAIwBwMFAyoC8kAwDQYJKoZIhvcN
AQELBQADggEBAB8/nVSUo2CG87Kd8E0H/wPQINsWfM0lIvVxI4WaeBdSYGe3AJTm
2MNzzbsjdZlmNLnxBsuLHZ99RRYq2xWj5F43+nWx4svBYlKX3DVAkzY8vYGVSZ38
huL7/DJWp4WXVair/XmzJZIG9xVEY+fFtABmVs9sHZEdqsu54n5d91G76w888Aop
ByZv/uNq/dFecEaX7MNGtfUrm/S+kw+GSLf92MHT/n+IsTW1w3VVnSAc522ydOEA
KC3poVFMXHQ/pw1/rdfJsj4jVZKAiyPWfV8lQ0FgSCRKcl9uteIR/yp9BwO+zMGl
gQtrcngvJdbMUOt8qwCApWreKo6cMBnqjco=
-----END CERTIFICATE-----
Generated at Thu Feb 5 13:59:24 2026 by rpki-client