This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS44382.roa
File:                     AS44382.roa (raw, json)
Hash identifier:          ey/FXKMaMVtNv3gLhFi/43RaJNxcMQK5xCINwW6UATo=
Subject key identifier:   4C:6C:7C:D9:CC:FD:60:74:5D:A8:2E:B4:3D:F7:C3:CC:E5:E8:AC:54
Certificate issuer:       /CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Certificate serial:       6E0B44D1D9F9A392ACE80D7F902E7CA1A08B9F38
Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS44382.roa
Signing time:             Wed 04 Feb 2026 12:57:46 +0000
ROA not before:           Wed 04 Feb 2026 12:52:46 +0000
ROA not after:            Wed 03 Feb 2027 12:57:46 +0000
asID:                     44382
IP address blocks:        31.40.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Feb 2026 12:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:0b:44:d1:d9:f9:a3:92:ac:e8:0d:7f:90:2e:7c:a1:a0:8b:9f:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c
        Validity
            Not Before: Feb  4 12:52:46 2026 GMT
            Not After : Feb  3 12:57:46 2027 GMT
        Subject: CN=4C6C7CD9CCFD60745DA82EB43DF7C3CCE5E8AC54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c7:85:78:ec:e9:6d:5a:8c:a8:4a:cc:b4:28:
                    4a:39:16:0d:9e:34:37:96:04:ca:e3:3c:ed:e4:33:
                    2d:67:53:fc:4e:06:cf:4a:e8:12:b3:f0:b1:aa:27:
                    db:a5:b3:b9:fb:7f:9d:67:17:d0:9d:9e:40:7b:ec:
                    01:fb:7b:c9:3a:3b:1a:85:29:70:95:c8:aa:67:3f:
                    8d:c8:0a:f4:53:ef:73:14:7e:40:01:b7:54:96:de:
                    6a:64:57:1f:48:3f:5a:e0:25:e3:a3:5e:ee:18:e1:
                    12:ba:86:ac:8d:88:23:58:be:c9:37:a9:34:16:f7:
                    14:85:35:b0:09:60:6a:cd:87:ec:fd:f4:75:a0:3f:
                    3b:21:42:f6:17:b3:bf:da:b7:b1:eb:91:6d:5a:92:
                    ac:07:36:c4:48:d9:67:ae:8d:dd:5b:2a:46:bb:c8:
                    ec:1e:d1:34:54:d0:50:e2:7c:8f:11:60:8b:1d:2e:
                    85:7e:d7:e5:35:f4:67:1e:b8:c0:0e:0b:d9:f5:d5:
                    ad:d5:ce:26:c8:c9:3d:d2:ea:7d:79:e1:d1:e2:39:
                    27:6c:7b:e5:79:56:d9:01:ed:3a:80:ca:32:3e:c2:
                    5a:2c:9e:8e:9a:87:e6:2b:03:5a:dd:fa:47:de:73:
                    1c:cb:d3:23:a0:aa:21:7e:32:76:0b:63:5d:fa:b2:
                    2c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:6C:7C:D9:CC:FD:60:74:5D:A8:2E:B4:3D:F7:C3:CC:E5:E8:AC:54
            X509v3 Authority Key Identifier:
                keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS44382.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.40.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:22:7d:f1:8c:c6:52:69:a0:d3:40:89:99:69:53:0e:f2:72:
         64:87:1f:cc:58:d5:e5:d4:d6:72:88:f3:37:a3:45:7e:58:1e:
         f9:9e:6b:13:93:f8:eb:a0:20:a3:cf:b0:3d:92:0a:d3:6e:f7:
         a6:e7:6d:1b:d2:65:b2:ef:8f:5a:54:c7:b4:6e:85:30:fd:be:
         af:cf:8b:67:ad:0f:cb:bd:13:57:c6:e8:7c:fd:16:4d:ab:47:
         9a:f9:2a:a7:c8:31:b0:5d:17:68:95:45:69:25:c0:4d:26:83:
         b5:b6:f9:31:e3:fa:56:1a:43:ad:40:26:4a:dc:9d:76:af:4e:
         b6:a4:1c:f5:73:cb:c9:d4:bb:45:e7:c1:f2:1d:15:fe:21:fc:
         ce:7d:24:76:cc:aa:c1:50:33:3a:7b:46:3e:d1:b2:81:0f:5a:
         07:51:23:c4:30:bf:83:22:1a:11:35:40:8a:e0:63:c3:84:37:
         ba:1d:f1:6b:90:e8:10:e5:3a:1f:eb:9b:8e:56:60:48:80:91:
         05:5f:71:8b:7e:99:bf:ea:47:4e:16:dd:86:3e:c2:d7:ff:e6:
         c6:47:4d:b8:2f:f5:be:1d:06:c3:2b:7d:fb:86:95:2d:37:a3:
         cc:90:d2:f1:0f:b6:34:66:e8:b0:3d:fd:f4:7b:e8:17:5a:cb:
         dd:37:f3:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 5 13:53:54 2026 by rpki-client