This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS834.roa
File:                     AS834.roa (raw, json)
Hash identifier:          zPBzeB+4YGL5zlzgMCGaC3xF/yuKgh06Nuvh9dO9ZFw=
Subject key identifier:   33:F1:29:A6:CA:6D:D1:A4:B0:88:29:A3:2F:A4:91:14:60:28:F1:1D
Certificate issuer:       /CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Certificate serial:       01E85CD461FEE5AE780FA352D2FD3B6B1E71C50A
Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS834.roa
Signing time:             Thu 05 Feb 2026 09:05:28 +0000
ROA not before:           Thu 05 Feb 2026 09:00:28 +0000
ROA not after:            Thu 04 Feb 2027 09:05:28 +0000
asID:                     834
IP address blocks:        83.171.246.0/24 maxlen: 24
                          193.32.205.0/24 maxlen: 24
                          193.187.111.0/24 maxlen: 24
                          193.187.134.0/24 maxlen: 24
                          194.93.50.0/23 maxlen: 24
                          212.115.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Feb 2026 12:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:e8:5c:d4:61:fe:e5:ae:78:0f:a3:52:d2:fd:3b:6b:1e:71:c5:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c
        Validity
            Not Before: Feb  5 09:00:28 2026 GMT
            Not After : Feb  4 09:05:28 2027 GMT
        Subject: CN=33F129A6CA6DD1A4B08829A32FA491146028F11D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:07:4f:ad:d8:5e:4a:c4:3f:d0:e2:db:f5:ae:
                    c9:3c:fb:e9:c7:22:4e:69:54:d1:13:b6:94:e0:44:
                    f6:87:68:5a:82:d7:84:bd:3e:55:9d:9e:b7:2e:a3:
                    cc:10:ca:9d:19:bd:57:07:95:fc:46:e0:78:ec:3f:
                    9b:8d:55:43:91:a0:b6:81:bc:ea:e7:52:65:4b:38:
                    6d:86:05:3d:96:bd:4c:62:e3:8d:30:ff:9c:84:28:
                    63:6d:7f:f0:ff:0d:fe:44:57:c9:13:90:fb:31:49:
                    36:7b:c6:36:40:82:8a:28:ab:64:d7:9b:b0:4e:f2:
                    a9:6f:3a:b2:d8:04:66:62:47:98:40:cd:59:da:3f:
                    2e:9a:c7:ce:da:0f:5a:a5:f9:21:1b:4f:0f:dd:a0:
                    fe:b0:52:25:bc:e9:cd:75:f0:da:45:e7:5b:ae:61:
                    2a:aa:35:14:9f:3b:39:62:ef:78:76:fe:76:06:cd:
                    1b:ad:05:e7:f0:2c:10:13:ee:16:e8:2a:02:81:7f:
                    fc:09:50:5c:6f:49:47:76:1d:45:7b:6a:21:7b:2c:
                    d7:1a:0b:c6:3b:3c:95:56:e0:2f:4b:d5:cf:ae:ee:
                    22:d3:08:64:e6:41:03:dd:b1:23:48:29:de:bd:19:
                    98:19:c9:3b:b9:71:b6:dc:53:4d:cd:1e:65:1f:ce:
                    a1:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:F1:29:A6:CA:6D:D1:A4:B0:88:29:A3:2F:A4:91:14:60:28:F1:1D
            X509v3 Authority Key Identifier:
                keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.171.246.0/24
                  193.32.205.0/24
                  193.187.111.0/24
                  193.187.134.0/24
                  194.93.50.0/23
                  212.115.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c5:12:8a:38:75:6e:d9:3e:5c:47:7d:db:c8:9e:60:bc:1c:0f:
         8f:06:29:a6:33:4b:74:55:75:6e:58:b5:e2:a6:49:da:82:70:
         47:e1:db:07:26:a9:f3:4f:fe:ff:37:e6:0f:30:1a:7f:2c:d8:
         34:49:57:b0:29:5a:a1:c4:8a:e7:d9:1e:4b:16:72:64:26:0b:
         7a:46:a2:90:b0:78:35:08:17:a1:3e:9f:2c:cf:26:dd:67:a6:
         aa:f1:2b:e9:cb:5c:e4:ec:c9:b4:2a:47:18:dd:e5:a8:59:0a:
         50:92:95:52:91:88:9d:cb:7c:2c:90:ad:87:a9:1b:28:ae:92:
         ab:86:67:fb:22:e6:af:24:ae:9e:53:e5:11:d3:0c:a8:fb:39:
         b1:8c:8c:99:4b:4c:62:6f:17:62:e2:1c:4d:89:f5:33:1b:d1:
         41:31:59:51:f5:41:94:bb:b6:96:6b:7b:4f:32:7c:43:81:46:
         df:15:c5:c3:67:60:0c:95:7d:4b:06:8b:b5:ef:8a:0b:a4:53:
         b3:00:c3:f6:fe:57:09:f9:f6:3a:f4:07:8f:37:07:07:57:a4:
         14:73:8d:68:ee:56:b0:b7:56:a8:86:95:59:6d:e5:91:08:dd:
         3b:e1:bf:f9:c4:db:71:fd:6b:b0:a6:a8:2a:24:93:22:92:fa:
         0e:4b:cb:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 5 13:52:22 2026 by rpki-client