This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/3130392e37322e3132342e302f32342d3234203d3e20323133303230.roa
File:                     3130392e37322e3132342e302f32342d3234203d3e20323133303230.roa (raw, json)
Hash identifier:          jw99dNfHIRjU++0kkn6s1cGa96MZVtYHLltN0kgUoJI=
Subject key identifier:   7F:DC:3B:8E:6C:70:BE:F3:61:AA:69:2A:EC:05:0C:BE:8C:C0:89:A4
Certificate issuer:       /CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3
Certificate serial:       034626C21F85A41FBC51E20F78966F7C3BBEC970
Authority key identifier: CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/3130392e37322e3132342e302f32342d3234203d3e20323133303230.roa
Signing time:             Thu 12 Feb 2026 19:24:03 +0000
ROA not before:           Thu 12 Feb 2026 19:19:03 +0000
ROA not after:            Thu 11 Feb 2027 19:24:03 +0000
asID:                     213020
IP address blocks:        109.72.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Feb 2026 05:49:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:46:26:c2:1f:85:a4:1f:bc:51:e2:0f:78:96:6f:7c:3b:be:c9:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3
        Validity
            Not Before: Feb 12 19:19:03 2026 GMT
            Not After : Feb 11 19:24:03 2027 GMT
        Subject: CN=7FDC3B8E6C70BEF361AA692AEC050CBE8CC089A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:53:31:22:42:fb:d0:ee:a8:a5:a3:b9:ea:0a:
                    86:f4:3c:86:ce:3d:3f:f4:02:b0:88:19:f7:e7:81:
                    c7:52:02:00:49:cb:8f:90:8a:73:56:db:db:57:be:
                    f7:e7:1e:e4:06:13:07:19:21:b0:8c:1c:af:74:b9:
                    62:ac:17:4c:d9:19:74:8b:4c:d6:97:1c:56:ab:66:
                    82:64:df:44:a0:85:f3:15:61:9f:c3:c9:c1:41:a2:
                    ac:9f:c9:d6:e6:32:35:22:36:3a:45:2b:24:c1:a4:
                    9a:93:8f:3b:3c:3c:1b:7e:da:42:4f:7b:a9:71:70:
                    fa:2f:fb:33:65:33:1a:e8:ab:e7:21:33:6f:b6:d6:
                    e6:db:1c:2b:fe:93:a4:35:bd:f6:f3:49:10:10:b1:
                    9e:66:12:14:ce:8f:6a:9c:5d:8a:e8:01:1e:60:e7:
                    bc:56:5c:fd:f8:0e:97:ff:e2:b9:0d:5c:c4:88:2d:
                    c1:66:9f:8c:ef:e4:c8:8f:5b:c6:ea:f9:ac:79:7a:
                    15:4c:c4:b6:d0:b0:98:44:9b:6c:62:80:5e:ee:b1:
                    21:24:30:06:f1:88:35:bd:0f:78:75:36:ef:bb:04:
                    36:c1:34:de:4f:42:4a:46:7b:ad:e6:66:58:ed:f0:
                    b0:2f:ec:ed:9e:83:27:65:5d:69:53:ba:61:75:99:
                    bd:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:DC:3B:8E:6C:70:BE:F3:61:AA:69:2A:EC:05:0C:BE:8C:C0:89:A4
            X509v3 Authority Key Identifier:
                keyid:CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/3130392e37322e3132342e302f32342d3234203d3e20323133303230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.72.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:e0:67:c2:c8:aa:a4:ab:42:11:81:8a:9c:65:5b:dd:e9:ac:
         28:3b:61:0e:09:f4:92:c1:44:4f:22:b9:c8:ca:1d:16:56:4c:
         74:76:2c:eb:cf:90:db:db:c3:b7:55:57:c7:e0:d8:15:4e:22:
         e7:f4:c1:56:0b:7a:81:14:bd:bc:94:16:33:c3:05:c3:cf:18:
         16:2b:17:71:d5:8e:7b:9f:a3:d5:15:86:62:9b:d0:15:ee:09:
         02:c9:67:d0:8c:cc:1b:38:50:01:b1:65:8c:26:3b:ea:bb:0f:
         dc:01:54:0b:2b:f0:70:11:d4:c7:fb:0f:4d:03:b5:03:34:ed:
         25:3d:35:09:b8:b5:e2:09:79:52:aa:a6:f1:94:2c:ab:b8:34:
         a4:7b:90:f4:5b:29:ec:57:ac:e7:4f:ec:8c:18:22:19:40:47:
         00:81:c6:ab:49:68:c1:1f:7d:2d:f9:17:a3:e3:64:81:3f:2c:
         51:a7:6a:fd:be:9c:ff:86:02:8a:96:db:5d:c9:6c:cf:14:92:
         77:f6:a2:5b:30:27:07:44:6f:2b:08:36:d2:9f:c8:25:a4:da:
         6d:2d:a1:f8:a6:c9:57:54:48:43:9d:07:0d:1a:e8:2f:d8:b9:
         bb:05:ba:cf:f3:1e:33:b6:8a:05:3a:d5:4d:c8:15:d3:8e:5f:
         99:c3:94:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 14 19:53:16 2026 by rpki-client