This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/3138352e33302e3230302e302f32332d3233203d3e203630383630.roa
File:                     3138352e33302e3230302e302f32332d3233203d3e203630383630.roa (raw, json)
Hash identifier:          EjHevTTMahznqtckt7aLMDXLh3y0kx9bdoI4UFB/hKw=
Subject key identifier:   AD:A8:4F:A2:DA:F5:26:46:03:FA:39:DE:F2:50:6E:1A:6C:C6:5C:B3
Certificate issuer:       /CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3
Certificate serial:       74F86B17037324F5A409618D52F72D4B3AABFF31
Authority key identifier: CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/3138352e33302e3230302e302f32332d3233203d3e203630383630.roa
Signing time:             Thu 12 Feb 2026 19:01:44 +0000
ROA not before:           Thu 12 Feb 2026 18:56:44 +0000
ROA not after:            Thu 11 Feb 2027 19:01:44 +0000
asID:                     60860
IP address blocks:        185.30.200.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Feb 2026 05:49:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:f8:6b:17:03:73:24:f5:a4:09:61:8d:52:f7:2d:4b:3a:ab:ff:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3
        Validity
            Not Before: Feb 12 18:56:44 2026 GMT
            Not After : Feb 11 19:01:44 2027 GMT
        Subject: CN=ADA84FA2DAF5264603FA39DEF2506E1A6CC65CB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:0b:88:d4:c8:49:df:52:f3:2c:08:ca:88:b2:
                    a2:5d:b9:78:f9:6d:2e:f7:24:8a:cf:63:f8:1f:10:
                    3a:68:9b:ac:c6:88:c9:8a:e0:62:5d:a5:62:17:9f:
                    c1:4b:22:2d:65:d1:60:c9:4a:7c:92:96:aa:7d:9a:
                    0c:5d:bd:16:fc:a7:cb:b7:39:29:b8:e5:2c:0e:da:
                    25:4f:1f:05:5c:a7:84:43:cc:33:0e:29:77:50:fe:
                    52:b7:8f:8b:52:1a:33:60:36:49:31:08:6f:c4:4a:
                    da:ce:4e:21:c4:c8:74:fb:18:8e:62:1b:46:c2:00:
                    2c:07:49:2e:ac:4f:28:12:ff:ad:52:d8:20:26:2e:
                    61:6b:44:8a:9c:da:cd:7c:51:51:ee:e5:04:1c:b6:
                    78:0d:68:35:2a:38:e6:5b:74:3a:f7:86:a1:a6:97:
                    83:a5:00:bf:1a:38:cc:a8:3f:59:11:ed:89:d5:68:
                    74:41:e7:c1:18:0b:d6:b3:92:4a:90:7f:0c:15:46:
                    d8:68:aa:4d:2e:13:12:bd:8a:00:81:07:71:6c:4c:
                    60:b6:fc:87:02:9b:d8:64:b1:9c:8d:89:a6:36:b8:
                    71:e1:8d:09:70:99:e4:fc:a7:e6:34:1c:8b:59:f9:
                    87:f1:ed:b5:48:22:ce:25:13:1d:0d:6c:b0:3d:7e:
                    f8:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:A8:4F:A2:DA:F5:26:46:03:FA:39:DE:F2:50:6E:1A:6C:C6:5C:B3
            X509v3 Authority Key Identifier:
                keyid:CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/3138352e33302e3230302e302f32332d3233203d3e203630383630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.30.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7b:30:17:ac:4e:61:04:b3:96:43:30:87:02:12:25:07:59:f8:
         fb:c2:34:0f:4b:e8:24:31:73:2a:7f:53:91:65:22:83:0c:7c:
         a1:ac:c7:53:3f:6a:1b:d9:27:a9:c7:62:67:2f:ec:a4:4e:0b:
         b4:6d:b3:c4:24:12:06:5f:97:98:6d:b8:cc:4c:87:55:02:3a:
         03:35:5d:6c:b4:40:d0:08:cc:39:3e:8a:a5:a6:74:65:56:04:
         f9:63:9c:dc:dd:74:85:bd:f8:89:35:dc:61:c6:76:b0:3d:86:
         1b:81:90:2d:d4:35:fd:7f:bb:fe:2e:ee:fe:d1:44:0f:87:62:
         f1:80:dd:65:fe:65:db:ee:ef:47:05:4f:50:82:09:26:8a:29:
         c8:de:8f:86:ec:31:2f:63:17:6a:50:9d:5b:d5:50:c5:50:d2:
         a0:7f:8a:c8:54:21:e2:3b:1d:0d:79:2e:45:5b:2e:52:cc:f6:
         1b:ac:95:af:2f:8a:2d:b2:03:47:12:18:be:b2:e6:3c:c4:52:
         e7:6b:ac:80:5d:32:22:c8:80:00:48:4b:8f:a8:52:6f:8e:fd:
         a8:5c:37:1e:3a:f1:36:0f:73:e8:a5:1a:fe:18:93:23:3e:09:
         7e:4a:20:e9:4b:3f:d4:e7:26:2f:83:75:d1:13:d1:50:4f:d3:
         53:4d:b6:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 14 19:52:14 2026 by rpki-client