This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/3138352e33302e3230332e302f32342d3234203d3e203630383630.roa
File:                     3138352e33302e3230332e302f32342d3234203d3e203630383630.roa (raw, json)
Hash identifier:          +hLj8/wzU4ALLxe4Xdt3WSnzJEJQWXiNiu+hY32JK2w=
Subject key identifier:   04:F8:EE:85:4B:37:66:05:78:E2:D5:4B:EE:A7:E0:CA:79:55:FC:5F
Certificate issuer:       /CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3
Certificate serial:       31E94B8603BE5E931A0342486EE2EA3DDE8EE7A8
Authority key identifier: CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/3138352e33302e3230332e302f32342d3234203d3e203630383630.roa
Signing time:             Thu 12 Feb 2026 19:01:45 +0000
ROA not before:           Thu 12 Feb 2026 18:56:45 +0000
ROA not after:            Thu 11 Feb 2027 19:01:45 +0000
asID:                     60860
IP address blocks:        185.30.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Feb 2026 05:49:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:e9:4b:86:03:be:5e:93:1a:03:42:48:6e:e2:ea:3d:de:8e:e7:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3
        Validity
            Not Before: Feb 12 18:56:45 2026 GMT
            Not After : Feb 11 19:01:45 2027 GMT
        Subject: CN=04F8EE854B37660578E2D54BEEA7E0CA7955FC5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:5f:0f:cc:bb:13:c3:48:c3:78:5e:36:1d:64:
                    74:4e:f9:fe:07:6c:3d:f9:65:cf:c5:a5:6f:d4:3c:
                    69:39:a9:a8:7a:10:51:36:74:65:23:d1:3f:f5:2c:
                    63:e2:76:8d:02:c8:41:26:80:61:76:09:a8:43:2a:
                    ed:5a:7c:01:a1:96:0c:12:64:68:bc:d8:87:4c:98:
                    8f:c7:63:ae:f7:60:27:c9:fd:11:4b:f0:a9:83:75:
                    e4:c1:70:3f:a5:ea:ff:71:ba:0f:c0:b7:ce:06:03:
                    c3:24:fb:0f:d0:e5:6d:42:68:cf:2a:31:90:d2:07:
                    a4:b5:33:aa:67:f6:13:83:94:7a:79:a7:e9:5c:bd:
                    ac:f9:4d:d6:76:a5:a7:87:2f:25:a1:5b:f9:59:2a:
                    11:0d:44:67:b6:af:11:e8:d9:c9:6a:be:bd:39:55:
                    a1:f2:82:f5:4c:a3:59:fb:e0:e8:0d:7d:40:29:61:
                    9c:a9:bf:93:f5:25:00:79:39:00:6e:18:de:11:b6:
                    5e:11:d1:31:e0:39:d7:da:db:a7:42:d5:20:ba:22:
                    66:db:a4:02:3b:3c:1c:74:d6:db:8b:0f:d0:d9:85:
                    a7:c2:46:c3:e2:f4:6e:b7:04:b1:b0:0b:86:d2:01:
                    d6:cb:f3:75:20:aa:1b:3d:73:ad:86:77:10:aa:98:
                    57:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:F8:EE:85:4B:37:66:05:78:E2:D5:4B:EE:A7:E0:CA:79:55:FC:5F
            X509v3 Authority Key Identifier:
                keyid:CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/3138352e33302e3230332e302f32342d3234203d3e203630383630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.30.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:f7:c9:fc:f4:6d:40:67:c0:c3:09:ce:4c:7c:83:93:53:7c:
         eb:15:4a:30:6e:b5:aa:1e:51:4c:9d:67:cd:54:9a:ee:11:aa:
         c7:64:90:12:5e:f5:7a:17:b0:b0:68:01:57:45:87:8b:37:b6:
         e3:2e:a9:40:7a:b4:9e:94:e3:45:0e:0e:03:75:2d:9a:13:57:
         e9:90:7e:f5:5b:23:1e:f5:32:23:5f:b6:7a:ed:15:35:3d:e8:
         c3:ef:d7:23:ee:03:da:85:a1:74:8e:f4:92:68:fe:30:02:9a:
         3e:3b:7f:83:2b:65:3a:31:ae:3f:85:b4:e3:38:47:6d:40:19:
         f6:25:59:cd:98:20:fa:f8:4c:8e:f4:ab:af:41:b9:14:b2:8a:
         7e:fc:a9:00:e2:c3:d5:d7:56:d5:f9:77:e1:5a:e8:de:76:6b:
         38:71:9e:3b:37:f6:db:d8:24:33:c5:6d:33:87:4b:9e:52:ca:
         b5:a1:fb:46:cf:9e:2c:0e:1a:71:d4:3d:1d:5a:89:eb:56:ad:
         8b:db:3a:6e:81:34:61:eb:25:4b:4a:5e:52:16:28:e7:7e:01:
         92:44:e2:a5:2e:8c:c2:4d:ad:67:b3:3c:ca:2d:fe:94:75:5e:
         93:01:d9:49:f4:a3:33:42:a1:69:f0:c2:c9:cf:70:b8:13:0c:
         9e:f7:a0:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 14 19:52:19 2026 by rpki-client