This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38312e32322e3133322e302f32342d3234203d3e20313939303538.roa
File:                     38312e32322e3133322e302f32342d3234203d3e20313939303538.roa (raw, json)
Hash identifier:          XSi8nKUYp4CLAjGf/ZpCWXm3X7OO3qml/mQlX/v7kY0=
Subject key identifier:   49:A8:D4:51:30:47:B3:44:12:66:41:8D:4A:23:22:88:21:A8:4D:96
Certificate issuer:       /CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3
Certificate serial:       0F18093F897CC2BDFB969BAD687F7C83A2BFD61A
Authority key identifier: CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38312e32322e3133322e302f32342d3234203d3e20313939303538.roa
Signing time:             Thu 12 Feb 2026 19:03:47 +0000
ROA not before:           Thu 12 Feb 2026 18:58:47 +0000
ROA not after:            Thu 11 Feb 2027 19:03:47 +0000
asID:                     199058
IP address blocks:        81.22.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Feb 2026 05:49:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:18:09:3f:89:7c:c2:bd:fb:96:9b:ad:68:7f:7c:83:a2:bf:d6:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3
        Validity
            Not Before: Feb 12 18:58:47 2026 GMT
            Not After : Feb 11 19:03:47 2027 GMT
        Subject: CN=49A8D4513047B3441266418D4A23228821A84D96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:5a:09:3b:a8:36:c5:b0:0d:9f:ab:f4:99:80:
                    83:05:be:1f:c8:55:a6:81:f2:1e:cc:a4:5d:e6:40:
                    1e:dc:2c:62:9d:70:60:57:32:63:f4:e1:03:0a:ab:
                    9c:79:e2:c5:df:19:7d:73:bb:da:6c:b7:70:65:fb:
                    ae:80:4f:6f:4e:33:46:5f:89:f1:41:d5:98:cf:d1:
                    8b:54:36:5a:77:f0:11:fa:c2:be:e0:43:28:11:3e:
                    d7:ab:c7:e6:1d:79:b1:91:8d:38:27:08:9c:00:82:
                    49:2a:a1:26:22:11:81:02:8a:46:67:ff:e4:7b:55:
                    ac:d7:f3:60:61:1c:05:5e:aa:8c:31:fc:ee:89:67:
                    1c:81:4e:73:55:b0:4d:a5:99:69:69:98:6d:8e:e9:
                    aa:50:f9:2f:1f:ca:3f:b2:40:46:ab:73:ae:57:14:
                    38:e2:30:a3:95:8b:bc:ca:a7:89:a6:29:1c:ee:14:
                    c5:28:ae:ff:15:86:f7:9c:60:4b:66:ee:e9:be:82:
                    14:8f:19:7a:d8:1c:f4:0f:b0:88:d3:0c:33:cc:bd:
                    33:8f:1d:87:68:db:1c:d8:34:a1:c5:9f:5d:7d:f4:
                    6d:3b:09:bc:07:03:1c:ae:3d:6e:d6:93:1d:21:19:
                    26:ab:06:c7:f9:6b:cc:f0:f5:02:a7:91:c7:c9:79:
                    62:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:A8:D4:51:30:47:B3:44:12:66:41:8D:4A:23:22:88:21:A8:4D:96
            X509v3 Authority Key Identifier:
                keyid:CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38312e32322e3133322e302f32342d3234203d3e20313939303538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.22.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:ac:69:e9:c8:d2:08:f8:c6:0c:be:b8:90:b8:ef:78:28:a6:
         94:74:af:9f:b7:08:83:03:06:e2:10:d4:66:ec:5c:c4:8d:d4:
         23:09:fa:64:63:62:6d:25:56:f7:f5:99:4f:7d:1c:a9:e3:53:
         25:37:bb:8f:d7:bf:49:d6:c6:e1:52:d4:25:13:2f:46:e1:86:
         98:50:ad:30:25:e1:b8:3a:03:b6:e2:a2:78:cd:9b:c7:50:2d:
         3b:0f:2d:8e:52:d9:3b:b8:8b:ca:4f:13:31:f5:fe:6b:c0:eb:
         3a:9e:28:9c:df:d5:13:af:7a:b7:90:b6:e5:a6:25:73:cb:16:
         ca:20:7c:0c:b6:e1:b0:b8:16:66:37:1d:ce:6e:26:97:58:6c:
         b1:98:4d:d2:95:11:85:16:66:8b:63:02:35:61:68:b3:c5:37:
         19:2c:63:69:f4:fc:99:b9:f9:45:c9:5e:8b:09:b0:91:ae:28:
         33:af:a1:d9:6a:5b:f6:59:3f:6c:87:39:61:69:7b:b3:98:02:
         fb:31:b5:9a:ba:a4:57:d6:ea:3c:35:52:41:46:17:1b:91:df:
         a9:fe:d7:5f:18:47:a4:b4:e2:16:58:31:80:98:0d:11:d2:8e:
         39:b2:89:0d:75:46:9c:e6:a5:ff:d2:a0:23:d9:ce:66:7e:fc:
         4a:1e:80:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 14 19:54:53 2026 by rpki-client