This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38312e32322e3133352e302f32342d3234203d3e2037303239.roa
File:                     38312e32322e3133352e302f32342d3234203d3e2037303239.roa (raw, json)
Hash identifier:          /BJUbvrb40HNRruL6TlxtwuU6W9S4n/37DELV2vBpxw=
Subject key identifier:   15:04:BA:88:C6:FE:2A:F1:24:39:0A:99:AF:A0:74:47:F2:6D:74:3F
Certificate issuer:       /CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3
Certificate serial:       242FE3445B8ECF6DB61635116E5B3A651DB6817C
Authority key identifier: CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38312e32322e3133352e302f32342d3234203d3e2037303239.roa
Signing time:             Thu 12 Feb 2026 19:05:46 +0000
ROA not before:           Thu 12 Feb 2026 19:00:46 +0000
ROA not after:            Thu 11 Feb 2027 19:05:46 +0000
asID:                     7029
IP address blocks:        81.22.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Feb 2026 05:49:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:2f:e3:44:5b:8e:cf:6d:b6:16:35:11:6e:5b:3a:65:1d:b6:81:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3
        Validity
            Not Before: Feb 12 19:00:46 2026 GMT
            Not After : Feb 11 19:05:46 2027 GMT
        Subject: CN=1504BA88C6FE2AF124390A99AFA07447F26D743F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:14:f5:2e:26:a5:94:b4:4c:95:51:0b:56:5e:
                    57:05:b2:79:44:80:5e:9d:60:d8:29:c2:7d:d4:8e:
                    b5:dc:8b:a2:af:20:22:4a:cf:3a:bb:db:7b:0b:08:
                    5a:db:cc:cf:c3:3c:2c:ff:3a:db:f8:e3:1b:2b:ec:
                    cb:bf:cb:75:7d:7d:26:79:45:e5:88:22:4a:d6:f2:
                    3e:0f:4e:c8:8f:76:d4:39:f9:1f:72:d5:3f:5e:0b:
                    6a:ed:63:b7:7b:2e:0f:5e:a4:74:dd:07:52:63:e6:
                    e1:53:f8:66:43:07:35:c1:26:90:39:1a:89:b2:01:
                    ab:62:ab:f0:08:51:1f:db:72:7a:72:25:89:a4:cd:
                    e7:9f:5c:36:29:f3:f1:3f:67:f2:31:35:8f:fc:30:
                    4c:3a:01:87:99:f2:af:76:3a:ef:29:35:91:40:0f:
                    af:0b:83:b2:d5:59:17:b2:0c:53:fe:89:94:9c:08:
                    39:84:7b:b5:c1:03:e7:d6:8e:9f:ed:92:cd:f0:1a:
                    d3:bb:b9:95:fd:b2:4c:82:e4:1c:0c:38:15:e0:8a:
                    a5:b0:cd:00:29:e1:07:90:8b:92:68:d7:34:e7:7c:
                    9a:1c:29:57:d2:bb:d7:01:cf:66:70:9e:2f:c2:a4:
                    25:42:5f:33:8c:e0:b1:ca:7e:12:af:7b:62:3e:00:
                    47:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:04:BA:88:C6:FE:2A:F1:24:39:0A:99:AF:A0:74:47:F2:6D:74:3F
            X509v3 Authority Key Identifier:
                keyid:CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38312e32322e3133352e302f32342d3234203d3e2037303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.22.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:85:10:b9:84:27:d9:58:17:02:10:a1:91:b9:b0:5f:ed:e2:
         c5:d6:9a:5a:51:61:fd:3e:30:4b:b7:70:67:2a:88:65:e7:2b:
         4d:58:be:6b:33:1e:25:87:74:8c:71:02:98:dd:f0:fc:29:63:
         d2:19:31:8f:23:85:fc:5d:98:c0:e0:a0:ab:38:e5:c8:d3:6c:
         b3:cc:28:d0:c5:0d:f5:c6:1b:a6:27:72:db:5d:e4:88:62:71:
         d4:80:14:11:3b:dc:8f:0b:4c:59:02:5a:9c:58:b6:6b:30:94:
         d5:58:71:be:a9:39:e9:c6:85:90:1a:f8:55:86:62:96:68:56:
         a0:58:52:a4:e8:fd:f2:0e:71:13:0d:ef:dd:05:09:df:dc:cc:
         42:b5:a0:ad:d1:3f:56:62:94:45:9d:71:79:68:80:2f:e3:d2:
         21:88:13:29:f2:c9:40:39:67:a3:d8:9a:8b:20:83:56:b7:e3:
         36:3f:f0:35:fd:ff:18:06:7e:29:c0:97:b1:51:c2:86:93:f6:
         16:5a:d7:0a:30:b1:e2:77:62:6a:e6:c3:af:91:6a:1f:e1:c2:
         fb:96:19:75:57:b7:1b:dd:30:90:1d:a5:9f:49:a7:2d:13:e9:
         b3:7c:95:3e:c0:73:e4:20:21:e8:a5:4a:19:23:c9:23:07:12:
         d5:ef:89:f9
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUJC/jRFuOz222FjURbls6ZR22gXwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoY2YwNjMxZDMzYTNjOWRjNWM0NTQyNGQ1NWMzZTc2NjM4
Mzg2NTdhMzAeFw0yNjAyMTIxOTAwNDZaFw0yNzAyMTExOTA1NDZaMDMxMTAvBgNV
BAMTKDE1MDRCQTg4QzZGRTJBRjEyNDM5MEE5OUFGQTA3NDQ3RjI2RDc0M0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkFPUuJqWUtEyVUQtWXlcFsnlE
gF6dYNgpwn3UjrXci6KvICJKzzq723sLCFrbzM/DPCz/Otv44xsr7Mu/y3V9fSZ5
ReWIIkrW8j4PTsiPdtQ5+R9y1T9eC2rtY7d7Lg9epHTdB1Jj5uFT+GZDBzXBJpA5
GomyAatiq/AIUR/bcnpyJYmkzeefXDYp8/E/Z/IxNY/8MEw6AYeZ8q92Ou8pNZFA
D68Lg7LVWReyDFP+iZScCDmEe7XBA+fWjp/tks3wGtO7uZX9skyC5BwMOBXgiqWw
zQAp4QeQi5Jo1zTnfJocKVfSu9cBz2Zwni/CpCVCXzOM4LHKfhKve2I+AEehAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUFQS6iMb+KvEkOQqZr6B0R/JtdD8wHwYDVR0j
BBgwFoAUzwYx0zo8ncXEVCTVXD52Y4OGV6MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNjE3MDhhNmItNmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4
NDhjLzIvQ0YwNjMxRDMzQTNDOURDNUM0NTQyNEQ1NUMzRTc2NjM4Mzg2NTdBMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p3WXgwem84bmNYRVZDVFZYRDUyWTRP
R1Y2TS5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjE3MDhhNmIt
NmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4NDhjLzIvMzgzMTJlMzIzMjJlMzEzMzM1
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzczMDMyMzkucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABRFocw
DQYJKoZIhvcNAQELBQADggEBAJWFELmEJ9lYFwIQoZG5sF/t4sXWmlpRYf0+MEu3
cGcqiGXnK01YvmszHiWHdIxxApjd8PwpY9IZMY8jhfxdmMDgoKs45cjTbLPMKNDF
DfXGG6Yncttd5IhicdSAFBE73I8LTFkCWpxYtmswlNVYcb6pOenGhZAa+FWGYpZo
VqBYUqTo/fIOcRMN790FCd/czEK1oK3RP1ZilEWdcXlogC/j0iGIEynyyUA5Z6PY
mosgg1a34zY/8DX9/xgGfinAl7FRwoaT9hZa1wowseJ3Ymrmw6+Rah/hwvuWGXVX
txvdMJAdpZ9Jpy0T6bN8lT7Ac+QgIeilShkjySMHEtXvifk=
-----END CERTIFICATE-----
Generated at Sat Feb 14 19:53:43 2026 by rpki-client