This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38312e32322e3134302e302f32342d3234203d3e20323132343030.roa
File:                     38312e32322e3134302e302f32342d3234203d3e20323132343030.roa (raw, json)
Hash identifier:          6V2JF/XEIHJexj/jec0b6h8PD1eSRwW1BKykVlqkwEE=
Subject key identifier:   2F:91:D3:44:7D:ED:40:0B:A2:28:6C:2F:A7:06:EC:7E:C8:F6:08:43
Certificate issuer:       /CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3
Certificate serial:       669764614D87788AA072F7066B59A7714622EAA1
Authority key identifier: CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38312e32322e3134302e302f32342d3234203d3e20323132343030.roa
Signing time:             Thu 12 Feb 2026 19:03:47 +0000
ROA not before:           Thu 12 Feb 2026 18:58:47 +0000
ROA not after:            Thu 11 Feb 2027 19:03:47 +0000
asID:                     212400
IP address blocks:        81.22.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Feb 2026 05:49:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:97:64:61:4d:87:78:8a:a0:72:f7:06:6b:59:a7:71:46:22:ea:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3
        Validity
            Not Before: Feb 12 18:58:47 2026 GMT
            Not After : Feb 11 19:03:47 2027 GMT
        Subject: CN=2F91D3447DED400BA2286C2FA706EC7EC8F60843
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:cc:1d:58:9f:b9:fe:b7:04:62:60:2d:e1:88:
                    2f:ab:fd:e0:97:60:3d:b3:2e:4a:3d:d5:96:2b:21:
                    8a:21:6d:b6:2c:f6:b2:c7:e3:31:62:41:be:08:4f:
                    7e:cc:9a:bc:e4:92:b2:c8:04:f7:02:6a:d9:49:b3:
                    93:5a:29:69:0c:d4:5b:61:18:88:f1:ba:67:a7:2f:
                    f5:c7:85:35:88:31:d2:cf:00:d1:25:43:96:9b:46:
                    f7:ba:00:92:51:53:61:ee:97:6a:58:e4:90:db:4d:
                    21:72:8d:36:53:1e:d1:41:c9:e7:75:30:2d:60:fa:
                    e9:f7:04:d3:50:36:a7:b1:c7:20:1a:82:bc:ba:05:
                    58:a1:4d:0f:0a:2d:fd:c9:6f:b4:af:71:71:e6:87:
                    ce:b5:5c:d0:13:87:fe:8d:89:9a:30:44:71:74:31:
                    35:d0:3f:87:37:90:90:38:41:a4:82:7d:39:6a:6a:
                    16:96:e7:dd:fc:bc:f3:54:94:a1:8b:92:ca:1a:cf:
                    b9:56:ac:98:4f:d3:bc:ac:23:60:da:f7:b0:45:94:
                    8d:3d:82:3b:10:cf:20:50:9a:c7:a6:83:c8:f8:2f:
                    5c:4c:fa:4e:2e:17:33:6f:1a:07:1a:24:4e:db:5f:
                    b5:3c:83:0c:23:bf:da:7b:15:c3:9a:9d:ec:f8:51:
                    42:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:91:D3:44:7D:ED:40:0B:A2:28:6C:2F:A7:06:EC:7E:C8:F6:08:43
            X509v3 Authority Key Identifier:
                keyid:CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38312e32322e3134302e302f32342d3234203d3e20323132343030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.22.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:5e:5b:e8:f1:bb:72:f3:0c:06:54:69:3a:b0:fa:1b:fd:57:
         3e:a6:c7:0e:61:cc:17:8d:aa:6c:34:d9:13:79:ec:17:a1:cb:
         c6:c7:c0:b8:47:5b:8a:62:66:92:68:20:3b:f5:29:c3:48:80:
         ea:14:ab:bd:c0:81:c1:3a:6f:f7:89:5a:b5:88:49:8b:09:21:
         ce:fe:29:58:a2:30:eb:ec:0e:ff:38:d0:44:3b:b4:4c:d1:9d:
         3d:39:3e:02:69:ed:c6:52:a7:41:d6:31:32:de:54:58:93:3b:
         1c:cb:08:7b:9c:63:7e:cc:24:7e:fa:4b:fc:75:ab:0c:ae:6c:
         af:27:2b:fb:ff:83:bf:42:90:23:38:1e:47:3b:84:2f:a2:e6:
         ae:8b:b2:e2:0b:9c:e7:88:db:b7:b5:d7:db:2c:30:ca:dc:1e:
         9f:8d:80:7c:ad:b0:93:b3:2d:62:76:6a:6f:8e:9e:af:c8:c6:
         63:73:04:92:fc:47:38:06:3f:5f:ae:da:97:bf:56:40:01:fc:
         49:a9:fa:96:85:bd:4d:1d:ba:29:a6:00:a8:c2:7e:e8:24:17:
         af:03:05:8f:6b:ad:38:ba:00:87:8a:8f:72:e6:2f:ed:36:22:
         9f:8c:b1:a6:45:ac:7b:09:60:ff:f0:72:37:87:1e:71:a8:b7:
         2b:a5:e8:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 14 19:54:53 2026 by rpki-client