This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38392e3138352e32332e302f32342d3234203d3e20323132363039.roa
File:                     38392e3138352e32332e302f32342d3234203d3e20323132363039.roa (raw, json)
Hash identifier:          btm68UOiZ76iJX6pFDdMXZW1SJrErf3RO5Oy0u5AdLw=
Subject key identifier:   41:60:46:A7:8F:93:53:6E:F5:D9:91:4B:71:E2:0B:73:96:9B:24:EB
Certificate issuer:       /CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3
Certificate serial:       5768BEC2AA75063B54E6EDDFFEB46547A38FE675
Authority key identifier: CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38392e3138352e32332e302f32342d3234203d3e20323132363039.roa
Signing time:             Thu 12 Feb 2026 19:03:46 +0000
ROA not before:           Thu 12 Feb 2026 18:58:46 +0000
ROA not after:            Thu 11 Feb 2027 19:03:46 +0000
asID:                     212609
IP address blocks:        89.185.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Feb 2026 05:49:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:68:be:c2:aa:75:06:3b:54:e6:ed:df:fe:b4:65:47:a3:8f:e6:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3
        Validity
            Not Before: Feb 12 18:58:46 2026 GMT
            Not After : Feb 11 19:03:46 2027 GMT
        Subject: CN=416046A78F93536EF5D9914B71E20B73969B24EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:2e:c4:2a:77:48:41:56:40:31:c5:47:85:5f:
                    86:df:9b:8b:f3:2d:6f:8c:d7:21:d7:c7:53:31:db:
                    1d:36:61:40:3a:50:7a:ca:ce:35:49:e9:47:37:a5:
                    9b:41:e0:10:db:9d:5e:ae:37:b0:89:f0:53:09:81:
                    82:62:10:f1:dc:b3:af:e9:3b:85:58:3b:c8:39:bc:
                    90:8c:c5:47:61:b3:5a:40:d5:c5:2c:a5:d5:4a:46:
                    62:f8:80:0f:6d:c5:32:dc:39:df:2d:3a:45:5a:d8:
                    80:b2:e8:54:d3:ff:da:0f:fe:06:34:9f:85:d1:03:
                    fe:bf:a0:33:b9:bc:8f:6d:e3:30:19:c4:eb:d9:5b:
                    25:01:32:b5:68:3d:9d:14:21:ce:ff:77:12:21:77:
                    f9:00:ea:13:4a:3a:82:c0:0d:a8:5a:8a:10:30:58:
                    be:53:92:e2:5d:54:8a:0d:08:f4:ae:c8:1f:6c:6b:
                    4b:7c:dc:ec:8e:27:45:9b:64:b7:9a:85:be:24:c5:
                    9e:4e:9a:fa:e1:5f:d4:74:e1:8c:a9:c9:ca:32:5d:
                    9c:6a:29:fe:ed:d0:91:c2:98:61:67:ef:a4:fd:2d:
                    13:65:9e:40:d9:b4:72:6f:10:e5:10:74:e3:9d:db:
                    ad:d6:dd:5a:a8:21:81:7f:55:52:b7:67:ff:46:98:
                    22:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:60:46:A7:8F:93:53:6E:F5:D9:91:4B:71:E2:0B:73:96:9B:24:EB
            X509v3 Authority Key Identifier:
                keyid:CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38392e3138352e32332e302f32342d3234203d3e20323132363039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.185.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:22:30:18:e5:cd:c4:d4:31:45:a0:12:eb:6f:7c:91:54:a1:
         2f:a1:00:a7:6f:74:1c:8e:13:63:ad:f1:6c:60:33:fb:ba:48:
         9c:c9:df:3e:fc:7e:10:e5:90:98:c8:88:f3:ec:c2:05:58:2e:
         50:ca:cc:84:15:9a:6f:b4:99:40:71:a2:09:7d:9c:f6:a0:cd:
         2d:f2:e8:c3:aa:49:fe:db:05:e9:1c:a0:71:75:93:cd:ad:28:
         3b:24:0e:73:7b:61:a2:70:78:b5:8a:81:2f:33:fb:52:bf:8d:
         75:12:7c:da:9f:dd:b5:c6:f3:6a:ba:94:51:66:a2:eb:3d:1a:
         e6:4b:c9:bc:18:7f:a4:e1:51:c7:2f:c7:e0:56:3b:50:80:ca:
         fd:62:4c:e1:76:ac:62:6a:fe:f1:95:40:11:4a:9c:a0:71:dd:
         7f:12:84:49:7e:48:65:67:4d:af:03:dc:d0:b5:6f:0c:02:cf:
         b8:90:01:bc:a3:40:37:87:70:c5:eb:8d:e2:b9:48:59:cd:47:
         73:be:a7:cc:68:41:ae:d1:ff:57:4b:7e:ba:d4:87:df:26:62:
         32:14:a0:c8:0a:b6:f0:72:e1:7f:f4:da:ab:99:d4:79:b2:f1:
         cd:35:56:3a:9b:db:54:c7:82:27:b3:a5:83:df:0d:4f:0c:9d:
         d8:48:50:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 14 19:54:54 2026 by rpki-client