This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38392e3138352e32362e302f32342d3234203d3e20323032363632.roa
File:                     38392e3138352e32362e302f32342d3234203d3e20323032363632.roa (raw, json)
Hash identifier:          XJfGVIuSzu0dSKjpOzj8ND7AEzhQUojiB6DQ4xyYtMc=
Subject key identifier:   BD:49:38:D2:88:4D:38:2D:60:88:15:9A:EE:20:55:56:93:23:2B:67
Certificate issuer:       /CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3
Certificate serial:       47BD77A46C004568F8646F94822E75CDED06055D
Authority key identifier: CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38392e3138352e32362e302f32342d3234203d3e20323032363632.roa
Signing time:             Thu 12 Feb 2026 19:03:48 +0000
ROA not before:           Thu 12 Feb 2026 18:58:48 +0000
ROA not after:            Thu 11 Feb 2027 19:03:48 +0000
asID:                     202662
IP address blocks:        89.185.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Feb 2026 05:49:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:bd:77:a4:6c:00:45:68:f8:64:6f:94:82:2e:75:cd:ed:06:05:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3
        Validity
            Not Before: Feb 12 18:58:48 2026 GMT
            Not After : Feb 11 19:03:48 2027 GMT
        Subject: CN=BD4938D2884D382D6088159AEE20555693232B67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:33:98:03:5f:af:0e:96:6a:f6:1b:69:cd:19:
                    06:34:6c:3a:d6:bd:e2:d3:52:9a:86:cd:20:40:1c:
                    2b:08:50:2a:52:9a:15:eb:5e:ba:ab:39:a1:c4:c3:
                    fb:21:b4:40:68:6c:e8:07:4b:c1:86:97:e9:7d:f6:
                    4c:f6:44:66:06:7a:a9:12:18:bd:20:fa:f2:2e:e0:
                    5b:ab:a4:e6:66:79:2e:ac:05:07:ea:03:4f:e0:6b:
                    ee:d0:ad:64:c4:97:49:9a:9c:bb:c7:f0:31:f7:92:
                    58:12:81:36:b2:8a:48:a8:f3:bf:fd:4d:aa:a0:f2:
                    61:f3:90:d1:f5:38:2f:ac:13:b6:29:92:ce:24:9c:
                    ae:39:14:86:83:51:a7:f8:f8:54:45:20:ee:02:03:
                    26:5b:11:5a:6b:72:b8:5c:a5:a8:d1:89:55:2b:e6:
                    4c:e1:f2:8a:5e:d8:6b:8b:9d:8e:2d:ca:60:c7:ea:
                    95:89:77:81:37:da:be:d2:68:04:44:c5:b8:98:c0:
                    d4:92:6b:39:04:23:9b:47:f8:11:8c:68:0c:78:04:
                    d7:79:f5:b8:f4:70:fb:3a:22:e2:dc:be:10:d7:a4:
                    30:9e:47:b4:7c:99:00:15:6d:db:f3:69:77:17:23:
                    d1:98:d7:78:9f:1b:cf:5f:4c:06:3e:15:f3:2c:42:
                    f3:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:49:38:D2:88:4D:38:2D:60:88:15:9A:EE:20:55:56:93:23:2B:67
            X509v3 Authority Key Identifier:
                keyid:CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38392e3138352e32362e302f32342d3234203d3e20323032363632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.185.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:15:f4:71:3d:e3:dd:2e:01:fc:a7:24:cf:32:19:78:23:7c:
         ac:4d:9a:9a:cb:7f:ce:06:86:6f:ba:23:c5:16:48:37:45:b5:
         80:b4:41:76:b9:10:12:fe:3b:d8:3c:b5:b6:24:20:f0:34:9b:
         a0:a8:b3:2e:32:ed:2d:60:84:b1:46:f0:6c:36:04:14:fa:3e:
         6d:10:40:51:50:fc:db:25:7a:a5:b8:af:7a:c8:07:92:cd:91:
         4d:68:94:d4:48:4f:29:6b:87:31:2c:5c:58:d4:d6:85:fe:0c:
         9b:5c:05:2c:62:4a:38:27:95:8a:cc:f7:72:54:6a:f4:0b:19:
         01:aa:57:11:29:87:94:85:45:53:18:1b:07:9b:54:d9:41:64:
         63:4a:43:8b:92:87:81:59:6a:45:33:8e:f7:c5:6f:1d:84:d4:
         5e:0e:c0:a3:be:25:14:44:67:86:71:5e:a6:c4:c5:13:44:ce:
         3e:f8:f9:bb:be:be:0d:67:ab:db:cd:99:ff:4c:b1:e4:3f:84:
         26:72:31:38:b6:4d:6e:c5:0c:89:6a:ef:23:90:52:7e:3a:88:
         a8:e6:19:13:dc:6d:22:59:64:08:ba:f9:49:d7:83:5e:ea:97:
         3e:a3:83:28:78:0f:ce:c5:ad:31:d4:0d:83:84:60:ab:45:21:
         69:92:22:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 14 19:56:20 2026 by rpki-client