This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38392e3138352e32372e302f32342d3234203d3e20323032363632.roa
File:                     38392e3138352e32372e302f32342d3234203d3e20323032363632.roa (raw, json)
Hash identifier:          L+rK990rOFo/oCz0MC6PXSYN3ySWrxudV/oZTtRVusQ=
Subject key identifier:   12:DA:14:D0:B3:13:F6:B7:40:6E:69:2D:13:C9:CA:17:C2:62:1A:E4
Certificate issuer:       /CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3
Certificate serial:       297AE0DD5EE240F162A8D210E728E78AC646590A
Authority key identifier: CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38392e3138352e32372e302f32342d3234203d3e20323032363632.roa
Signing time:             Thu 12 Feb 2026 19:03:46 +0000
ROA not before:           Thu 12 Feb 2026 18:58:46 +0000
ROA not after:            Thu 11 Feb 2027 19:03:46 +0000
asID:                     202662
IP address blocks:        89.185.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Feb 2026 05:49:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:7a:e0:dd:5e:e2:40:f1:62:a8:d2:10:e7:28:e7:8a:c6:46:59:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3
        Validity
            Not Before: Feb 12 18:58:46 2026 GMT
            Not After : Feb 11 19:03:46 2027 GMT
        Subject: CN=12DA14D0B313F6B7406E692D13C9CA17C2621AE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:f1:e4:2b:ac:b5:1d:eb:ed:8b:f3:9b:f5:f9:
                    d9:94:0c:30:86:1a:57:60:a9:ea:ae:fd:c2:ae:d7:
                    58:5c:cc:d4:ce:e7:a8:82:c8:02:f0:8f:09:ce:bf:
                    d3:47:6a:3a:48:38:4c:ed:03:08:f1:97:f1:9d:fb:
                    92:cf:20:9e:e3:c3:ee:6d:eb:bb:62:31:f7:a7:e3:
                    40:10:de:16:61:93:b4:95:64:be:74:0a:ad:ef:a3:
                    cc:2c:fe:73:42:88:ac:e3:34:86:53:de:25:74:e1:
                    22:62:65:c8:6a:fb:77:82:4f:96:1a:b3:e5:77:73:
                    a7:b1:be:f3:41:80:08:91:13:eb:54:63:fb:0a:a2:
                    a9:3e:f6:b5:57:7d:71:c6:bf:bd:da:79:82:85:02:
                    7a:f3:be:54:90:15:25:1c:6c:57:78:5f:06:ea:61:
                    5a:01:c5:f2:11:c2:53:2f:56:ec:b9:a5:60:d8:13:
                    47:8a:05:b3:f9:79:55:39:f2:24:ba:ba:d8:ad:91:
                    06:7c:79:12:2d:8c:b3:77:08:99:62:b6:ae:82:f2:
                    39:35:74:d8:76:27:5d:96:04:b3:88:50:2a:0b:fc:
                    f8:06:36:fb:b1:0c:b3:75:f7:eb:7e:33:12:70:00:
                    fc:d3:d6:c9:27:01:4e:1e:0e:a0:81:da:d7:37:b5:
                    11:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:DA:14:D0:B3:13:F6:B7:40:6E:69:2D:13:C9:CA:17:C2:62:1A:E4
            X509v3 Authority Key Identifier:
                keyid:CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38392e3138352e32372e302f32342d3234203d3e20323032363632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.185.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c9:9c:07:7e:1d:8c:54:9b:f0:ec:ec:d3:a3:be:1e:2a:d7:c5:
         df:2c:2e:ac:30:54:fa:85:1a:f8:41:40:6f:ae:a2:a4:60:fc:
         a5:da:b6:c7:a0:f8:aa:53:e2:d1:f2:66:76:31:d7:d9:6d:ce:
         d3:0f:fb:11:9d:46:1d:fa:a3:89:80:77:39:85:96:d3:28:75:
         b9:75:5f:a8:7e:54:dd:71:15:95:31:29:e7:04:cd:53:c7:52:
         15:18:ed:30:10:47:48:c1:45:b5:f9:29:dd:b0:a5:11:61:d6:
         3f:6d:b5:71:c2:81:6f:cb:4f:1b:c7:71:67:ab:72:fd:ba:17:
         43:b0:52:49:f5:e6:7e:ab:d1:66:e1:f4:83:e9:a0:1e:58:dd:
         bc:70:02:52:d9:64:62:da:95:50:03:00:c5:b4:a0:cf:ce:54:
         cf:7c:5a:fe:9a:bb:ff:9a:2a:a9:3f:d7:e5:b2:7b:cc:fb:ee:
         8f:3b:b7:b8:7b:93:c7:aa:f9:1d:ac:e3:36:37:ff:20:97:14:
         5e:87:42:72:0e:91:1b:58:c5:68:ca:b6:35:98:de:da:b2:e1:
         cc:f6:17:28:2a:c6:15:3e:47:5d:78:48:fa:7c:55:ee:a4:83:
         06:44:64:81:88:48:66:d7:45:82:e2:50:ac:a7:f2:0f:92:f7:
         c6:eb:df:42
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUKXrg3V7iQPFiqNIQ5yjnisZGWQowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoY2YwNjMxZDMzYTNjOWRjNWM0NTQyNGQ1NWMzZTc2NjM4
Mzg2NTdhMzAeFw0yNjAyMTIxODU4NDZaFw0yNzAyMTExOTAzNDZaMDMxMTAvBgNV
BAMTKDEyREExNEQwQjMxM0Y2Qjc0MDZFNjkyRDEzQzlDQTE3QzI2MjFBRTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDf8eQrrLUd6+2L85v1+dmUDDCG
Gldgqequ/cKu11hczNTO56iCyALwjwnOv9NHajpIOEztAwjxl/Gd+5LPIJ7jw+5t
67tiMfen40AQ3hZhk7SVZL50Cq3vo8ws/nNCiKzjNIZT3iV04SJiZchq+3eCT5Ya
s+V3c6exvvNBgAiRE+tUY/sKoqk+9rVXfXHGv73aeYKFAnrzvlSQFSUcbFd4Xwbq
YVoBxfIRwlMvVuy5pWDYE0eKBbP5eVU58iS6utitkQZ8eRItjLN3CJlitq6C8jk1
dNh2J12WBLOIUCoL/PgGNvuxDLN19+t+MxJwAPzT1sknAU4eDqCB2tc3tREXAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUEtoU0LMT9rdAbmktE8nKF8JiGuQwHwYDVR0j
BBgwFoAUzwYx0zo8ncXEVCTVXD52Y4OGV6MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNjE3MDhhNmItNmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4
NDhjLzIvQ0YwNjMxRDMzQTNDOURDNUM0NTQyNEQ1NUMzRTc2NjM4Mzg2NTdBMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p3WXgwem84bmNYRVZDVFZYRDUyWTRP
R1Y2TS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjE3MDhhNmIt
NmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4NDhjLzIvMzgzOTJlMzEzODM1MmUzMjM3
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMDMyMzYzNjMyLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
WbkbMA0GCSqGSIb3DQEBCwUAA4IBAQDJnAd+HYxUm/Ds7NOjvh4q18XfLC6sMFT6
hRr4QUBvrqKkYPyl2rbHoPiqU+LR8mZ2MdfZbc7TD/sRnUYd+qOJgHc5hZbTKHW5
dV+oflTdcRWVMSnnBM1Tx1IVGO0wEEdIwUW1+SndsKURYdY/bbVxwoFvy08bx3Fn
q3L9uhdDsFJJ9eZ+q9Fm4fSD6aAeWN28cAJS2WRi2pVQAwDFtKDPzlTPfFr+mrv/
miqpP9flsnvM++6PO7e4e5PHqvkdrOM2N/8glxReh0JyDpEbWMVoyrY1mN7asuHM
9hcoKsYVPkddeEj6fFXupIMGRGSBiEhm10WC4lCsp/IPkvfG699C
-----END CERTIFICATE-----
Generated at Sat Feb 14 19:54:17 2026 by rpki-client