This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38392e3138352e32382e302f32322d3234203d3e20323032363632.roa
File:                     38392e3138352e32382e302f32322d3234203d3e20323032363632.roa (raw, json)
Hash identifier:          rXJ2/D9Vn6USCJX2P0XFg80ZR58WjqD7i+C6QUGHr/o=
Subject key identifier:   0B:81:FF:4D:F2:61:75:1A:20:BD:99:F7:47:CA:60:46:44:B8:B0:EC
Certificate issuer:       /CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3
Certificate serial:       7715ECF5AD8E388D59DFD3AEB0246945F85B088B
Authority key identifier: CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38392e3138352e32382e302f32322d3234203d3e20323032363632.roa
Signing time:             Thu 12 Feb 2026 19:09:29 +0000
ROA not before:           Thu 12 Feb 2026 19:04:29 +0000
ROA not after:            Thu 11 Feb 2027 19:09:29 +0000
asID:                     202662
IP address blocks:        89.185.28.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Feb 2026 05:49:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:15:ec:f5:ad:8e:38:8d:59:df:d3:ae:b0:24:69:45:f8:5b:08:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3
        Validity
            Not Before: Feb 12 19:04:29 2026 GMT
            Not After : Feb 11 19:09:29 2027 GMT
        Subject: CN=0B81FF4DF261751A20BD99F747CA604644B8B0EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d8:d8:ee:61:fa:af:83:0e:70:a6:1c:99:60:
                    31:27:ce:0d:34:71:80:a6:13:94:13:e8:1c:2c:95:
                    bb:4a:2b:76:32:3a:36:04:bb:70:b5:86:6b:ac:63:
                    98:e7:3b:36:91:53:fe:01:fd:b0:6a:5f:9d:11:f7:
                    35:d6:b5:8f:31:95:8c:d2:61:08:60:fd:9b:77:35:
                    9e:63:dc:d0:8e:57:98:74:70:21:0c:f5:bb:0d:2f:
                    7b:08:ca:1c:d2:80:8d:77:14:4d:7a:25:b3:d3:c8:
                    c8:63:e7:b5:3c:7f:5b:16:cf:d5:b7:b3:c7:76:29:
                    c7:1c:ea:ea:37:f4:03:7d:7b:44:8f:8d:03:47:09:
                    cc:93:96:40:ea:19:97:a2:43:f0:5e:7a:5d:55:4f:
                    df:3a:1c:2e:4d:0a:13:6a:5e:12:6e:33:b8:6b:18:
                    42:83:87:2a:3f:46:b9:e9:66:ec:c8:1d:b2:41:17:
                    83:4f:ee:59:02:f9:db:42:f5:b7:62:6b:37:9d:68:
                    d9:1f:2e:10:8d:66:a1:53:39:6e:b1:eb:22:02:8e:
                    59:7b:b0:c5:67:f5:0b:2e:0a:59:93:ba:20:e3:bd:
                    97:ed:33:97:cc:c0:62:8b:13:8e:63:23:09:4e:b3:
                    53:ca:45:de:66:47:bb:f9:fb:0e:46:c7:01:c6:23:
                    1d:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:81:FF:4D:F2:61:75:1A:20:BD:99:F7:47:CA:60:46:44:B8:B0:EC
            X509v3 Authority Key Identifier:
                keyid:CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38392e3138352e32382e302f32322d3234203d3e20323032363632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.185.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:28:3e:14:20:86:a3:63:65:9b:af:5f:e4:3a:a5:a2:e0:ce:
         2e:1b:cc:79:35:c3:08:30:59:85:51:2a:36:1c:4d:93:c7:38:
         13:b9:09:d6:07:0d:57:64:3c:a9:8f:dc:c2:d5:c9:0c:65:8d:
         40:82:db:5a:0c:51:54:c3:07:af:65:72:d1:85:3e:6f:b1:a2:
         c1:1a:4b:1b:40:3f:13:ee:06:7c:fd:d9:e9:40:d2:88:50:2a:
         cf:0f:44:2c:14:b2:fa:58:80:45:34:6b:16:6f:2e:12:5f:14:
         da:d2:d3:09:72:5b:e6:f5:01:22:b6:3d:24:83:a0:da:7d:06:
         50:ae:a6:e5:66:1f:9a:2e:b1:84:51:03:3d:bd:3d:d1:47:9d:
         f3:3f:79:f2:83:5b:2d:7a:3e:79:13:8c:1f:3a:8f:07:24:3d:
         70:15:27:84:87:fa:11:d4:aa:1f:95:83:5e:1d:92:26:52:96:
         77:d0:8d:ed:b0:b2:96:ed:a4:3e:f6:8d:2b:4d:ab:84:2d:c2:
         9f:73:8b:fc:df:d2:5d:d4:f8:63:92:05:64:5e:76:f3:2b:9b:
         a5:f6:53:97:aa:0e:24:02:24:8c:a5:66:39:a9:fe:75:5f:23:
         a6:2e:35:6e:68:07:3e:4b:a8:4a:3a:2d:08:ec:92:90:4a:92:
         a0:97:59:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 14 19:54:17 2026 by rpki-client