This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38392e3138352e33302e302f32342d3234203d3e20323032363632.roa
File:                     38392e3138352e33302e302f32342d3234203d3e20323032363632.roa (raw, json)
Hash identifier:          37KhzOyWUyHGRy91rbfvYGZw0Ap3ZI12kjVptORal1U=
Subject key identifier:   0A:F7:E1:DE:10:41:01:12:53:4C:55:B0:C7:72:AB:D4:AC:DF:DA:92
Certificate issuer:       /CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3
Certificate serial:       1F73F52047B554421C685C20CB932C93BAC05006
Authority key identifier: CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38392e3138352e33302e302f32342d3234203d3e20323032363632.roa
Signing time:             Thu 12 Feb 2026 19:03:46 +0000
ROA not before:           Thu 12 Feb 2026 18:58:46 +0000
ROA not after:            Thu 11 Feb 2027 19:03:46 +0000
asID:                     202662
IP address blocks:        89.185.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Feb 2026 05:49:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:73:f5:20:47:b5:54:42:1c:68:5c:20:cb:93:2c:93:ba:c0:50:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3
        Validity
            Not Before: Feb 12 18:58:46 2026 GMT
            Not After : Feb 11 19:03:46 2027 GMT
        Subject: CN=0AF7E1DE10410112534C55B0C772ABD4ACDFDA92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:3d:26:b0:49:e8:ab:7a:37:07:d7:56:27:82:
                    5b:f3:3d:87:76:6e:f2:1f:37:81:24:d2:3b:d4:d4:
                    1f:83:b7:2e:38:15:b7:32:10:37:0e:14:22:27:61:
                    6b:4f:71:8b:6d:28:75:85:05:f7:fe:06:30:1d:cf:
                    5e:b1:49:ce:78:76:bc:bf:97:95:64:7e:bb:12:2f:
                    68:dd:cd:46:2e:02:f4:ee:f0:a0:1e:8f:26:2a:35:
                    d4:87:fc:89:56:76:ac:cd:58:b1:76:11:69:12:33:
                    4e:94:9c:e2:cf:29:94:52:b8:9f:37:37:c1:16:1d:
                    fb:b2:3f:af:4d:cf:e5:ef:b8:81:26:54:01:fc:c3:
                    9e:bf:40:17:1a:52:b2:b5:51:0f:a4:c3:9c:07:51:
                    25:89:40:f7:92:89:2b:21:c4:0b:53:4a:e9:93:ce:
                    f1:0b:ab:9d:c4:5d:73:4e:99:09:61:bc:c3:73:3f:
                    62:a5:47:6c:31:cd:01:f5:4e:04:c2:68:dd:15:f9:
                    57:c0:32:73:60:86:82:9f:a8:ef:3e:60:b0:52:81:
                    0c:5a:2c:de:10:dc:0c:2f:f3:cc:b2:1f:a5:b8:fd:
                    73:52:e7:a0:82:b5:bd:f3:5e:3b:64:7c:97:0d:b9:
                    15:b3:f1:f2:6a:40:7c:31:f0:ee:40:24:eb:65:55:
                    1b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:F7:E1:DE:10:41:01:12:53:4C:55:B0:C7:72:AB:D4:AC:DF:DA:92
            X509v3 Authority Key Identifier:
                keyid:CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38392e3138352e33302e302f32342d3234203d3e20323032363632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.185.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:f6:2a:1a:93:1c:77:7e:42:ac:c7:b7:61:b5:34:da:e8:dc:
         fe:06:93:18:e5:44:bd:c9:26:c0:2d:9b:40:e6:55:81:ab:1c:
         bc:ed:c8:0f:b9:df:ee:c2:c5:39:70:1c:82:3f:74:1b:c6:4d:
         d1:32:2c:6a:89:4d:88:85:e6:a9:00:28:4a:e4:72:74:db:e5:
         c9:ec:5d:46:06:31:8f:6f:ba:14:fb:23:49:97:ca:09:e2:03:
         2f:1f:88:12:27:76:95:9b:45:cb:82:14:40:04:48:88:36:81:
         30:54:7f:17:45:a4:06:65:b0:5a:95:0c:d5:92:9a:9f:45:de:
         59:28:25:a5:da:18:d9:d1:c7:fa:7c:92:46:e6:ad:56:96:6c:
         79:59:b6:4a:68:ca:2c:6d:40:28:86:3b:45:71:7d:87:17:8c:
         49:ef:b1:31:1c:26:b9:d4:42:71:cf:78:af:9b:23:f2:46:90:
         04:f1:c5:56:4e:01:99:08:eb:0e:6c:8f:f1:ff:4a:22:50:39:
         db:3f:e2:dd:1a:12:36:5d:b2:b3:59:2c:54:d3:66:6d:c8:ec:
         ca:6b:02:75:72:50:ed:3d:d2:31:0f:0b:de:36:40:33:57:a1:
         8a:e0:6a:32:92:bf:aa:17:4b:65:3f:f9:97:86:80:78:6d:5b:
         7f:45:8b:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 14 19:53:52 2026 by rpki-client