This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/3139382e3133352e3136392e302f32342d3234203d3e20333936393933.roa
File:                     3139382e3133352e3136392e302f32342d3234203d3e20333936393933.roa (raw, json)
Hash identifier:          ZuqL+fdFsSzEWPLF+KldkjLdFZi3woWq3fujFGdDY0Y=
Subject key identifier:   75:DC:4F:77:0D:C1:5A:27:77:E2:DF:77:5A:06:6C:F3:23:EB:37:8B
Certificate issuer:       /CN=43729997152fd84fcda6d190c3b3195b02679660112be9a2d7
Certificate serial:       25117BDC65BD3C28308AF47DD1EC9D6969D75E2B
Authority key identifier: 6A:6F:6E:C2:72:A5:EB:DC:18:24:1C:2C:84:D1:D9:FE:94:C1:25:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997152fd84fcda6d190c3b3195b02679660112be9a2d7.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/3139382e3133352e3136392e302f32342d3234203d3e20333936393933.roa
Signing time:             Mon 08 Dec 2025 22:31:38 +0000
ROA not before:           Mon 08 Dec 2025 22:26:38 +0000
ROA not after:            Mon 07 Dec 2026 22:31:38 +0000
asID:                     396993
IP address blocks:        198.135.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997152fd84fcda6d190c3b3195b02679660112be9a2d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/829fb872-15bb-4a4e-9ed9-259960b049bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/829fb872-15bb-4a4e-9ed9-259960b049bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Dec 2025 21:31:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:11:7b:dc:65:bd:3c:28:30:8a:f4:7d:d1:ec:9d:69:69:d7:5e:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43729997152fd84fcda6d190c3b3195b02679660112be9a2d7
        Validity
            Not Before: Dec  8 22:26:38 2025 GMT
            Not After : Dec  7 22:31:38 2026 GMT
        Subject: CN=75DC4F770DC15A2777E2DF775A066CF323EB378B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:68:66:2f:c8:20:6c:e0:aa:98:ac:c5:0d:62:
                    8d:ba:46:9c:38:b6:0f:d2:2c:3e:fc:ff:c6:63:59:
                    84:31:4d:72:8e:29:70:c9:f7:fd:2b:cb:ea:d8:52:
                    04:dd:a5:55:4a:7c:d3:f1:09:44:04:66:a0:48:ad:
                    c8:48:71:90:6b:9b:98:83:37:2c:66:87:ce:a1:36:
                    7d:67:11:b5:71:3f:c1:c2:94:77:1b:93:b6:cb:62:
                    eb:33:0f:8a:7e:94:5b:59:84:63:d5:15:8e:e0:ab:
                    73:21:8d:21:86:16:f3:f9:d6:9b:b2:fa:2c:b2:f2:
                    76:f3:fe:5b:92:88:ca:8d:ce:77:31:ef:f7:2a:b2:
                    8d:1c:9d:c6:19:a5:81:17:ce:fc:d6:c2:a0:30:99:
                    c0:2a:64:21:a5:0d:b3:b4:a0:6f:f4:d9:64:d6:e4:
                    4e:44:ad:e0:84:9c:f6:cc:a8:42:98:eb:56:35:9b:
                    5a:53:e3:1f:70:7d:42:57:5e:8a:0e:67:a5:05:4a:
                    93:32:ee:7c:31:07:68:72:64:f7:95:ab:0f:e8:02:
                    cd:c5:4c:7d:54:7e:d9:d1:12:f9:9c:d6:cb:a6:87:
                    ce:69:84:46:d2:ad:bd:9a:9b:cc:b2:0f:a4:b5:55:
                    ac:cd:27:6f:a8:4e:0b:ef:6b:49:e9:bf:f7:d2:f2:
                    de:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:DC:4F:77:0D:C1:5A:27:77:E2:DF:77:5A:06:6C:F3:23:EB:37:8B
            X509v3 Authority Key Identifier:
                keyid:6A:6F:6E:C2:72:A5:EB:DC:18:24:1C:2C:84:D1:D9:FE:94:C1:25:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997152fd84fcda6d190c3b3195b02679660112be9a2d7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/3139382e3133352e3136392e302f32342d3234203d3e20333936393933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.135.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:07:c2:fd:99:90:28:b4:bb:b5:bc:40:da:22:54:4d:40:e1:
         83:e7:05:f4:c7:5a:b6:13:27:0c:3f:3f:68:92:55:6f:31:28:
         80:cf:3d:85:52:b7:be:7c:27:ec:f0:0f:85:77:74:5a:ab:9a:
         ec:8e:7e:5a:fe:0f:28:be:8a:9d:f7:43:87:c0:d0:e2:e5:24:
         7d:be:bf:f7:ff:70:61:c8:fb:c3:96:bc:c2:0a:b2:fd:5e:76:
         35:7b:69:5c:aa:22:ae:f4:30:0c:08:9f:c1:d7:0c:cb:69:2c:
         39:3f:0b:7e:61:40:20:3a:fe:7e:c5:1e:eb:c4:4f:d9:c8:d2:
         e9:5d:d5:7d:9c:45:42:90:12:de:a4:4b:ec:ba:f5:ca:5a:95:
         49:05:e4:a8:34:37:ff:29:a1:25:e4:09:16:43:b3:e3:9d:6e:
         84:32:39:31:68:7a:af:7d:61:d7:30:45:46:04:dc:3a:2c:5e:
         76:a0:69:b3:ac:e1:1f:41:13:5f:fa:57:d6:1f:ce:ba:99:44:
         8b:3e:6a:4a:e3:4a:25:37:dd:be:04:92:41:84:c8:34:03:5a:
         05:41:a1:75:4f:45:dd:7e:26:6c:6f:5e:52:29:05:46:09:0b:
         6b:71:f4:bd:94:98:da:66:4d:bc:b4:1e:a4:a2:88:1a:69:02:
         cc:3e:37:b9
-----BEGIN CERTIFICATE-----
MIIF0TCCBLmgAwIBAgIUJRF73GW9PCgwivR90eydaWnXXiswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDM3Mjk5OTcxNTJmZDg0ZmNkYTZkMTkwYzNiMzE5NWIw
MjY3OTY2MDExMmJlOWEyZDcwHhcNMjUxMjA4MjIyNjM4WhcNMjYxMjA3MjIzMTM4
WjAzMTEwLwYDVQQDEyg3NURDNEY3NzBEQzE1QTI3NzdFMkRGNzc1QTA2NkNGMzIz
RUIzNzhCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA42hmL8ggbOCq
mKzFDWKNukacOLYP0iw+/P/GY1mEMU1yjilwyff9K8vq2FIE3aVVSnzT8QlEBGag
SK3ISHGQa5uYgzcsZofOoTZ9ZxG1cT/BwpR3G5O2y2LrMw+KfpRbWYRj1RWO4Ktz
IY0hhhbz+dabsvossvJ28/5bkojKjc53Me/3KrKNHJ3GGaWBF8781sKgMJnAKmQh
pQ2ztKBv9Nlk1uRORK3ghJz2zKhCmOtWNZtaU+MfcH1CV16KDmelBUqTMu58MQdo
cmT3lasP6ALNxUx9VH7Z0RL5nNbLpofOaYRG0q29mpvMsg+ktVWszSdvqE4L72tJ
6b/30vLeQwIDAQABo4IC0TCCAs0wHQYDVR0OBBYEFHXcT3cNwVond+Lfd1oGbPMj
6zeLMB8GA1UdIwQYMBaAFGpvbsJypevcGCQcLITR2f6UwSWqMA4GA1UdDwEB/wQE
AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu
cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzY2YmQ5MmYxLTQxNWItNDc2NS04YTE2
LWRiZmM0NTkzYzFhOC83LzZBNkY2RUMyNzJBNUVCREMxODI0MUMyQzg0RDFEOUZF
OTRDMTI1QUEuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy
c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0
YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTIt
NDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84MjlmYjg3Mi0xNWJiLTRhNGUtOWVkOS0y
NTk5NjBiMDQ5YmQvNDM3Mjk5OTcxNTJmZDg0ZmNkYTZkMTkwYzNiMzE5NWIwMjY3
OTY2MDExMmJlOWEyZDcuY2VyMIGxBggrBgEFBQcBCwSBpDCBoTCBngYIKwYBBQUH
MAuGgZFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
LzY2YmQ5MmYxLTQxNWItNDc2NS04YTE2LWRiZmM0NTkzYzFhOC83LzMxMzkzODJl
MzEzMzM1MmUzMTM2MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMzM5MzYzOTM5
MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADGh6kwDQYJKoZIhvcNAQELBQADggEBAI0Hwv2ZkCi0u7W8
QNoiVE1A4YPnBfTHWrYTJww/P2iSVW8xKIDPPYVSt758J+zwD4V3dFqrmuyOflr+
Dyi+ip33Q4fA0OLlJH2+v/f/cGHI+8OWvMIKsv1edjV7aVyqIq70MAwIn8HXDMtp
LDk/C35hQCA6/n7FHuvET9nI0uld1X2cRUKQEt6kS+y69cpalUkF5Kg0N/8poSXk
CRZDs+OdboQyOTFoeq99YdcwRUYE3DosXnagabOs4R9BE1/6V9YfzrqZRIs+akrj
SiU33b4EkkGEyDQDWgVBoXVPRd1+JmxvXlIpBUYJC2tx9L2UmNpmTby0HqSiiBpp
Asw+N7k=
-----END CERTIFICATE-----
Generated at Mon Dec 15 14:44:53 2025 by rpki-client