This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/34352e3134392e36302e302f32342d3234203d3e20383334.roa
File:                     34352e3134392e36302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          v5z4mH+8qoFiRalLg5vNyoviHu/g6QQvDiLP4ihiaTg=
Subject key identifier:   87:77:70:01:C8:BD:91:EE:FA:DC:03:6B:DB:7D:56:B5:60:42:F8:77
Certificate issuer:       /CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b
Certificate serial:       24796565D7B401FE1CE830FD6054337B024DB099
Authority key identifier: ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/34352e3134392e36302e302f32342d3234203d3e20383334.roa
Signing time:             Sun 08 Feb 2026 08:35:58 +0000
ROA not before:           Sun 08 Feb 2026 08:30:58 +0000
ROA not after:            Sun 07 Feb 2027 08:35:58 +0000
asID:                     834
IP address blocks:        45.149.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Feb 2026 09:46:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:79:65:65:d7:b4:01:fe:1c:e8:30:fd:60:54:33:7b:02:4d:b0:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b
        Validity
            Not Before: Feb  8 08:30:58 2026 GMT
            Not After : Feb  7 08:35:58 2027 GMT
        Subject: CN=87777001C8BD91EEFADC036BDB7D56B56042F877
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d1:ba:91:c2:e8:23:0c:7f:2a:e1:db:2d:92:
                    01:e2:09:c6:a9:06:09:ac:b7:a7:a7:f0:ed:8d:e5:
                    9f:e7:bb:d1:97:11:dd:a9:f1:de:23:44:7b:8b:dc:
                    13:d4:ee:3c:ca:8b:31:75:9e:b2:2e:26:05:f2:44:
                    97:d2:fa:a1:62:4a:3f:7d:3e:6f:a3:a7:d0:83:51:
                    ae:eb:aa:38:a7:fa:cb:22:fc:f5:ae:54:df:ce:e6:
                    30:a4:ea:17:86:a7:f7:57:c5:51:54:9a:bb:8d:24:
                    ed:b0:14:d1:91:3c:eb:ae:f9:83:b6:27:23:63:26:
                    b2:ce:8e:ab:05:9b:e0:28:30:84:6d:35:c2:d2:db:
                    57:10:01:4a:d5:da:9e:1a:ad:72:dd:5c:c3:f6:a9:
                    35:e5:19:28:5a:49:f7:75:d8:3e:84:26:de:c5:51:
                    e2:50:73:1b:04:90:cf:8e:80:78:53:95:1e:af:74:
                    f9:1e:5b:4c:4f:a2:5e:de:8e:ab:92:79:98:ca:17:
                    a9:8a:e1:23:ab:31:81:d6:44:e8:62:6e:68:0b:1f:
                    5e:6e:10:2e:31:94:e2:85:7c:da:6e:e8:76:8c:7a:
                    25:b2:bf:4d:cb:1d:fa:da:ac:5d:bf:30:f5:b9:69:
                    4d:c1:be:de:8a:91:fc:0d:ad:a9:a4:be:b7:c5:14:
                    5c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:77:70:01:C8:BD:91:EE:FA:DC:03:6B:DB:7D:56:B5:60:42:F8:77
            X509v3 Authority Key Identifier:
                keyid:ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/34352e3134392e36302e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.149.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:e3:83:1a:6b:15:43:b5:08:82:5a:5b:b5:9b:a6:49:a1:fa:
         5a:15:f7:8a:2b:03:ef:74:ff:d0:34:80:56:b7:5c:ba:c5:0f:
         b2:fc:70:bd:b8:d8:14:5d:ec:86:65:aa:d3:cc:e5:15:12:8f:
         07:d2:b2:f1:90:bb:7c:57:dc:09:83:83:5a:6b:e1:d0:83:24:
         b0:81:69:73:81:29:0c:03:c2:9b:b6:92:b7:46:ee:2f:df:e0:
         ec:c1:eb:9b:00:84:c0:20:2a:4b:52:77:67:81:7a:c8:7c:95:
         dc:b9:af:e6:64:d6:e3:38:a3:e5:77:f2:15:9f:e2:11:89:89:
         79:1f:be:d1:b8:0b:b7:7e:0d:b7:1d:20:17:09:2f:85:12:a5:
         65:e0:d1:57:68:d0:30:aa:6b:df:45:c9:98:08:c4:68:b0:9a:
         e4:bd:e8:86:4a:5d:2b:45:09:a2:91:1c:ab:fc:81:e0:ae:35:
         68:62:c6:b5:77:56:4e:ef:07:6e:c8:9c:6a:82:78:e6:6b:db:
         65:0e:f4:c5:c8:89:03:82:7b:eb:7d:03:58:32:b6:aa:d9:33:
         2a:14:04:2e:9a:46:22:f7:5a:86:e8:aa:73:6f:61:6e:03:fb:
         90:45:45:3e:94:01:99:89:0b:54:a5:9b:5a:23:83:db:43:94:
         b1:b3:f5:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 14 17:26:35 2026 by rpki-client