This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS202627.roa
File:                     AS202627.roa (raw, json)
Hash identifier:          Y+3XTOH6LuhDiTAuJPAqLPDCJCHGrrnSEMqgFenmJSQ=
Subject key identifier:   68:A2:BA:ED:FA:14:A2:AC:AD:E0:F6:77:FB:84:35:BE:D5:A8:50:92
Certificate issuer:       /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial:       4E5506D6E0BC0BFE131762EA5B551795FC3BC635
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS202627.roa
Signing time:             Fri 16 Jan 2026 14:18:45 +0000
ROA not before:           Fri 16 Jan 2026 14:13:45 +0000
ROA not after:            Fri 15 Jan 2027 14:18:45 +0000
asID:                     202627
IP address blocks:        193.111.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 03:52:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:55:06:d6:e0:bc:0b:fe:13:17:62:ea:5b:55:17:95:fc:3b:c6:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
        Validity
            Not Before: Jan 16 14:13:45 2026 GMT
            Not After : Jan 15 14:18:45 2027 GMT
        Subject: CN=68A2BAEDFA14A2ACADE0F677FB8435BED5A85092
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d6:f2:15:22:ce:30:2c:3d:fd:45:70:9b:4c:
                    82:d2:6b:53:2e:24:c0:04:35:f6:d8:03:46:e0:de:
                    83:0e:9f:5f:73:77:00:32:1f:14:74:3c:d4:26:bb:
                    5c:7c:ac:5c:c7:67:75:45:90:d8:0a:94:26:8c:19:
                    de:6d:9a:4f:07:d8:66:4d:99:c9:37:0f:43:2a:d1:
                    96:68:78:61:c2:c0:f8:3e:f6:f4:03:f6:f4:33:8d:
                    8a:68:7c:4a:63:94:bf:49:06:ae:ca:d1:e3:c2:c5:
                    cd:61:17:7b:ac:36:f0:5f:d5:0d:ea:77:ec:9a:fd:
                    9b:d1:ff:5e:61:3b:70:fc:63:2e:02:07:09:ab:08:
                    fe:6f:c4:c3:1e:b0:3e:57:e4:5a:33:48:eb:53:ca:
                    41:9f:88:56:44:31:26:08:32:0a:17:29:a4:c2:dd:
                    b5:be:9c:c2:96:4e:84:2c:a8:3d:b3:d4:7a:2a:fd:
                    70:03:20:9f:cd:d3:f8:30:7f:a3:b9:8f:9a:78:76:
                    25:b4:1d:de:58:c9:bc:c4:99:dd:5d:51:1d:4d:be:
                    61:1c:78:a3:50:05:f7:f4:52:13:b9:63:ca:12:01:
                    0c:b1:86:5f:97:7f:52:9d:0d:b3:10:12:d5:20:f0:
                    28:22:1b:65:18:03:92:2f:04:23:16:df:c1:d8:75:
                    b7:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:A2:BA:ED:FA:14:A2:AC:AD:E0:F6:77:FB:84:35:BE:D5:A8:50:92
            X509v3 Authority Key Identifier:
                keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS202627.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.111.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:d4:67:97:73:7f:43:d0:53:5c:3d:89:ba:f8:70:5f:55:b8:
         f2:59:39:aa:22:c9:2b:19:e7:18:e8:ff:19:64:b7:fa:7e:0e:
         ec:89:cb:6e:4a:ff:79:33:1f:5e:0e:4d:f7:e2:4d:8b:fa:3d:
         ad:6f:af:57:1e:30:35:5e:7d:0b:39:02:d0:98:91:98:81:c3:
         f0:ae:9c:49:27:80:15:a5:05:64:98:ae:2f:74:85:ea:62:05:
         5f:0d:34:ac:39:94:d9:d8:2c:79:83:0c:13:f7:76:f5:34:34:
         20:18:11:72:85:a2:55:ec:0e:93:46:32:74:5b:b6:35:1b:9b:
         c6:ca:90:12:dc:78:94:96:c3:13:7a:a5:e1:28:e2:2a:3f:fa:
         4b:72:85:ba:59:89:d4:d9:69:4b:6e:d3:7e:a3:db:1a:d7:b6:
         fd:d9:d9:7f:db:f5:aa:0d:e8:72:f9:01:0e:e9:d0:14:f4:03:
         02:18:bd:09:a6:97:49:74:6c:14:3b:3e:34:91:9b:77:3d:ff:
         c9:de:9a:d4:42:e4:93:40:a7:22:ae:14:cf:b5:70:65:13:1f:
         38:58:e0:a2:c7:39:33:1d:9f:0c:db:1d:cb:90:05:ce:cb:75:
         29:e0:97:1e:5d:10:4f:5c:07:e6:97:38:14:4d:b3:b7:e8:7b:
         6a:eb:4f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 14:37:21 2026 by rpki-client