This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS202736.roa
File:                     AS202736.roa (raw, json)
Hash identifier:          PSq5RYUHVyPMTfoNRtFI2xcRvWSZUfb6fxaEGQM0eBo=
Subject key identifier:   5A:55:98:46:43:50:90:57:0F:26:C6:2A:BE:F5:E6:27:4F:46:DA:E8
Certificate issuer:       /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial:       19F17A78EBC0043780F18708D01F76D1D3CD9DD3
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS202736.roa
Signing time:             Tue 30 Dec 2025 08:05:28 +0000
ROA not before:           Tue 30 Dec 2025 08:00:28 +0000
ROA not after:            Tue 29 Dec 2026 08:05:28 +0000
asID:                     202736
IP address blocks:        45.146.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Jan 2026 14:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:f1:7a:78:eb:c0:04:37:80:f1:87:08:d0:1f:76:d1:d3:cd:9d:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
        Validity
            Not Before: Dec 30 08:00:28 2025 GMT
            Not After : Dec 29 08:05:28 2026 GMT
        Subject: CN=5A559846435090570F26C62ABEF5E6274F46DAE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:17:3d:16:77:ca:86:b5:f4:d1:f1:f5:51:42:
                    81:e4:b5:0b:77:17:d2:01:19:ae:ee:9c:9c:94:ab:
                    3e:7c:c2:29:07:12:15:2a:a0:a0:22:6f:41:05:d4:
                    2e:75:c2:bc:19:75:6e:50:17:f9:48:79:be:73:8f:
                    2c:1f:cf:0f:a7:52:ff:c9:d9:4a:cd:9c:10:1c:3e:
                    5e:21:42:df:1d:55:6b:a9:9d:63:f0:1e:07:9b:92:
                    90:32:a3:2c:f5:3e:55:27:0c:5a:59:53:6c:ec:2c:
                    b2:5e:98:06:8b:2e:15:22:97:40:89:e1:11:c5:00:
                    65:c6:09:f1:6f:22:44:61:85:10:dc:5c:66:21:bc:
                    a0:03:b0:25:50:e2:1c:f5:4e:4c:46:9a:ca:5a:2d:
                    9b:6d:e0:7f:66:b2:46:52:4e:36:5e:62:d3:50:38:
                    f2:5e:d0:4c:cf:ef:a3:c8:0d:5d:7f:9e:2b:ab:c7:
                    31:fe:da:20:65:9d:86:1c:42:2a:22:d5:10:b5:4d:
                    f8:2c:42:c6:49:7a:31:48:e5:ba:24:e5:41:3a:d3:
                    c8:9e:67:c9:1f:d1:83:a5:ca:a6:43:8a:4c:7d:0f:
                    b6:79:71:a0:6c:95:52:27:33:7a:1e:1c:f6:50:3a:
                    6e:69:9e:5a:c0:ee:c4:d3:1b:2f:fa:a9:7e:ab:db:
                    03:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:55:98:46:43:50:90:57:0F:26:C6:2A:BE:F5:E6:27:4F:46:DA:E8
            X509v3 Authority Key Identifier:
                keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS202736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.146.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:31:2b:f7:fc:10:02:3d:8a:3f:0a:50:27:4f:d9:44:0e:0a:
         26:fd:ca:96:d9:f3:18:36:eb:dd:70:43:04:fc:22:2c:2b:74:
         da:e2:74:49:fd:11:59:5e:43:e0:fc:a0:25:b1:50:a8:b4:30:
         77:86:cb:5a:83:19:df:c5:19:b1:7e:ea:d9:ca:a2:88:c1:1e:
         fb:dc:66:a7:3d:9c:06:92:e9:c3:39:09:cd:07:6c:7b:20:51:
         e7:93:3c:bc:4e:49:b9:92:09:3d:91:7b:df:88:c3:9a:73:e4:
         33:ab:ff:91:ec:a3:88:45:0c:6f:37:93:6c:b1:e8:47:50:16:
         f8:84:b5:41:b3:b8:72:f8:0e:73:ea:92:23:ff:c1:44:3c:33:
         12:f1:24:34:53:b6:75:ad:7d:dd:af:d3:18:db:7b:d4:1c:87:
         27:b5:f6:3f:99:71:88:77:38:e3:cb:97:6c:3e:59:2e:f5:2a:
         02:9c:45:20:7f:ca:03:8d:c2:21:6f:db:8a:8f:fa:6a:bd:36:
         48:d5:e1:2b:f3:63:3e:65:ef:5e:5d:3c:d9:f1:28:47:9f:f0:
         02:db:1e:8b:fb:f2:96:72:97:e8:6b:79:d8:bf:dd:d2:39:d6:
         0b:e6:76:b4:f9:a0:b1:09:a4:21:19:da:79:f5:34:e9:4e:82:
         0e:cf:c7:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 07:31:16 2026 by rpki-client