This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138342e302f32342d3234203d3e203538303631.roa
File:                     3137382e3230382e3138342e302f32342d3234203d3e203538303631.roa (raw, json)
Hash identifier:          YP4YHXitSPQZCFgyUwf0x2J5APG8E4j6WZD0KxotoLk=
Subject key identifier:   7A:37:EE:AB:23:19:E3:5F:A6:30:8E:CA:97:25:75:00:6D:3D:49:B9
Certificate issuer:       /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial:       76D87EFE9838036107BE3CE09EC4D4D707A4968D
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138342e302f32342d3234203d3e203538303631.roa
Signing time:             Fri 26 Dec 2025 18:55:32 +0000
ROA not before:           Fri 26 Dec 2025 18:50:32 +0000
ROA not after:            Fri 25 Dec 2026 18:55:32 +0000
asID:                     58061
IP address blocks:        178.208.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 00:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:d8:7e:fe:98:38:03:61:07:be:3c:e0:9e:c4:d4:d7:07:a4:96:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
        Validity
            Not Before: Dec 26 18:50:32 2025 GMT
            Not After : Dec 25 18:55:32 2026 GMT
        Subject: CN=7A37EEAB2319E35FA6308ECA972575006D3D49B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:57:15:9f:82:9b:2b:ef:78:b7:b4:ad:16:8c:
                    9d:36:c1:8b:28:d3:6f:7a:90:64:45:0c:ea:45:92:
                    84:07:e1:f5:55:33:39:79:1c:9f:d2:05:bb:bc:ea:
                    2d:c7:6b:a2:8d:97:54:81:e0:c8:21:b9:dc:ae:74:
                    73:df:97:a3:29:21:ee:55:b4:1d:f0:f5:28:39:e4:
                    74:be:db:cf:f2:f7:61:35:0b:1d:6f:22:77:d7:50:
                    61:d8:75:f1:34:da:f5:9b:ea:23:fa:77:cb:fc:83:
                    cb:1f:f6:6d:b9:ca:49:ff:1f:a7:67:31:8f:89:55:
                    b7:05:ae:40:58:4c:dc:06:44:32:5a:e8:34:9d:ef:
                    7f:13:97:a5:a2:fb:1d:55:95:43:40:a1:ba:d9:ee:
                    c4:6b:f1:64:30:61:50:4f:d4:0d:23:8b:bc:e5:f7:
                    19:8d:c8:fb:8f:f3:15:17:93:e0:d0:90:c0:7f:5a:
                    dc:b7:cf:13:87:5b:33:e6:9d:f4:b2:5d:32:97:58:
                    fc:06:e1:f4:e3:a4:31:8b:cc:8d:a2:88:de:dc:14:
                    48:e6:8c:94:18:b6:95:5c:62:12:e4:61:43:2b:49:
                    d7:78:31:1d:01:13:7d:8f:08:b4:4e:f4:f0:d2:83:
                    9c:bb:b0:45:fb:b0:a1:16:17:56:cb:6c:ee:1d:09:
                    a3:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:37:EE:AB:23:19:E3:5F:A6:30:8E:CA:97:25:75:00:6D:3D:49:B9
            X509v3 Authority Key Identifier:
                keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138342e302f32342d3234203d3e203538303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.208.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:1e:3c:21:0d:50:c7:5c:3c:c4:17:76:e6:7e:01:71:54:65:
         38:ef:cf:a9:ac:1f:3f:a9:52:81:f1:1c:a7:28:71:91:84:5a:
         ec:33:42:f4:26:97:2b:4c:a0:89:6b:d8:f5:b7:4c:ac:ac:f3:
         6a:96:54:24:7d:8f:3e:20:38:ed:18:90:44:bf:13:ee:67:7c:
         ca:a8:4e:15:c9:1a:9f:7e:f0:3f:83:de:0d:e5:de:88:9d:fd:
         ab:d8:a9:e4:2b:66:0a:92:9d:f3:01:94:ca:c9:9a:78:a1:e0:
         6e:c6:3c:2c:8a:e5:46:27:17:91:b8:36:b0:5a:4e:d5:ef:77:
         fe:30:79:7a:01:0e:0b:bd:ef:d1:e3:72:74:15:7f:1a:db:80:
         cb:80:dd:6d:ec:cb:48:f0:7d:e9:0f:f7:f7:77:27:bb:50:64:
         db:9d:9c:7e:40:0f:bf:82:be:e7:6c:b0:3b:ca:32:9f:e5:80:
         65:25:f0:ce:82:ea:42:e1:44:8c:77:1c:c3:55:41:0b:f5:f2:
         1c:f4:97:5e:05:fb:8f:27:c0:a5:d1:7e:2c:52:02:43:eb:2f:
         05:94:90:d7:4d:90:4c:07:2e:ad:ae:54:86:89:aa:1f:9b:33:
         2b:8e:61:38:fb:a7:2e:bf:4a:c3:43:78:d9:40:5c:c8:fe:84:
         43:f5:cb:45
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUdth+/pg4A2EHvjzgnsTU1weklo0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQ4YWY2NjViZjhiMTg2YjcwMjIwNzU5ZDI2YzU3OGY0
MGI1ZjNlMzAeFw0yNTEyMjYxODUwMzJaFw0yNjEyMjUxODU1MzJaMDMxMTAvBgNV
BAMTKDdBMzdFRUFCMjMxOUUzNUZBNjMwOEVDQTk3MjU3NTAwNkQzRDQ5QjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsVxWfgpsr73i3tK0WjJ02wYso
0296kGRFDOpFkoQH4fVVMzl5HJ/SBbu86i3Ha6KNl1SB4MghudyudHPfl6MpIe5V
tB3w9Sg55HS+28/y92E1Cx1vInfXUGHYdfE02vWb6iP6d8v8g8sf9m25ykn/H6dn
MY+JVbcFrkBYTNwGRDJa6DSd738Tl6Wi+x1VlUNAobrZ7sRr8WQwYVBP1A0ji7zl
9xmNyPuP8xUXk+DQkMB/Wty3zxOHWzPmnfSyXTKXWPwG4fTjpDGLzI2iiN7cFEjm
jJQYtpVcYhLkYUMrSdd4MR0BE32PCLRO9PDSg5y7sEX7sKEWF1bLbO4dCaNfAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUejfuqyMZ41+mMI7KlyV1AG09SbkwHwYDVR0j
BBgwFoAUBIr2Zb+LGGtwIgdZ0mxXj0C18+MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODJhOWJmNWItMzljMS00MDUwLWIwNzMtNDgwNzViODYx
ZDg3LzAvMDQ4QUY2NjVCRjhCMTg2QjcwMjIwNzU5RDI2QzU3OEY0MEI1RjNFMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0JJcjJaYi1MR0d0d0lnZFowbXhYajBD
MTgtTS5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODJhOWJmNWIt
MzljMS00MDUwLWIwNzMtNDgwNzViODYxZDg3LzAvMzEzNzM4MmUzMjMwMzgyZTMx
MzgzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM1MzgzMDM2MzEucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BACy0LgwDQYJKoZIhvcNAQELBQADggEBAHgePCENUMdcPMQXduZ+AXFUZTjvz6ms
Hz+pUoHxHKcocZGEWuwzQvQmlytMoIlr2PW3TKys82qWVCR9jz4gOO0YkES/E+5n
fMqoThXJGp9+8D+D3g3l3oid/avYqeQrZgqSnfMBlMrJmnih4G7GPCyK5UYnF5G4
NrBaTtXvd/4weXoBDgu979HjcnQVfxrbgMuA3W3sy0jwfekP9/d3J7tQZNudnH5A
D7+CvudssDvKMp/lgGUl8M6C6kLhRIx3HMNVQQv18hz0l14F+48nwKXRfixSAkPr
LwWUkNdNkEwHLq2uVIaJqh+bMyuOYTj7py6/SsNDeNlAXMj+hEP1y0U=
-----END CERTIFICATE-----
Generated at Mon Jan 19 07:49:34 2026 by rpki-client