This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3138352e32392e3136342e302f32342d3234203d3e20383334.roa
File:                     3138352e32392e3136342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          uqsm5l4zodTMYfjt60I1YFWfbVA20BXcpw/BT0/eXT0=
Subject key identifier:   07:23:77:E4:2B:0E:37:39:2E:19:80:E4:D9:86:9E:8C:2F:F2:AA:BD
Certificate issuer:       /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial:       4F795CC23AF5A8C1AC95213295C7C8C74727147A
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3138352e32392e3136342e302f32342d3234203d3e20383334.roa
Signing time:             Sat 07 Feb 2026 02:38:03 +0000
ROA not before:           Sat 07 Feb 2026 02:33:03 +0000
ROA not after:            Sat 06 Feb 2027 02:38:03 +0000
asID:                     834
IP address blocks:        185.29.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Feb 2026 00:59:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:79:5c:c2:3a:f5:a8:c1:ac:95:21:32:95:c7:c8:c7:47:27:14:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
        Validity
            Not Before: Feb  7 02:33:03 2026 GMT
            Not After : Feb  6 02:38:03 2027 GMT
        Subject: CN=072377E42B0E37392E1980E4D9869E8C2FF2AABD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:28:53:7e:ca:9f:68:8a:49:8d:1f:46:98:d8:
                    5c:b9:11:29:2b:7f:04:cf:c6:f4:66:29:c7:d8:d0:
                    e8:ec:35:d3:86:d0:57:ad:8d:93:df:77:29:cb:b1:
                    a9:79:ec:ce:99:68:cf:30:b1:76:1d:ba:31:cb:83:
                    73:ab:7f:62:6c:14:bf:b8:71:a4:60:18:b5:c1:a6:
                    7c:49:61:94:c3:7c:fd:30:11:a8:4d:c7:4c:db:ba:
                    62:50:e0:3c:d8:1d:f0:5f:df:db:2c:20:af:d3:81:
                    78:f9:51:54:7e:13:4d:c4:06:01:51:e8:0d:7b:ae:
                    8b:01:f1:2c:90:59:41:d3:a8:64:8f:97:01:a4:cb:
                    47:82:5d:4a:62:c3:bb:d6:11:e9:6a:d2:2b:09:33:
                    22:f0:0b:d3:03:77:e7:86:90:df:59:0d:3b:77:ac:
                    1a:f7:6a:dc:86:b9:2c:55:6a:cc:d2:01:e4:e3:f9:
                    bd:f5:f0:08:c8:22:88:27:fa:2f:7f:5e:4a:53:0f:
                    0b:6e:c1:63:43:5c:fe:56:78:fe:83:f7:70:a1:8c:
                    19:ba:9d:11:66:da:76:23:a6:21:2f:f9:7f:00:bf:
                    e6:0a:05:b6:75:3e:22:4f:99:4e:89:25:6d:c0:b5:
                    54:72:0a:99:94:1b:c6:cf:ff:fd:dd:00:e6:06:c6:
                    60:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:23:77:E4:2B:0E:37:39:2E:19:80:E4:D9:86:9E:8C:2F:F2:AA:BD
            X509v3 Authority Key Identifier:
                keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3138352e32392e3136342e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.29.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:50:af:90:e9:dc:de:ee:2d:e0:be:65:45:8c:5b:88:f5:4a:
         cf:27:8b:af:25:66:9a:10:38:a2:d3:7d:e9:a0:b1:d8:e6:b4:
         26:5b:71:f0:e7:65:0c:f4:c2:aa:a1:33:0f:ec:b9:7a:7d:91:
         4a:f5:85:de:a1:c6:a3:16:f6:7a:1c:40:ef:99:8c:f2:06:7c:
         39:be:3d:c3:b1:b4:33:21:cc:f1:a8:5f:7e:fa:94:e7:57:06:
         e0:0a:7f:90:3c:8d:a9:3f:df:ab:19:ef:c0:09:2f:ac:d1:91:
         1e:a7:b7:94:5f:2d:cb:04:2f:80:8f:d3:83:c1:01:d0:0c:d4:
         01:65:e9:61:49:eb:e3:d5:5d:5e:cc:24:8d:f5:36:90:5d:89:
         b8:b7:3d:85:f2:29:97:3d:e5:37:ed:79:f6:e1:1d:d9:b4:1e:
         6d:52:0c:fa:b8:92:7a:5c:9c:58:fb:17:5d:94:75:30:bb:cf:
         1b:8b:19:83:22:b7:f3:47:f8:1b:3d:3b:7c:df:29:49:65:de:
         ac:d8:4a:d6:2c:41:5d:a2:87:0a:2c:43:9a:15:19:f2:56:68:
         3a:5e:e2:3f:be:20:1a:99:57:b3:c8:fe:41:73:4e:1f:21:79:
         0a:a6:6f:c3:e9:13:ad:61:7a:c9:63:40:63:34:5c:16:30:c5:
         27:81:af:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 14 17:27:18 2026 by rpki-client