This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/3138352e3138362e32362e302f32342d3234203d3e20323135373033.roa
File:                     3138352e3138362e32362e302f32342d3234203d3e20323135373033.roa (raw, json)
Hash identifier:          64uxD3jQtXWcavfYFljDhJHJgbOPhGll/0DiDk/jIuA=
Subject key identifier:   54:C1:93:AC:D8:91:AC:4B:69:50:DE:14:56:E5:EF:4D:5D:B3:69:DB
Certificate issuer:       /CN=b3d0280f500695a43204251c9830454ca8a2e7ac
Certificate serial:       15825A78D91B56A1625A63F34CAF66C1B829E989
Authority key identifier: B3:D0:28:0F:50:06:95:A4:32:04:25:1C:98:30:45:4C:A8:A2:E7:AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s9AoD1AGlaQyBCUcmDBFTKii56w.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/3138352e3138362e32362e302f32342d3234203d3e20323135373033.roa
Signing time:             Sun 16 Nov 2025 10:55:11 +0000
ROA not before:           Sun 16 Nov 2025 10:50:11 +0000
ROA not after:            Sun 15 Nov 2026 10:55:11 +0000
asID:                     215703
IP address blocks:        185.186.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s9AoD1AGlaQyBCUcmDBFTKii56w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 04 Dec 2025 22:53:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:82:5a:78:d9:1b:56:a1:62:5a:63:f3:4c:af:66:c1:b8:29:e9:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3d0280f500695a43204251c9830454ca8a2e7ac
        Validity
            Not Before: Nov 16 10:50:11 2025 GMT
            Not After : Nov 15 10:55:11 2026 GMT
        Subject: CN=54C193ACD891AC4B6950DE1456E5EF4D5DB369DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:37:51:16:fb:3b:ed:a1:82:af:1e:24:3f:df:
                    57:df:9f:d6:5d:47:81:7c:44:ba:ed:94:0b:3e:f8:
                    fb:b9:7e:57:71:61:2a:30:ac:69:f4:4d:3c:81:c1:
                    5d:df:ac:b8:4b:e7:49:1e:25:86:2c:a1:43:5c:41:
                    93:e3:00:7a:e7:30:ef:05:99:7f:88:24:92:83:9e:
                    91:55:72:93:bc:14:9d:40:07:d1:16:ae:47:22:01:
                    d6:69:01:cf:3b:3e:d9:31:11:3a:ba:50:77:4b:1c:
                    7d:65:db:19:3e:bd:a2:d1:83:33:da:21:38:ca:19:
                    03:30:c8:48:fe:e3:89:53:16:c3:51:16:c2:90:97:
                    d8:2e:ce:53:a4:e4:64:a7:57:ef:c2:0d:2c:6b:d1:
                    bc:85:8d:cd:ee:8c:61:b3:bd:57:70:74:11:1f:2c:
                    49:58:af:06:ed:6d:19:94:27:9b:1a:65:93:e0:9b:
                    6f:52:01:6c:13:ae:dc:84:e0:d7:2a:a0:4f:a3:c5:
                    2e:39:79:7f:92:84:10:a1:78:3c:58:76:dd:b8:62:
                    90:e8:00:de:4b:99:9d:29:12:f8:f2:7d:d5:61:a0:
                    fd:49:7a:b4:ec:39:c5:dc:bd:84:2d:b4:9d:43:dd:
                    a2:45:09:00:d0:c3:63:b4:3b:6c:f9:cd:89:2e:bf:
                    a5:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:C1:93:AC:D8:91:AC:4B:69:50:DE:14:56:E5:EF:4D:5D:B3:69:DB
            X509v3 Authority Key Identifier:
                keyid:B3:D0:28:0F:50:06:95:A4:32:04:25:1C:98:30:45:4C:A8:A2:E7:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9AoD1AGlaQyBCUcmDBFTKii56w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/3138352e3138362e32362e302f32342d3234203d3e20323135373033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.186.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:c1:c8:7e:a2:53:f1:ab:b3:c6:f5:9b:ae:97:5d:f1:0c:70:
         92:3d:a6:1b:b4:7d:54:15:f1:41:69:fa:40:1a:5b:15:d9:45:
         51:28:65:22:82:d6:f6:12:6c:62:21:f7:19:c5:be:df:f2:d4:
         d8:27:bd:ee:a7:ac:9f:e7:3c:77:68:d7:30:4d:45:68:69:57:
         3f:28:a7:da:5c:f3:b3:5b:4c:67:2c:e8:1d:72:46:da:62:6d:
         6f:0d:a8:67:20:a0:9d:33:14:64:fc:c0:e3:79:3b:ba:55:7e:
         eb:3c:5e:14:6d:09:63:37:3e:bf:6a:c7:f7:ae:6d:be:eb:40:
         22:1b:da:89:06:bc:40:2f:0c:e3:ec:6a:b1:e8:ca:7f:fd:4b:
         6c:a4:c2:e3:1b:03:97:d0:4d:22:f0:b4:86:cd:6c:75:c0:7c:
         0f:9a:f9:83:8b:5e:bb:cc:7c:70:da:50:21:98:f2:79:6e:bf:
         d7:ef:38:88:4f:47:81:a6:32:90:32:bf:7a:59:db:7a:ca:12:
         13:e4:fb:ba:c6:55:c1:15:37:4c:00:cf:13:47:b3:6c:ee:b8:
         e7:cf:c4:dc:3d:bb:3b:5d:a5:7e:08:6d:52:c3:11:66:ae:20:
         31:94:68:35:f8:bb:f1:d0:ba:4f:cd:18:93:b6:b5:c8:8c:39:
         be:c5:c2:8e
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUFYJaeNkbVqFiWmPzTK9mwbgp6YkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjNkMDI4MGY1MDA2OTVhNDMyMDQyNTFjOTgzMDQ1NGNh
OGEyZTdhYzAeFw0yNTExMTYxMDUwMTFaFw0yNjExMTUxMDU1MTFaMDMxMTAvBgNV
BAMTKDU0QzE5M0FDRDg5MUFDNEI2OTUwREUxNDU2RTVFRjRENURCMzY5REIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmN1EW+zvtoYKvHiQ/31ffn9Zd
R4F8RLrtlAs++Pu5fldxYSowrGn0TTyBwV3frLhL50keJYYsoUNcQZPjAHrnMO8F
mX+IJJKDnpFVcpO8FJ1AB9EWrkciAdZpAc87PtkxETq6UHdLHH1l2xk+vaLRgzPa
ITjKGQMwyEj+44lTFsNRFsKQl9guzlOk5GSnV+/CDSxr0byFjc3ujGGzvVdwdBEf
LElYrwbtbRmUJ5saZZPgm29SAWwTrtyE4NcqoE+jxS45eX+ShBCheDxYdt24YpDo
AN5LmZ0pEvjyfdVhoP1JerTsOcXcvYQttJ1D3aJFCQDQw2O0O2z5zYkuv6UdAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUVMGTrNiRrEtpUN4UVuXvTV2zadswHwYDVR0j
BBgwFoAUs9AoD1AGlaQyBCUcmDBFTKii56wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODdhZTI1ZjMtNzA2Yi00N2VkLWJiNzQtNDY2ODRhZTBl
ZjJiLzAvQjNEMDI4MEY1MDA2OTVBNDMyMDQyNTFDOTgzMDQ1NENBOEEyRTdBQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3M5QW9EMUFHbGFReUJDVWNtREJGVEtp
aTU2dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODdhZTI1ZjMt
NzA2Yi00N2VkLWJiNzQtNDY2ODRhZTBlZjJiLzAvMzEzODM1MmUzMTM4MzYyZTMy
MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzUzNzMwMzMucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAC5uhowDQYJKoZIhvcNAQELBQADggEBAHPByH6iU/Grs8b1m66XXfEMcJI9phu0
fVQV8UFp+kAaWxXZRVEoZSKC1vYSbGIh9xnFvt/y1Ngnve6nrJ/nPHdo1zBNRWhp
Vz8op9pc87NbTGcs6B1yRtpibW8NqGcgoJ0zFGT8wON5O7pVfus8XhRtCWM3Pr9q
x/eubb7rQCIb2okGvEAvDOPsarHoyn/9S2ykwuMbA5fQTSLwtIbNbHXAfA+a+YOL
XrvMfHDaUCGY8nluv9fvOIhPR4GmMpAyv3pZ23rKEhPk+7rGVcEVN0wAzxNHs2zu
uOfPxNw9uztdpX4IbVLDEWauIDGUaDX4u/HQuk/NGJO2tciMOb7Fwo4=
-----END CERTIFICATE-----
Generated at Thu Dec 4 07:29:06 2025 by rpki-client