This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/3134312e39382e34302e302f32342d3234203d3e203633313939.roa
File:                     3134312e39382e34302e302f32342d3234203d3e203633313939.roa (raw, json)
Hash identifier:          Zp7zdISkoaFNC+G0c29tuY8wRbhKWUC3ZCVWXR1t2Jo=
Subject key identifier:   E8:2E:91:92:DB:02:81:C0:83:87:04:80:8E:86:32:80:8D:B7:E4:DC
Certificate issuer:       /CN=7e51cac1ce2afe1958b1fb6a6237717b0b5d4810
Certificate serial:       65518A1E01161333EC9B7A2C46C924E367A61E3A
Authority key identifier: 7E:51:CA:C1:CE:2A:FE:19:58:B1:FB:6A:62:37:71:7B:0B:5D:48:10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/3134312e39382e34302e302f32342d3234203d3e203633313939.roa
Signing time:             Mon 17 Nov 2025 09:49:05 +0000
ROA not before:           Mon 17 Nov 2025 09:44:05 +0000
ROA not after:            Mon 16 Nov 2026 09:49:05 +0000
asID:                     63199
IP address blocks:        141.98.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Dec 2025 23:22:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:51:8a:1e:01:16:13:33:ec:9b:7a:2c:46:c9:24:e3:67:a6:1e:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e51cac1ce2afe1958b1fb6a6237717b0b5d4810
        Validity
            Not Before: Nov 17 09:44:05 2025 GMT
            Not After : Nov 16 09:49:05 2026 GMT
        Subject: CN=E82E9192DB0281C0838704808E8632808DB7E4DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:19:45:d4:28:39:31:01:9b:99:27:4e:c1:9e:
                    39:03:d4:e6:f9:da:bd:ad:e1:8d:c8:53:05:fd:76:
                    24:1f:93:e1:3c:c2:2e:a9:3f:3a:9b:4f:51:c4:2f:
                    6e:93:2f:b0:3a:01:57:11:7e:e3:d2:89:93:27:37:
                    3f:96:ca:d8:aa:ae:6d:f4:5f:e3:8d:14:be:d7:cf:
                    e5:90:5a:bd:0b:70:37:07:80:2b:bd:0c:d4:77:42:
                    24:84:48:bc:25:28:2e:71:2e:c5:2a:c8:ec:32:b9:
                    1d:e7:06:45:4b:fc:16:56:46:cb:69:e7:76:3e:0e:
                    c9:a0:14:39:9b:2b:72:38:ca:5f:51:24:18:37:67:
                    09:bd:55:93:85:8f:23:f4:cf:41:14:d3:89:c4:69:
                    f2:76:16:11:e3:2c:51:1f:93:42:4d:21:25:6d:c4:
                    d9:3a:39:e2:12:70:75:76:9c:fd:b3:09:4d:ec:43:
                    9e:42:bb:c8:93:3d:65:e1:f7:21:81:e4:ef:c2:10:
                    27:32:46:91:71:12:6a:ad:52:95:b6:89:22:12:01:
                    13:af:d1:d9:02:9d:07:d7:b6:68:c2:a8:d7:09:70:
                    6b:a9:35:96:51:9f:b9:a3:f0:1a:38:a9:f1:8a:7b:
                    c1:c0:c4:2d:c5:ef:c0:79:49:95:9a:8c:33:96:ee:
                    5f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:2E:91:92:DB:02:81:C0:83:87:04:80:8E:86:32:80:8D:B7:E4:DC
            X509v3 Authority Key Identifier:
                keyid:7E:51:CA:C1:CE:2A:FE:19:58:B1:FB:6A:62:37:71:7B:0B:5D:48:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/3134312e39382e34302e302f32342d3234203d3e203633313939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.98.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:d4:62:81:1f:e3:a2:cf:be:e4:57:39:2b:1f:a1:c1:34:74:
         0d:04:76:22:16:85:15:f8:c8:67:9b:05:f4:ef:ef:a0:91:ca:
         bb:d8:30:3b:cb:64:91:76:3d:30:3e:f5:04:60:70:06:b0:5f:
         7c:58:37:5f:aa:57:95:1c:b4:08:ea:45:e9:0a:7f:9c:b9:42:
         d0:94:fb:d0:99:50:06:55:7f:ac:dd:79:91:5a:16:5f:95:68:
         21:64:11:82:69:f6:4a:dd:d8:db:c0:7d:36:c1:44:c3:c9:2e:
         39:7b:3a:58:9e:06:aa:59:e7:f8:ed:56:8a:71:be:0b:41:41:
         81:f9:4c:a0:e1:cf:1f:e5:7f:13:20:d0:ba:b0:c8:8a:20:29:
         9c:e7:d7:cd:11:ed:35:bf:ae:10:6e:32:44:7c:fe:3f:99:40:
         83:2f:35:ea:16:09:b4:b4:d9:66:eb:6b:21:65:8e:27:5e:32:
         ef:b0:3b:5c:77:34:d2:19:fd:61:df:6c:98:8a:f1:cd:1d:ad:
         a2:b6:55:16:a8:46:5d:fc:b9:a3:e0:f2:43:b4:ab:e8:9e:bc:
         49:33:7f:72:a2:2a:e2:15:da:13:61:19:55:00:8c:ea:53:bc:
         ba:81:61:b5:d2:ac:aa:03:41:b7:5b:ac:30:76:3b:61:cd:1a:
         54:a4:c1:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 12:24:10 2025 by rpki-client