This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e36352e302f32342d3234203d3e20383334.roa
File:                     3231332e3133392e36352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          8XV/cTtJk6+1eBlX3AfSKp/J+YnF93qPUv0P3+L9/94=
Subject key identifier:   9E:DE:82:10:62:90:00:34:60:89:DB:2E:12:91:2B:66:9D:7F:0E:2C
Certificate issuer:       /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial:       1FE0518B5D38D623369DE3D977EE8C2947A974F7
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e36352e302f32342d3234203d3e20383334.roa
Signing time:             Thu 05 Feb 2026 05:17:53 +0000
ROA not before:           Thu 05 Feb 2026 05:12:53 +0000
ROA not after:            Thu 04 Feb 2027 05:17:53 +0000
asID:                     834
IP address blocks:        213.139.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Feb 2026 09:24:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:e0:51:8b:5d:38:d6:23:36:9d:e3:d9:77:ee:8c:29:47:a9:74:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
        Validity
            Not Before: Feb  5 05:12:53 2026 GMT
            Not After : Feb  4 05:17:53 2027 GMT
        Subject: CN=9EDE8210629000346089DB2E12912B669D7F0E2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:52:bc:7a:10:fc:57:19:c0:f6:d4:04:19:ed:
                    af:fc:5e:5e:d3:2c:46:9c:98:9c:de:72:1f:41:3b:
                    87:21:fd:c6:b9:d3:82:9f:8e:af:a4:e8:29:26:fa:
                    07:d0:54:6a:4d:b3:e7:ac:e8:76:3a:9f:06:e5:16:
                    e3:74:3e:9a:0e:68:cb:8d:be:f0:20:4e:f7:47:dd:
                    d9:e0:6b:dd:a9:92:e0:ea:af:ba:ff:ea:a2:87:69:
                    15:2e:34:00:b0:59:6b:d0:8d:73:f9:9e:4b:1c:47:
                    ce:3a:ac:51:1b:de:1b:22:73:3d:b6:f6:04:c7:f5:
                    cc:ea:18:25:e6:a5:3a:c6:c6:0b:ba:6b:e1:2b:39:
                    ea:ed:dd:af:db:66:71:96:0b:83:d8:ec:38:5b:78:
                    71:7e:2d:41:0c:66:80:fe:72:8b:d0:76:c5:ff:a4:
                    33:8a:f7:76:39:27:70:18:3f:ff:cf:13:0d:49:8d:
                    c6:e1:0f:fd:f2:f3:31:50:72:06:28:88:b3:f4:d0:
                    b9:5d:bd:56:95:06:b1:5c:ee:27:d1:f4:bc:56:2f:
                    5f:4c:a3:8a:40:8b:6d:f8:66:96:88:39:f4:c9:2f:
                    65:09:7f:9d:17:75:4b:d0:15:c3:4d:b1:5a:9d:b3:
                    1b:6b:a6:c7:ae:42:6a:d3:9c:14:ae:49:b8:ab:1c:
                    e0:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:DE:82:10:62:90:00:34:60:89:DB:2E:12:91:2B:66:9D:7F:0E:2C
            X509v3 Authority Key Identifier:
                keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e36352e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.139.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:87:c6:c7:a5:d6:8f:af:61:f1:93:33:05:62:5a:e4:b9:90:
         7e:ed:d1:a4:67:e8:f8:fa:b2:40:86:4f:be:38:94:65:95:aa:
         de:c9:17:f7:ac:e4:62:50:bd:c4:5b:b5:78:c0:92:12:c1:20:
         c7:37:73:7f:ad:68:0f:9a:78:67:dd:17:82:a8:23:e8:9f:15:
         5f:e3:55:44:1a:3f:f6:74:36:8e:c2:ad:47:ba:86:5f:63:02:
         a3:2d:b2:3b:ff:f1:74:a3:2e:51:99:9b:e9:c1:7c:c4:a7:80:
         0f:5b:61:dc:b6:95:56:39:fd:e0:6f:85:0b:4e:2f:b7:12:64:
         51:ff:30:1a:1b:9f:45:5b:10:6c:b6:cd:47:47:35:d0:3e:4f:
         b6:f0:d9:82:82:1a:50:6b:01:13:5a:43:94:b1:97:dd:ca:b8:
         2e:78:75:fb:2c:fb:ee:f6:b9:cd:7f:e4:07:0f:99:78:83:56:
         8e:d1:13:d3:f1:38:d2:c2:35:04:1b:6d:1b:c6:4f:7d:fe:21:
         b8:19:b4:28:dc:24:5c:67:70:9c:29:50:7e:37:47:ab:93:c5:
         8e:60:2e:1b:25:ec:2d:86:f9:f3:e2:62:69:d2:b7:40:f2:6b:
         a4:88:a7:5b:72:6a:66:17:2d:2a:ec:cb:2b:3e:04:3f:31:8e:
         b3:4b:88:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 14 17:26:38 2026 by rpki-client