This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/39322e3131392e31342e302f32332d3234203d3e20383334.roa
File:                     39322e3131392e31342e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier:          wk5vZ50Mu7KWLxzECLztmITxZ1tH/IX/iyfYPevt3Kc=
Subject key identifier:   57:E2:32:07:90:6E:D1:81:0E:8F:84:27:CE:2E:25:A0:1B:05:80:AA
Certificate issuer:       /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial:       1BE723FD328CAF31D239630C99174C2209C9D43D
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/39322e3131392e31342e302f32332d3234203d3e20383334.roa
Signing time:             Thu 12 Feb 2026 10:10:21 +0000
ROA not before:           Thu 12 Feb 2026 10:05:21 +0000
ROA not after:            Thu 11 Feb 2027 10:10:21 +0000
asID:                     834
IP address blocks:        92.119.14.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Feb 2026 09:34:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:e7:23:fd:32:8c:af:31:d2:39:63:0c:99:17:4c:22:09:c9:d4:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
        Validity
            Not Before: Feb 12 10:05:21 2026 GMT
            Not After : Feb 11 10:10:21 2027 GMT
        Subject: CN=57E23207906ED1810E8F8427CE2E25A01B0580AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8f:60:fe:01:00:cd:aa:46:3e:d9:c3:21:61:
                    6a:3c:ad:f5:71:cb:ba:f7:ff:d4:ec:72:74:66:75:
                    cd:77:40:d0:26:01:79:e4:e8:34:21:3e:bc:fa:32:
                    87:2d:3b:25:2a:78:ab:9e:b6:02:4c:00:e4:6c:7a:
                    8a:6f:59:0e:e7:82:fc:ef:48:d3:01:d4:ad:9d:7f:
                    86:e3:7d:a4:27:6d:e8:11:7c:f1:51:85:e0:cf:cd:
                    bd:c0:39:31:30:d4:64:0a:24:8e:2e:2c:ac:7e:7c:
                    97:69:6f:3d:d7:86:a6:bf:a1:68:9a:1a:2a:df:4a:
                    b4:80:40:1c:f0:75:8d:c5:2b:ec:cd:33:73:16:f1:
                    74:5d:fe:f1:71:93:f4:5c:e3:18:57:71:af:73:b6:
                    f4:68:b3:20:63:12:7e:f7:e9:2a:d6:47:b7:31:85:
                    5f:34:d1:a0:5e:ae:8a:b4:32:09:fa:71:6c:24:8f:
                    8c:84:52:53:77:b1:4c:c3:be:b5:e7:5d:50:03:56:
                    5f:6c:4e:de:07:95:1e:8a:6d:29:64:7c:04:4c:8f:
                    e4:de:23:29:1d:1a:bf:e3:70:21:75:d7:53:79:7b:
                    6b:9b:cf:9e:33:64:4d:cc:ab:68:ee:75:64:3d:71:
                    7a:2e:84:7d:5c:6c:2b:c5:d9:1b:19:6a:a2:37:1a:
                    82:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:E2:32:07:90:6E:D1:81:0E:8F:84:27:CE:2E:25:A0:1B:05:80:AA
            X509v3 Authority Key Identifier:
                keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/39322e3131392e31342e302f32332d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.119.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         35:71:d2:14:3d:aa:f0:db:36:93:a1:53:4d:9b:18:45:00:d1:
         ea:42:3b:41:ea:14:63:df:8a:b6:3d:e5:34:78:07:40:61:8c:
         bd:ce:1d:8c:ff:ef:76:be:d9:df:6c:83:ee:e8:91:03:6e:f1:
         13:f3:24:f1:9e:b5:85:70:f0:9a:62:ff:d2:56:27:10:f6:82:
         a9:60:c0:39:2b:6a:b1:3d:d4:36:9b:e5:c2:21:6d:6f:52:e5:
         fc:e7:ec:b4:b7:ae:b2:1b:1d:4f:58:94:f7:62:00:ab:05:67:
         71:ea:79:cb:94:d8:b1:db:bc:5c:ee:dc:a3:cd:4f:d4:ea:b7:
         97:ea:50:61:32:ab:67:ec:ea:76:d2:14:ae:9f:fa:bd:f4:6c:
         a5:52:5e:ff:53:88:1e:c4:7a:40:70:68:9c:57:a8:f3:3f:3d:
         1d:9f:80:11:82:97:83:de:52:01:59:2e:4b:d0:ca:9b:44:98:
         41:57:84:8b:de:63:6c:aa:d6:95:02:e8:36:fc:68:23:d1:b7:
         15:22:77:47:e2:a6:f8:48:79:48:64:88:05:3d:79:a2:ca:37:
         72:3a:3f:ab:e9:ae:85:72:f5:8d:f8:0f:7a:f3:02:38:0f:30:
         88:d7:34:86:f4:22:84:e8:83:d1:62:07:58:03:1b:4f:de:bf:
         bf:be:0a:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 14 17:24:11 2026 by rpki-client