This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS135391.roa
File:                     AS135391.roa (raw, json)
Hash identifier:          dZRuaa/Hnxkd7sgmIuo2tLiG5mBo2Sk78nu6klWi+3o=
Subject key identifier:   D8:10:5F:0B:02:93:76:40:85:70:75:BC:FC:F9:7B:16:59:99:23:41
Certificate issuer:       /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial:       68BA9ED2136EEEB0449CE374E8525FEA70279F6A
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS135391.roa
Signing time:             Thu 29 Jan 2026 02:00:25 +0000
ROA not before:           Thu 29 Jan 2026 01:55:25 +0000
ROA not after:            Thu 28 Jan 2027 02:00:25 +0000
asID:                     135391
IP address blocks:        46.203.175.0/24 maxlen: 24
                          92.113.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 30 Jan 2026 03:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:ba:9e:d2:13:6e:ee:b0:44:9c:e3:74:e8:52:5f:ea:70:27:9f:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
        Validity
            Not Before: Jan 29 01:55:25 2026 GMT
            Not After : Jan 28 02:00:25 2027 GMT
        Subject: CN=D8105F0B02937640857075BCFCF97B1659992341
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:04:90:0b:5b:bb:28:bf:b1:f8:fa:dd:bc:7e:
                    e7:39:b4:71:f6:3c:ba:86:c0:aa:5d:00:11:5f:ff:
                    a4:96:75:fc:9b:73:38:27:55:91:e2:39:70:35:44:
                    dc:43:94:b4:ad:32:14:92:92:c8:00:e0:9e:4b:be:
                    5a:a9:e8:07:69:e6:6b:3a:a5:c7:41:c1:ae:6b:e8:
                    6a:4b:ab:a7:ab:c5:c6:22:6f:da:e3:13:a4:94:e4:
                    bf:db:2c:9c:5a:b2:ed:cb:45:81:3e:c6:5f:13:e1:
                    32:ab:09:1e:46:2a:7f:63:8f:04:66:5d:ec:f4:11:
                    22:0d:8e:bc:36:60:c1:39:a4:7c:e6:31:b0:48:18:
                    46:e1:00:b5:f6:06:25:aa:08:ea:01:13:a1:04:eb:
                    a1:03:73:65:79:16:06:18:1f:4f:07:06:e7:b4:30:
                    f1:56:cb:94:86:36:49:6c:82:0f:7d:d7:c5:62:5a:
                    a6:93:eb:71:53:65:54:7e:a6:f1:6d:e8:a2:c0:28:
                    fd:82:c7:79:ac:dc:df:22:f9:3a:d9:c2:f8:89:ea:
                    f8:9f:e5:0a:70:d1:b1:99:89:d5:b9:7e:6a:d7:3c:
                    c8:ca:b8:bb:e7:97:a1:f3:77:41:9a:b0:9e:b2:13:
                    00:d2:e8:68:3b:2b:c4:ad:2d:51:af:af:1f:f5:07:
                    70:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:10:5F:0B:02:93:76:40:85:70:75:BC:FC:F9:7B:16:59:99:23:41
            X509v3 Authority Key Identifier:
                keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS135391.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.203.175.0/24
                  92.113.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:ba:e0:1c:67:9d:b0:33:bb:25:7a:df:60:80:f4:c2:ba:da:
         dc:94:f2:a0:60:4c:67:77:39:65:57:f1:2a:06:8d:b2:c9:b5:
         df:12:3f:d1:7d:a1:31:23:b2:38:2f:c6:8a:e6:4c:fc:dd:f0:
         d6:b0:21:1f:e0:87:9c:d2:45:cb:98:66:07:bf:24:cf:7f:17:
         fb:a0:d4:ea:71:d6:97:52:54:52:70:96:ab:5f:0a:6b:4b:72:
         9d:56:93:c5:f5:02:b5:e0:8b:ac:20:c5:74:9e:14:7b:b2:06:
         a6:fc:c8:fc:6c:54:2a:2f:da:73:fc:5e:d2:fb:66:72:6e:e5:
         ba:92:33:d9:97:53:32:c0:82:db:68:df:49:10:f2:01:64:43:
         04:1d:5b:ed:ee:f5:38:a1:f6:94:30:9a:fe:bb:a3:d7:05:2d:
         09:96:33:dd:ca:89:c5:ea:fc:2f:cf:47:7d:5f:64:12:97:31:
         2c:3c:0d:13:e8:3f:a2:11:42:d5:a6:f2:bc:2d:83:03:88:50:
         e2:ae:d4:8f:58:ac:5f:4f:2c:8d:6b:9e:94:d6:b2:61:94:e1:
         b1:a4:8f:86:c6:f6:96:82:64:e2:6a:06:20:57:b4:cf:03:9f:
         be:a8:d0:1f:34:2b:14:5e:55:9b:b7:93:13:60:70:00:dc:ec:
         86:39:77:1c
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIUaLqe0hNu7rBEnON06FJf6nAnn2owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNjAxMjkwMTU1MjVaFw0yNzAxMjgwMjAwMjVaMDMxMTAvBgNV
BAMTKEQ4MTA1RjBCMDI5Mzc2NDA4NTcwNzVCQ0ZDRjk3QjE2NTk5OTIzNDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcBJALW7sov7H4+t28fuc5tHH2
PLqGwKpdABFf/6SWdfybczgnVZHiOXA1RNxDlLStMhSSksgA4J5Lvlqp6Adp5ms6
pcdBwa5r6GpLq6erxcYib9rjE6SU5L/bLJxasu3LRYE+xl8T4TKrCR5GKn9jjwRm
Xez0ESINjrw2YME5pHzmMbBIGEbhALX2BiWqCOoBE6EE66EDc2V5FgYYH08HBue0
MPFWy5SGNklsgg9918ViWqaT63FTZVR+pvFt6KLAKP2Cx3ms3N8i+TrZwviJ6vif
5Qpw0bGZidW5fmrXPMjKuLvnl6Hzd0GasJ6yEwDS6Gg7K8StLVGvrx/1B3ArAgMB
AAGjggIQMIICDDAdBgNVHQ4EFgQU2BBfCwKTdkCFcHW8/Pl7FlmZI0EwHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMTM1MzkxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALsuv
AwQAXHH8MA0GCSqGSIb3DQEBCwUAA4IBAQBUuuAcZ52wM7slet9ggPTCutrclPKg
YExndzllV/EqBo2yybXfEj/RfaExI7I4L8aK5kz83fDWsCEf4Iec0kXLmGYHvyTP
fxf7oNTqcdaXUlRScJarXwprS3KdVpPF9QK14IusIMV0nhR7sgam/Mj8bFQqL9pz
/F7S+2ZybuW6kjPZl1MywILbaN9JEPIBZEMEHVvt7vU4ofaUMJr+u6PXBS0JljPd
yonF6vwvz0d9X2QSlzEsPA0T6D+iEULVpvK8LYMDiFDirtSPWKxfTyyNa56U1rJh
lOGxpI+GxvaWgmTiagYgV7TPA5++qNAfNCsUXlWbt5MTYHAA3OyGOXcc
-----END CERTIFICATE-----
Generated at Thu Jan 29 08:25:08 2026 by rpki-client