This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS203057.roa
File:                     AS203057.roa (raw, json)
Hash identifier:          r9mK0amu97OxDpdHBN7vjYmx6JgvL1QElIEP3iSY5wY=
Subject key identifier:   55:31:A9:A8:01:70:54:59:2A:BD:A4:CE:27:AC:1E:B0:E5:1C:D8:4A
Certificate issuer:       /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial:       15ED921E6158C00A8B74F92B9B0B279D703CFD71
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS203057.roa
Signing time:             Wed 11 Feb 2026 03:20:06 +0000
ROA not before:           Wed 11 Feb 2026 03:15:06 +0000
ROA not after:            Wed 10 Feb 2027 03:20:06 +0000
asID:                     203057
IP address blocks:        46.202.225.0/24 maxlen: 24
                          91.124.33.0/24 maxlen: 24
                          178.93.98.0/24 maxlen: 24
                          178.93.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Feb 2026 20:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:ed:92:1e:61:58:c0:0a:8b:74:f9:2b:9b:0b:27:9d:70:3c:fd:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
        Validity
            Not Before: Feb 11 03:15:06 2026 GMT
            Not After : Feb 10 03:20:06 2027 GMT
        Subject: CN=5531A9A8017054592ABDA4CE27AC1EB0E51CD84A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:a5:03:9d:2c:aa:6b:5d:ec:db:bb:6e:2c:e1:
                    91:94:ca:73:90:2a:e8:77:3e:26:69:e4:81:b7:7e:
                    a9:c2:e3:1d:2d:78:3d:7a:7d:d2:33:0a:99:36:57:
                    ce:93:d4:0a:f5:b6:58:d4:04:7e:df:a5:e3:f8:5a:
                    bf:24:4f:8f:78:27:b8:f6:09:11:3b:a7:7f:35:2f:
                    3e:d5:6e:42:dd:29:b3:9c:05:4b:70:5c:64:25:d0:
                    db:18:43:a2:d1:0a:ff:24:6e:2e:d4:d8:e5:04:fd:
                    c9:54:06:1f:03:c1:2b:51:94:ef:21:52:68:36:91:
                    fe:33:50:6c:91:cb:15:48:49:c1:e4:59:ad:97:0a:
                    07:c5:2d:e9:e2:7f:00:e0:84:76:36:19:3e:e2:b2:
                    ad:bb:63:e3:99:c8:52:e0:8c:08:c1:57:b7:63:6c:
                    a2:f5:45:1a:b1:42:07:7d:ea:ad:03:ab:34:3e:2c:
                    0a:c7:8a:f3:0c:d7:1f:8e:15:f7:7e:b2:2f:49:16:
                    5f:d4:01:d6:bc:81:99:92:47:11:71:6e:3c:09:78:
                    4b:05:7a:fb:bd:af:6c:ec:59:6b:e3:5d:61:af:ad:
                    4c:ae:f6:bc:09:a6:a4:e2:15:ee:70:30:00:60:db:
                    e5:84:c2:27:af:0c:c3:7c:df:33:39:f4:f1:55:76:
                    be:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:31:A9:A8:01:70:54:59:2A:BD:A4:CE:27:AC:1E:B0:E5:1C:D8:4A
            X509v3 Authority Key Identifier:
                keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS203057.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.202.225.0/24
                  91.124.33.0/24
                  178.93.98.0/24
                  178.93.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:98:2a:6c:fd:74:8f:e5:33:4b:01:69:2d:86:d8:38:50:be:
         4b:c9:6b:9c:6d:f1:99:df:d9:25:d6:a3:62:fb:58:c6:53:72:
         ad:4f:47:89:08:5f:48:7a:b1:fd:53:ed:7b:e1:9e:a1:f9:9a:
         62:17:49:78:4f:e7:6a:e6:e8:f8:00:f2:22:d6:64:99:ee:00:
         5e:d1:3b:11:34:93:5f:e1:0c:2e:f3:a4:c8:bc:1b:dc:65:26:
         45:ec:88:dd:7a:28:9c:9d:b2:a0:2d:f2:30:0c:87:65:e0:91:
         7d:68:34:a2:2d:29:29:46:41:ab:be:35:01:e2:4a:37:dd:7c:
         72:4b:fb:66:44:cd:d0:da:97:4b:36:4d:da:df:45:55:39:56:
         ea:cd:a8:0a:02:3e:9b:76:18:50:d5:81:a5:4e:57:de:95:2c:
         d3:87:d7:08:9f:63:80:d2:c3:fa:d7:78:56:84:f4:06:ec:84:
         6c:fe:fa:4b:53:45:f6:d9:6d:ff:5f:c6:57:3b:7c:e9:1f:83:
         11:1b:22:95:43:1a:42:e4:9a:8d:7f:6b:cb:42:9d:24:6b:3f:
         2b:6a:34:ed:3d:9f:d9:0e:66:20:eb:bb:fe:b3:04:6f:a6:e4:
         04:63:49:26:a4:9a:21:42:b1:18:ad:74:31:52:de:31:69:13:
         19:01:19:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 15 04:27:08 2026 by rpki-client