This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS27411.roa
File:                     AS27411.roa (raw, json)
Hash identifier:          dK045R4bqtpMnqQ0sAaAUk66H4d7fOzEpeEc1rGNapI=
Subject key identifier:   5F:31:07:11:2A:ED:6B:98:03:77:CE:DF:E4:EF:05:97:75:14:69:DE
Certificate issuer:       /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial:       4090183E325B5685E111AB5ACEF091991EB16541
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS27411.roa
Signing time:             Tue 10 Feb 2026 11:36:58 +0000
ROA not before:           Tue 10 Feb 2026 11:31:58 +0000
ROA not after:            Tue 09 Feb 2027 11:36:58 +0000
asID:                     27411
IP address blocks:        46.202.57.0/24 maxlen: 24
                          46.202.60.0/24 maxlen: 24
                          46.202.64.0/24 maxlen: 24
                          46.202.67.0/24 maxlen: 24
                          46.202.71.0/24 maxlen: 24
                          46.202.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Feb 2026 14:40:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:90:18:3e:32:5b:56:85:e1:11:ab:5a:ce:f0:91:99:1e:b1:65:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
        Validity
            Not Before: Feb 10 11:31:58 2026 GMT
            Not After : Feb  9 11:36:58 2027 GMT
        Subject: CN=5F3107112AED6B980377CEDFE4EF0597751469DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:71:9a:b2:e4:65:c1:84:84:f4:b8:af:e0:4d:
                    55:93:27:ea:dd:7b:03:64:4b:0b:e3:49:c9:8d:a9:
                    be:a8:87:15:dc:53:2e:8a:d7:a1:0f:f1:ef:f4:bb:
                    bd:b8:58:60:00:b8:62:1b:52:54:f3:e0:e0:80:48:
                    6e:c8:57:f2:18:cc:54:bb:52:ba:99:e8:a3:a3:5f:
                    6f:cd:96:2d:5e:d1:59:33:83:07:0c:3b:1a:d3:26:
                    2c:e9:1d:03:00:45:94:cb:90:8b:cc:8f:14:57:03:
                    27:de:a1:5a:53:12:aa:ea:e9:e5:4c:9c:8d:fd:3f:
                    0b:3e:2c:1c:10:92:0d:5b:aa:ae:2e:29:ed:50:a7:
                    2c:1c:30:06:9d:c8:86:e2:ed:5c:df:08:e5:a4:9e:
                    e0:6c:6c:3b:99:6e:e3:bb:d8:a0:be:ab:0a:3c:e0:
                    24:d1:1d:1e:30:96:06:0d:7b:b4:28:fc:6c:a3:63:
                    70:63:5d:ab:5e:c0:1a:93:16:78:3b:ec:f5:39:70:
                    2b:d0:9b:7e:b6:95:b6:ec:9a:4c:a7:97:27:e7:45:
                    83:f1:97:2f:86:fb:84:e2:bd:44:7c:8f:e7:7e:68:
                    83:2a:fa:48:ee:c6:f5:8c:8f:6e:59:0d:1c:07:9b:
                    d3:11:4b:8c:7d:07:5a:b2:0c:34:d5:3a:a8:54:79:
                    79:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:31:07:11:2A:ED:6B:98:03:77:CE:DF:E4:EF:05:97:75:14:69:DE
            X509v3 Authority Key Identifier:
                keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS27411.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.202.57.0/24
                  46.202.60.0/24
                  46.202.64.0/24
                  46.202.67.0/24
                  46.202.71.0/24
                  46.202.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:dd:40:23:69:6b:70:d0:8b:02:c2:82:d0:93:b4:89:32:b7:
         8b:e6:83:04:11:17:3a:b5:e1:4d:05:7b:27:31:7e:e9:fb:55:
         97:a4:92:4d:ed:a6:11:ed:1b:9f:64:6d:83:51:30:a7:4e:74:
         de:0a:77:b9:42:c6:45:62:c1:ce:13:f8:69:a4:ba:34:1f:c3:
         b7:d7:06:a6:3e:f0:09:00:4d:12:07:af:5c:73:46:ca:d5:a2:
         9c:28:29:1e:3a:b7:15:34:e5:db:ee:0f:51:87:33:92:29:03:
         05:a8:1b:4d:78:a6:a9:45:39:25:df:8f:31:5e:35:bf:de:f4:
         43:0a:69:4d:a0:70:5c:79:41:e0:5e:5c:8a:36:54:55:9d:bd:
         55:1e:77:91:81:71:29:f0:6a:75:2e:b2:80:2f:db:de:db:8d:
         ef:a1:03:6d:cb:78:a3:cd:e5:1f:d4:fd:67:9a:86:ad:c6:2f:
         06:7f:7e:9b:62:10:a8:63:ec:cd:a5:a0:3f:30:0c:28:06:7a:
         91:11:d9:de:51:0e:6e:ee:f0:b8:23:82:b5:92:41:13:29:9c:
         ac:27:05:f2:d1:d1:85:12:50:d6:63:9d:f6:c5:44:b4:f0:67:
         15:26:55:10:6e:c7:25:e2:b9:0a:ea:7f:67:b1:f9:87:76:fd:
         f2:09:5c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 23:31:20 2026 by rpki-client