This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS393886.roa
File:                     AS393886.roa (raw, json)
Hash identifier:          vrPkDZqbhFGLE/x850p0OyNm40W+xdjz9zTJz7MOzgU=
Subject key identifier:   9D:50:FB:5C:AC:A4:E6:9C:25:7B:38:BF:8F:E8:7E:ED:E6:DD:CF:ED
Certificate issuer:       /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial:       32EBA6C944676840D0E958DDE3601E0F46E857D0
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS393886.roa
Signing time:             Tue 10 Feb 2026 10:51:47 +0000
ROA not before:           Tue 10 Feb 2026 10:46:47 +0000
ROA not after:            Tue 09 Feb 2027 10:51:47 +0000
asID:                     393886
IP address blocks:        46.202.63.0/24 maxlen: 24
                          46.202.74.0/24 maxlen: 24
                          46.202.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Feb 2026 14:40:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:eb:a6:c9:44:67:68:40:d0:e9:58:dd:e3:60:1e:0f:46:e8:57:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
        Validity
            Not Before: Feb 10 10:46:47 2026 GMT
            Not After : Feb  9 10:51:47 2027 GMT
        Subject: CN=9D50FB5CACA4E69C257B38BF8FE87EEDE6DDCFED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:21:1b:4b:c2:c7:4b:b9:6a:3e:b1:f7:b3:23:
                    20:61:1b:1a:ed:0b:de:f8:cb:ed:29:66:00:e3:8f:
                    43:3f:c9:6a:c0:82:14:02:db:e8:d4:7e:f2:0c:ee:
                    bf:ea:ff:6e:ff:fd:79:e6:a0:aa:6f:b1:2b:2e:fc:
                    60:c9:b6:60:9c:4d:36:45:50:c3:53:08:9a:53:ee:
                    29:84:dd:f5:e6:b2:ed:a8:5b:c3:dc:5c:74:75:34:
                    53:e6:5f:31:1e:ca:4e:51:cc:94:a1:1c:95:0c:a4:
                    36:96:de:cf:47:16:ed:b0:41:35:cb:17:2b:40:e9:
                    1f:82:c1:a7:24:b7:06:96:6d:18:f3:cf:81:25:d3:
                    ad:29:3d:97:66:62:c8:e7:15:9c:43:78:e0:9d:e0:
                    bd:f3:18:3c:10:db:ef:d0:ef:e8:ff:e4:a0:84:14:
                    a4:ea:29:5e:44:49:be:5b:7e:19:cf:aa:42:4f:6b:
                    13:70:73:08:45:44:a1:c9:b9:39:1f:23:46:7a:e8:
                    99:e0:04:ae:e3:f4:41:89:c3:1c:4e:6a:3a:b8:39:
                    0f:2e:f3:23:e6:79:77:54:af:99:15:fa:f3:9b:44:
                    78:28:98:3f:ae:f0:25:51:53:de:ce:fe:b0:35:e9:
                    23:ad:b6:a4:ec:64:e8:bb:8a:62:dd:f8:07:5d:e2:
                    05:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:50:FB:5C:AC:A4:E6:9C:25:7B:38:BF:8F:E8:7E:ED:E6:DD:CF:ED
            X509v3 Authority Key Identifier:
                keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS393886.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.202.63.0/24
                  46.202.74.0/24
                  46.202.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:0a:70:bb:c8:65:e4:5a:33:f8:0f:02:84:96:02:04:c5:a8:
         e1:59:56:79:4a:df:31:7a:9e:0a:1b:86:18:b2:12:9e:21:3d:
         de:31:5e:8a:dd:e1:af:34:2c:3b:78:3a:8b:e1:32:c6:36:5c:
         9c:30:c0:c9:84:aa:18:78:6c:18:6a:75:81:49:b3:89:25:bb:
         ab:a2:31:3d:fc:be:89:3f:3b:a3:93:2e:00:d7:b2:e7:c6:c9:
         e4:3c:82:cc:27:8f:84:3b:97:9a:28:92:81:8b:24:4d:81:32:
         2a:84:fe:49:17:1f:37:d5:4b:ef:e0:41:50:9a:ac:c0:ff:db:
         96:93:5a:56:f4:8b:b1:2c:30:5a:c8:49:3a:97:21:7c:bb:da:
         27:ca:ac:2a:ee:74:9a:7c:05:ec:81:0c:7f:7f:b6:99:38:aa:
         cc:e0:57:3b:97:d6:b2:02:cc:15:20:63:7a:11:ac:74:67:d7:
         ac:70:aa:4c:04:9b:69:0c:6e:e4:4e:71:cd:0f:dd:37:2a:b5:
         76:9a:2f:36:01:5b:9a:f7:f5:1c:8f:87:f6:86:23:2c:03:4d:
         dc:53:32:65:b2:72:b7:b8:96:dd:e8:11:d2:e2:75:1e:f1:ac:
         1a:fd:27:76:68:37:20:a0:de:e7:8a:37:e1:b4:54:8b:84:55:
         c4:f2:a0:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 23:31:20 2026 by rpki-client