This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS54252.roa
File:                     AS54252.roa (raw, json)
Hash identifier:          si4Jj3ToD5NeU1RZ16+MGBvsiDSDDaxZB/CUPiXR8II=
Subject key identifier:   4D:CF:62:05:DA:D5:41:AE:73:30:6F:DB:A1:B3:86:6F:BE:29:79:A9
Certificate issuer:       /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial:       79FC8F5DDDF9F9581449AB27B8AF2CFC93E19AC8
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS54252.roa
Signing time:             Thu 15 Jan 2026 00:06:38 +0000
ROA not before:           Thu 15 Jan 2026 00:01:38 +0000
ROA not after:            Thu 14 Jan 2027 00:06:38 +0000
asID:                     54252
IP address blocks:        91.124.36.0/24 maxlen: 24
                          92.112.141.0/24 maxlen: 24
                          95.135.183.0/24 maxlen: 24
                          178.92.246.0/24 maxlen: 24
                          178.93.30.0/24 maxlen: 24
                          178.94.149.0/24 maxlen: 24
                          178.95.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Jan 2026 15:31:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:fc:8f:5d:dd:f9:f9:58:14:49:ab:27:b8:af:2c:fc:93:e1:9a:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
        Validity
            Not Before: Jan 15 00:01:38 2026 GMT
            Not After : Jan 14 00:06:38 2027 GMT
        Subject: CN=4DCF6205DAD541AE73306FDBA1B3866FBE2979A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:84:18:62:d3:ff:2e:91:15:3b:b0:5e:06:26:
                    fa:73:6c:66:1c:96:30:b0:ba:1b:55:3f:c2:8c:c4:
                    20:60:f9:8f:07:ba:18:77:33:ec:d0:9c:02:9f:5a:
                    26:cc:ff:cc:c2:46:05:14:e4:5c:45:7d:99:ed:12:
                    9f:d1:45:d9:5c:37:ba:de:56:3d:b6:19:50:04:99:
                    01:42:42:7c:88:c9:4c:f3:37:6c:ae:ef:37:4a:47:
                    6b:05:70:0a:10:fc:8b:c5:fe:7f:42:b2:26:cd:ad:
                    65:3b:50:c2:72:3d:e8:50:6f:c4:68:f6:eb:ec:10:
                    de:8c:15:c2:40:13:e9:4a:3a:50:63:51:18:e0:03:
                    df:03:7e:d8:f7:25:5b:b2:5b:5d:a9:7d:df:21:06:
                    c3:e7:5b:ee:0d:35:69:28:a1:74:a5:8a:d6:03:15:
                    d4:a3:40:df:f7:fb:00:65:e2:08:f0:00:2e:c1:84:
                    0b:77:70:f3:0a:fe:ba:5a:14:b8:c7:ec:ad:3c:88:
                    6c:e9:f4:cd:65:81:d7:e3:a5:64:26:f1:e5:16:8a:
                    16:ed:c0:ba:f3:32:be:22:42:82:77:f9:46:c7:5c:
                    3d:bb:c1:02:36:22:85:80:bf:cb:b7:b2:68:6f:75:
                    aa:e5:8c:46:30:e4:f8:ea:1e:99:5f:68:2f:e9:44:
                    0c:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:CF:62:05:DA:D5:41:AE:73:30:6F:DB:A1:B3:86:6F:BE:29:79:A9
            X509v3 Authority Key Identifier:
                keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS54252.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.124.36.0/24
                  92.112.141.0/24
                  95.135.183.0/24
                  178.92.246.0/24
                  178.93.30.0/24
                  178.94.149.0/24
                  178.95.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:9c:a2:e4:1f:02:e8:0f:f8:da:d5:67:21:bc:18:50:3f:b4:
         e6:e2:e3:67:b7:e3:f8:de:03:9d:91:fc:60:81:34:79:56:4d:
         01:e9:a5:80:e5:56:9c:b0:d3:8e:da:b7:53:23:9a:64:62:8d:
         13:ca:6f:2d:14:85:51:d7:fc:cc:25:0a:0b:07:e2:72:b8:7d:
         87:67:a9:69:c8:d8:f6:c1:f5:65:21:a1:e1:ea:4f:19:b1:c5:
         2a:86:23:45:a6:36:fc:6d:13:98:92:38:9c:ff:11:24:17:48:
         89:df:b4:f0:92:38:89:b6:36:04:ee:a8:b1:65:db:05:7e:d7:
         f4:a7:9b:ad:a8:55:d8:7e:d6:a1:cb:35:0f:a2:3d:50:86:a9:
         5d:84:9a:6a:e4:e6:fb:71:93:12:a6:5c:a7:59:da:eb:bf:9e:
         4e:8c:eb:83:82:73:49:99:52:e8:66:0f:b3:fc:1b:e2:f7:9e:
         a4:7a:26:ed:14:e6:1c:e0:04:10:3c:25:ca:83:6e:08:e9:1a:
         9f:e5:69:65:56:34:70:f2:62:c0:3c:58:5a:e5:59:5f:f0:04:
         c2:93:3e:bc:8f:d1:b4:80:f2:51:11:b4:42:2f:10:cb:41:c3:
         8a:93:3b:6f:c9:a8:f2:a4:a6:3b:d9:4e:58:ac:ba:dd:38:12:
         21:e6:25:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 15 23:24:36 2026 by rpki-client