This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS56913.roa
File:                     AS56913.roa (raw, json)
Hash identifier:          1f3Zo2eA2WBUJ0mm8+iz69H0egSHH4jwRxaNn3xaPZc=
Subject key identifier:   9A:4F:96:19:3C:A5:0E:E5:AB:BC:EB:2E:97:17:81:E7:D8:54:05:66
Certificate issuer:       /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial:       1C2E417A0ABDFB36D3B1551CCFCB16F4E61F858C
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS56913.roa
Signing time:             Sun 18 Jan 2026 10:55:33 +0000
ROA not before:           Sun 18 Jan 2026 10:50:33 +0000
ROA not after:            Sun 17 Jan 2027 10:55:33 +0000
asID:                     56913
IP address blocks:        95.135.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Feb 2026 08:46:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:2e:41:7a:0a:bd:fb:36:d3:b1:55:1c:cf:cb:16:f4:e6:1f:85:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
        Validity
            Not Before: Jan 18 10:50:33 2026 GMT
            Not After : Jan 17 10:55:33 2027 GMT
        Subject: CN=9A4F96193CA50EE5ABBCEB2E971781E7D8540566
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:64:4a:d3:a8:a9:bd:f9:11:55:a2:78:e5:48:
                    59:ca:8c:d9:c3:fc:e0:21:8b:90:7c:06:65:c6:7b:
                    e8:29:77:f0:f5:cc:81:4d:2f:f4:1e:2e:76:9d:1e:
                    59:4c:fd:71:24:fa:3a:64:7d:32:5a:a8:29:7c:31:
                    1e:74:e4:e0:23:84:8d:82:35:03:30:cc:d5:bc:0c:
                    2b:89:51:2b:25:2e:9e:8c:9c:0a:b4:a0:c8:c2:78:
                    0e:d8:58:0d:04:b0:6c:7a:c3:7f:de:b2:9e:54:51:
                    42:d2:61:2c:8f:c2:87:4e:07:22:0b:7d:30:4d:b8:
                    9c:33:a9:09:48:d3:b6:0f:2f:1d:67:10:3a:85:a4:
                    e6:76:4b:23:18:d7:68:2d:07:1e:e4:7c:2f:03:51:
                    76:f0:5c:de:08:c4:3b:c0:37:5d:1c:a4:c3:0f:54:
                    81:79:aa:03:f9:b9:df:f6:c6:14:6a:f5:67:30:37:
                    0f:8c:cc:6c:4e:8c:cd:a2:9e:4c:1f:7d:85:a0:80:
                    46:03:03:57:4f:2e:2a:bc:43:f1:85:cd:b2:b2:15:
                    ca:c9:4b:b5:45:da:38:ba:74:a7:77:01:a4:b2:34:
                    56:6a:76:1e:a8:17:22:14:7a:0c:72:f7:20:29:a4:
                    6f:f2:9c:24:9c:4b:21:57:d2:48:93:df:80:21:c8:
                    64:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:4F:96:19:3C:A5:0E:E5:AB:BC:EB:2E:97:17:81:E7:D8:54:05:66
            X509v3 Authority Key Identifier:
                keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS56913.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.135.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:d8:b3:a5:bf:ae:dd:d5:80:93:03:5e:e4:21:12:2f:7a:48:
         b9:e8:8d:66:19:4f:00:e1:93:64:1e:57:c2:65:c6:d0:f8:01:
         fe:67:98:6d:16:d7:7a:10:0e:e1:ec:ba:fc:a6:a6:e3:61:56:
         c8:f0:08:c5:02:2a:85:f0:ca:05:41:91:87:0c:1b:48:f3:74:
         2b:69:e8:27:34:e0:ae:53:2e:c0:f0:e4:95:f3:11:6e:4c:58:
         6a:c6:ab:d3:03:91:8b:48:db:bb:0a:14:a8:ff:1e:1a:82:98:
         09:06:f0:56:8d:ad:46:36:9a:bb:58:d9:4a:a3:47:b1:ad:d6:
         22:a8:94:bc:69:63:28:cf:1c:30:94:3f:4d:dd:06:d8:79:18:
         50:f3:eb:3c:4c:5b:00:d2:d0:f7:7f:37:ee:8c:df:ed:d6:b9:
         92:9f:53:84:ee:bc:30:a2:55:63:2b:be:2c:69:00:ab:99:28:
         9d:d2:44:bf:90:8f:8d:27:e1:6b:de:0b:65:8d:8a:58:fc:2b:
         4b:f0:1d:11:c0:80:d9:c0:4e:13:ba:57:ce:5f:62:36:b7:40:
         5c:ba:2e:f4:e3:57:cb:4d:20:d0:58:5c:cc:f4:c8:ca:a1:f4:
         6c:16:2a:0c:55:64:9d:81:49:3b:1c:13:52:3c:4b:c3:6d:7f:
         ee:63:aa:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 10:56:51 2026 by rpki-client