This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS61297.roa
File:                     AS61297.roa (raw, json)
Hash identifier:          Q139TWtGd2oWX1MZGIhyTcIGWNQLSC2YyfZ2WddqLAs=
Subject key identifier:   70:5E:E5:9A:30:95:4E:D2:10:E7:64:85:34:C6:4E:EF:23:24:59:06
Certificate issuer:       /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial:       3CDE28FF4F0A1A1E05E466B9596E4A98CBD229EF
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS61297.roa
Signing time:             Wed 04 Feb 2026 11:08:39 +0000
ROA not before:           Wed 04 Feb 2026 11:03:39 +0000
ROA not after:            Wed 03 Feb 2027 11:08:39 +0000
asID:                     61297
IP address blocks:        178.95.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Feb 2026 09:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:de:28:ff:4f:0a:1a:1e:05:e4:66:b9:59:6e:4a:98:cb:d2:29:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
        Validity
            Not Before: Feb  4 11:03:39 2026 GMT
            Not After : Feb  3 11:08:39 2027 GMT
        Subject: CN=705EE59A30954ED210E7648534C64EEF23245906
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ed:c8:eb:14:01:78:ce:26:c1:ab:51:01:af:
                    5e:c2:4c:2c:ba:6f:b3:d5:cd:02:79:58:42:86:1e:
                    43:78:95:3e:ce:15:7b:63:c9:8c:0a:95:46:18:a5:
                    ba:0c:69:0a:6c:a3:19:a0:7e:13:ec:e5:d2:40:21:
                    25:8d:2a:9c:10:bb:33:11:2f:97:8d:76:99:cc:a7:
                    73:a0:d0:48:05:67:d5:0e:fc:b5:6a:aa:de:50:c9:
                    cc:b5:d5:37:f8:9a:2d:0f:c6:3d:86:59:4c:06:ea:
                    bb:4c:b1:da:d4:e6:6a:39:0e:70:d8:78:d0:fa:23:
                    57:77:d4:97:98:a9:c1:e0:54:eb:7c:8e:31:57:30:
                    f6:00:23:55:d4:f5:f0:90:6e:29:a5:2a:a4:e6:4e:
                    de:18:6c:7f:55:e3:9a:d9:46:0b:e6:72:46:24:e0:
                    85:3e:09:54:81:ee:06:e6:89:3c:99:93:0a:c6:ed:
                    3b:fe:24:8c:ba:ca:61:7e:30:fb:0b:36:28:d8:87:
                    2c:f1:d5:df:c8:88:3b:aa:66:96:90:95:9a:c5:ec:
                    70:a5:3b:bf:b8:33:43:9d:d1:f2:9f:d2:88:10:b0:
                    4b:24:fd:c5:a5:7d:41:02:b8:d7:84:35:54:e4:89:
                    57:48:ba:35:b6:92:d0:6a:7d:7a:a5:8c:65:f9:a7:
                    2c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:5E:E5:9A:30:95:4E:D2:10:E7:64:85:34:C6:4E:EF:23:24:59:06
            X509v3 Authority Key Identifier:
                keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS61297.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.95.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:fb:63:4d:46:c7:91:d4:72:eb:86:62:4f:ae:7d:6b:13:77:
         ef:8f:f8:7e:39:51:93:f9:31:43:69:f0:fa:70:3b:ba:16:b6:
         31:6d:3c:96:d2:ac:d1:e6:56:93:dc:0a:8b:8e:84:dd:b8:49:
         41:35:26:fc:99:56:f2:b0:bf:e8:69:05:a5:9a:3c:64:b1:d5:
         07:df:57:8d:41:2a:8f:86:fa:08:7b:d6:d1:83:67:7c:a4:3b:
         86:40:73:65:d1:ee:0d:4b:14:14:85:d4:11:ce:7e:22:99:f3:
         d2:bc:93:96:64:a2:0c:6a:da:8e:26:a0:cd:32:a2:3b:d3:23:
         59:b0:8d:f1:87:d5:31:c2:a4:6f:4c:ee:60:61:0d:27:10:7d:
         ae:0b:98:fb:ce:cd:50:38:2d:3d:36:10:96:39:6e:cb:fc:72:
         82:1c:f3:53:1e:85:07:4a:fd:f8:fb:c8:92:73:ed:98:ba:db:
         5d:75:79:9d:2b:3d:45:bc:ff:fa:64:78:50:8f:e4:29:67:61:
         26:78:c5:33:72:18:c5:ee:1d:9d:31:40:d1:8b:49:3a:49:ec:
         f2:66:8c:6f:5e:dd:1e:70:aa:83:3c:74:74:7b:7d:51:6b:87:
         a2:1c:d1:69:0b:33:59:fe:ae:f8:1b:72:39:2d:3a:fa:6c:ff:
         83:c6:80:37
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUPN4o/08KGh4F5Ga5WW5KmMvSKe8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNjAyMDQxMTAzMzlaFw0yNzAyMDMxMTA4MzlaMDMxMTAvBgNV
BAMTKDcwNUVFNTlBMzA5NTRFRDIxMEU3NjQ4NTM0QzY0RUVGMjMyNDU5MDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc7cjrFAF4zibBq1EBr17CTCy6
b7PVzQJ5WEKGHkN4lT7OFXtjyYwKlUYYpboMaQpsoxmgfhPs5dJAISWNKpwQuzMR
L5eNdpnMp3Og0EgFZ9UO/LVqqt5Qycy11Tf4mi0Pxj2GWUwG6rtMsdrU5mo5DnDY
eND6I1d31JeYqcHgVOt8jjFXMPYAI1XU9fCQbimlKqTmTt4YbH9V45rZRgvmckYk
4IU+CVSB7gbmiTyZkwrG7Tv+JIy6ymF+MPsLNijYhyzx1d/IiDuqZpaQlZrF7HCl
O7+4M0Od0fKf0ogQsEsk/cWlfUECuNeENVTkiVdIujW2ktBqfXqljGX5pyzNAgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQUcF7lmjCVTtIQ52SFNMZO7yMkWQYwHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTNjEyOTcucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACyX1Aw
DQYJKoZIhvcNAQELBQADggEBABz7Y01Gx5HUcuuGYk+ufWsTd++P+H45UZP5MUNp
8PpwO7oWtjFtPJbSrNHmVpPcCouOhN24SUE1JvyZVvKwv+hpBaWaPGSx1QffV41B
Ko+G+gh71tGDZ3ykO4ZAc2XR7g1LFBSF1BHOfiKZ89K8k5Zkogxq2o4moM0yojvT
I1mwjfGH1THCpG9M7mBhDScQfa4LmPvOzVA4LT02EJY5bsv8coIc81MehQdK/fj7
yJJz7Zi62111eZ0rPUW8//pkeFCP5ClnYSZ4xTNyGMXuHZ0xQNGLSTpJ7PJmjG9e
3R5wqoM8dHR7fVFrh6Ic0WkLM1n+rvgbcjktOvps/4PGgDc=
-----END CERTIFICATE-----
Generated at Wed Feb 4 19:12:47 2026 by rpki-client