This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS9457.roa
File:                     AS9457.roa (raw, json)
Hash identifier:          a4cpcElo9/6WJs8R40hJ75VBgNdp9a8spy/w2Y92z1E=
Subject key identifier:   73:32:2B:D7:E7:A7:BB:C7:81:62:9E:1E:2C:3F:94:C6:4C:32:7F:77
Certificate issuer:       /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial:       6BFCC7B00ACD8B2AD82CAFFED9D1A9189F8E38B4
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS9457.roa
Signing time:             Wed 24 Dec 2025 08:25:18 +0000
ROA not before:           Wed 24 Dec 2025 08:20:18 +0000
ROA not after:            Wed 23 Dec 2026 08:25:18 +0000
asID:                     9457
IP address blocks:        178.95.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 27 Dec 2025 15:58:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:fc:c7:b0:0a:cd:8b:2a:d8:2c:af:fe:d9:d1:a9:18:9f:8e:38:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
        Validity
            Not Before: Dec 24 08:20:18 2025 GMT
            Not After : Dec 23 08:25:18 2026 GMT
        Subject: CN=73322BD7E7A7BBC781629E1E2C3F94C64C327F77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:21:32:18:14:8d:20:9c:15:ba:cd:3b:8e:14:
                    d0:52:13:85:a6:3c:35:b0:b0:57:ca:4c:c6:0d:d0:
                    24:d1:a3:d6:d9:69:6f:4d:db:36:8c:69:c5:3d:8f:
                    b7:54:75:d6:7d:a5:18:42:c0:01:77:94:62:7c:58:
                    6c:8f:3f:76:f5:00:b5:4b:74:7e:93:8e:08:d4:0a:
                    a0:75:89:75:7a:99:03:b2:79:ab:e7:d3:cf:55:9c:
                    31:84:6e:7c:2b:36:e0:51:8a:c7:39:0b:96:55:fc:
                    da:7b:58:96:52:39:ca:ec:50:89:59:82:01:aa:21:
                    d3:70:c9:43:f4:0a:10:b1:97:b2:f8:57:1c:52:e9:
                    31:fe:57:61:9b:58:0a:75:9c:24:25:9f:69:f2:c2:
                    0e:93:86:03:ac:99:fd:29:b3:85:6e:78:7a:7a:d9:
                    94:b9:d2:a2:af:9b:1b:79:ed:3e:db:19:b3:41:ae:
                    87:71:04:d4:23:26:73:96:0e:72:23:1b:68:95:5c:
                    be:7e:98:79:ef:84:ab:26:0e:7b:81:c9:c8:65:8e:
                    29:16:8d:ac:9f:1a:25:21:e3:ee:6c:bb:fa:e7:f6:
                    15:17:1a:3e:bb:d1:17:7f:d7:af:a7:15:5b:ae:26:
                    a2:38:5f:cd:85:97:d3:13:bb:d9:f3:ad:f2:d6:53:
                    37:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:32:2B:D7:E7:A7:BB:C7:81:62:9E:1E:2C:3F:94:C6:4C:32:7F:77
            X509v3 Authority Key Identifier:
                keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS9457.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.95.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:a5:c5:c4:ed:d0:f2:52:40:54:20:58:81:7e:9b:6b:53:f9:
         75:3d:f8:b2:83:db:c6:d0:6f:96:0d:4e:7e:dc:ed:64:a7:60:
         e0:a1:48:5f:8f:73:a4:ef:82:9a:df:34:3b:08:ae:b1:f0:1c:
         41:5e:40:f5:4c:9d:33:df:a7:42:f9:30:4d:f6:0d:f9:a8:30:
         8a:53:75:48:fa:19:55:a0:f2:c8:9c:0b:f5:e6:12:a0:f5:d8:
         54:06:49:43:c1:87:99:e7:3c:2e:ce:e6:57:da:b2:b7:a2:37:
         60:f2:45:34:3f:91:52:d9:ab:fc:d4:cc:f0:a4:6b:cd:93:55:
         a5:7e:de:5d:0e:4d:4b:36:41:43:3b:70:91:23:70:05:f0:87:
         a8:ae:76:af:06:3f:5f:89:27:02:9d:08:ea:0f:52:f4:c2:49:
         b8:82:21:60:9a:fb:11:55:b4:df:b4:ea:c1:fc:0f:2a:d8:36:
         c2:8b:17:de:36:85:45:02:4e:f6:7d:ac:da:e2:a9:e0:6a:60:
         2a:c7:c6:8b:4c:1b:0c:c1:32:d1:21:73:2a:2e:54:41:00:ce:
         65:00:70:d3:b1:3c:43:ce:26:80:a6:5a:b5:b1:9d:5d:f1:a7:
         a3:0b:17:c5:03:39:20:b7:50:70:97:64:ae:4b:da:ba:eb:a9:
         54:34:6a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 01:36:26 2025 by rpki-client