This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3135382e302f32342d3234203d3e20383334.roa
File:                     3134372e3132352e3135382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          zalD+1k4GDvWFc4HRwJsHCKiVWQLUf3wN0BTPXT6hhQ=
Subject key identifier:   BF:90:98:FC:BC:AA:05:BB:78:62:8D:41:8C:41:F7:02:35:D7:48:5C
Certificate issuer:       /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial:       65F9567E939F521E7547EF7B2AA23AACAA2C08C0
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3135382e302f32342d3234203d3e20383334.roa
Signing time:             Sat 07 Feb 2026 02:38:03 +0000
ROA not before:           Sat 07 Feb 2026 02:33:03 +0000
ROA not after:            Sat 06 Feb 2027 02:38:03 +0000
asID:                     834
IP address blocks:        147.125.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Feb 2026 04:56:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:f9:56:7e:93:9f:52:1e:75:47:ef:7b:2a:a2:3a:ac:aa:2c:08:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
        Validity
            Not Before: Feb  7 02:33:03 2026 GMT
            Not After : Feb  6 02:38:03 2027 GMT
        Subject: CN=BF9098FCBCAA05BB78628D418C41F70235D7485C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:2d:b8:0f:b7:7e:24:e8:d8:a3:fc:b8:74:7f:
                    5d:6f:8a:6c:f6:4a:02:69:12:e2:59:72:0b:90:31:
                    26:a8:cf:56:56:4d:3c:8f:cb:7d:64:c4:15:bd:ef:
                    f2:ac:b3:99:16:26:4f:7b:24:62:b0:21:63:b9:c3:
                    07:dd:3c:42:dd:8b:35:33:4d:3e:9e:ad:c4:f9:63:
                    c2:fa:40:d8:bb:4a:fc:24:87:59:39:2c:2c:e2:05:
                    db:af:4e:f6:1e:99:e1:22:e2:90:22:cc:a8:c2:e0:
                    51:2e:c0:46:14:88:5e:3b:f2:f9:7e:b3:d8:cf:8f:
                    72:ad:e2:4e:c7:3e:fa:0a:bf:e9:69:d9:09:54:2a:
                    4b:c6:85:7b:80:46:81:ee:12:94:70:ad:30:bc:29:
                    e3:44:11:88:6e:9b:19:cf:7b:a0:a2:8c:0c:1f:6a:
                    c3:51:d4:79:27:6a:b9:5d:f5:6d:ec:9c:9f:b5:8e:
                    75:70:7b:06:d1:06:df:6d:73:68:2f:7d:16:0c:0f:
                    38:08:9f:1a:14:94:1b:cb:a7:d9:b6:0e:1c:42:42:
                    dd:53:bf:0c:c0:cb:97:43:2a:8b:53:19:50:44:b4:
                    28:18:ab:fa:50:01:6e:94:5a:36:54:44:66:f9:0e:
                    d1:d8:1e:cb:e9:f5:40:35:6b:79:08:b0:0e:a7:81:
                    5c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:90:98:FC:BC:AA:05:BB:78:62:8D:41:8C:41:F7:02:35:D7:48:5C
            X509v3 Authority Key Identifier:
                keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3135382e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.125.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:44:ef:c4:6d:c6:80:79:56:e1:7c:e1:20:92:54:2d:35:1c:
         72:7a:9d:ee:98:17:d4:de:c5:6a:03:4c:c4:6a:d4:39:78:1d:
         d2:7f:56:d7:42:07:61:4a:22:3d:b3:1d:66:64:43:d3:4d:cf:
         fb:2e:0c:f4:a3:d5:4e:ab:25:59:ee:07:8d:1d:4d:ce:da:e4:
         7a:7d:76:72:d1:27:a7:fa:4e:05:9f:a9:d7:78:5a:ae:f0:fa:
         12:ba:5d:db:ad:e9:ce:2c:eb:07:7e:e2:19:7a:9a:3c:7f:71:
         c6:b6:ea:2e:74:0f:c4:cb:fa:49:70:26:f7:60:92:18:8c:7d:
         c5:e0:4d:04:47:61:58:1c:9e:17:da:9c:f4:7e:e0:97:93:ca:
         3b:ed:6c:0e:b7:8a:2d:fa:fa:bc:4a:ee:a8:7b:9d:62:a1:73:
         6f:88:6a:25:7b:52:55:e1:6a:11:d2:c3:42:41:18:d0:b4:35:
         4d:53:06:c1:ba:bb:da:c5:8f:a9:8c:57:22:4d:9f:5b:55:fb:
         52:3c:aa:dc:1b:f9:68:1a:14:0a:a0:45:0f:ba:d6:2a:ee:ce:
         5d:a8:e0:61:53:d3:5e:03:a7:b4:6d:ec:3e:66:fe:29:59:18:
         26:1a:74:c4:56:72:64:f0:7c:28:13:45:db:b1:9e:9c:e6:28:
         2f:12:45:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 14 17:27:14 2026 by rpki-client