This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3136342e302f32322d3234203d3e20383334.roa
File:                     3134372e3132352e3136342e302f32322d3234203d3e20383334.roa (raw, json)
Hash identifier:          /VU51aC7VBjG+0kttVWzV1GD5eb8u2OYsi9ygVJmfvU=
Subject key identifier:   B1:11:DA:C8:92:14:3B:42:46:B7:47:5B:EA:7A:50:9F:F5:B8:24:DF
Certificate issuer:       /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial:       5B5D2C3872084C7D73EBDF6211BEFE664BB2603D
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3136342e302f32322d3234203d3e20383334.roa
Signing time:             Sun 08 Feb 2026 09:12:36 +0000
ROA not before:           Sun 08 Feb 2026 09:07:36 +0000
ROA not after:            Sun 07 Feb 2027 09:12:36 +0000
asID:                     834
IP address blocks:        147.125.164.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Feb 2026 04:56:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:5d:2c:38:72:08:4c:7d:73:eb:df:62:11:be:fe:66:4b:b2:60:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
        Validity
            Not Before: Feb  8 09:07:36 2026 GMT
            Not After : Feb  7 09:12:36 2027 GMT
        Subject: CN=B111DAC892143B4246B7475BEA7A509FF5B824DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:df:82:f6:f4:04:42:95:f7:64:2d:1c:ce:ab:
                    82:20:0f:bc:20:67:2a:12:0b:b5:96:7c:db:aa:91:
                    67:da:15:0f:44:48:7d:df:3d:10:2f:4a:1f:8d:7e:
                    f0:94:83:41:52:9e:ab:57:26:ef:fe:02:6d:f7:91:
                    0e:3d:21:8d:75:e7:10:80:05:89:34:11:7b:fd:b1:
                    b1:fe:b7:54:5d:fc:cf:f8:37:11:9a:6e:1c:b4:30:
                    b9:3b:82:28:67:c9:81:a1:e6:a8:75:66:eb:b7:9d:
                    98:0f:9b:37:ec:eb:12:60:fa:6e:c8:f5:a3:91:e7:
                    99:4e:32:5c:58:b9:7b:a1:4f:c5:47:ca:e1:73:d4:
                    2a:f5:d1:cd:77:eb:4d:e2:d2:ea:50:d9:c9:d2:95:
                    24:71:39:4c:92:0f:bc:ec:ad:80:fb:49:6f:2c:4c:
                    9e:b0:ce:2c:8b:5a:a9:e7:31:a0:a6:64:43:3c:b8:
                    25:f4:96:22:c7:8d:b6:e9:f3:f3:6c:83:33:37:41:
                    fc:d9:10:bf:66:6b:c5:38:4b:cc:34:eb:52:92:ad:
                    38:7c:66:ad:12:4b:f1:bc:08:88:9f:32:44:ee:2f:
                    d3:bc:90:bd:d1:e5:bb:02:af:ab:3c:9f:22:97:a5:
                    63:4a:b4:08:4a:c8:c4:27:68:0b:c3:65:b9:18:e2:
                    28:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:11:DA:C8:92:14:3B:42:46:B7:47:5B:EA:7A:50:9F:F5:B8:24:DF
            X509v3 Authority Key Identifier:
                keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3136342e302f32322d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.125.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:08:89:16:08:c6:b9:03:0d:36:f0:3e:e1:b4:ce:02:db:47:
         a9:da:04:e4:47:47:eb:fd:08:09:0e:d6:4b:3a:f6:57:ca:8e:
         96:e2:70:70:3a:6d:eb:5b:69:f9:a4:28:47:bf:73:80:f9:3e:
         9a:1a:f1:a8:84:ca:ae:1e:a0:05:55:1e:ec:a2:aa:e1:e1:3c:
         36:1e:06:a8:fd:b4:a5:e1:e6:c4:fa:20:a1:90:be:02:40:65:
         95:e0:7d:12:af:97:7b:2c:31:2e:27:58:08:6e:29:00:55:7f:
         d5:7b:82:10:a3:be:46:42:6a:af:54:6a:ce:8b:54:21:74:e7:
         c4:29:4c:75:a8:a1:4c:9f:74:da:4e:6a:9d:2f:0d:a1:4b:77:
         d4:4f:10:0c:09:a2:83:1c:73:10:2b:d7:63:06:c9:e6:6b:19:
         94:56:f8:02:a9:25:ee:7b:cb:95:61:43:1d:8d:3a:5b:9b:6c:
         25:46:d1:56:7a:97:74:d5:cc:fc:ff:f8:60:d6:50:4e:ca:26:
         6d:b3:85:6e:2f:0a:16:d8:43:c4:d2:d3:c5:6b:f5:b0:d5:b3:
         5f:74:38:29:cd:54:23:79:36:53:b3:00:51:3f:0e:9d:15:db:
         8e:0a:d3:b8:b7:24:dc:1c:ec:1a:46:42:1e:67:e8:dc:92:7e:
         53:2a:62:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 14 17:24:33 2026 by rpki-client