This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3138352e302f32342d3234203d3e20383334.roa
File:                     3134372e3132352e3138352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          P6JbezN276yGpN6sa6eYI71wV9tv1n8BbzAbBLVxa2Y=
Subject key identifier:   42:58:D9:82:03:0E:A6:61:C8:32:C2:BA:C9:84:11:16:A5:C4:6A:F5
Certificate issuer:       /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial:       3045D0A1D94C1FF335132222CFE9F6FBF7A1B4A5
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3138352e302f32342d3234203d3e20383334.roa
Signing time:             Fri 06 Feb 2026 06:31:16 +0000
ROA not before:           Fri 06 Feb 2026 06:26:16 +0000
ROA not after:            Fri 05 Feb 2027 06:31:16 +0000
asID:                     834
IP address blocks:        147.125.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Feb 2026 04:56:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:45:d0:a1:d9:4c:1f:f3:35:13:22:22:cf:e9:f6:fb:f7:a1:b4:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
        Validity
            Not Before: Feb  6 06:26:16 2026 GMT
            Not After : Feb  5 06:31:16 2027 GMT
        Subject: CN=4258D982030EA661C832C2BAC9841116A5C46AF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f8:9c:66:28:fa:bb:f3:39:b3:53:3f:79:24:
                    3b:72:e5:a9:5d:26:bf:b8:57:e9:04:17:bd:4d:4f:
                    1a:f9:b4:01:e3:f2:75:86:78:d2:f8:1e:93:01:a7:
                    0d:2a:b9:64:27:8e:35:fc:ad:df:27:08:58:34:a7:
                    c2:74:ed:55:27:f5:56:67:73:10:01:df:cb:b6:f2:
                    5d:0d:b5:a6:f2:03:30:1a:20:9c:b6:c7:6f:78:60:
                    ca:59:fb:23:39:6d:64:36:a3:36:b7:ae:59:01:89:
                    3c:10:4f:5f:86:2b:01:69:91:40:30:9b:41:85:f7:
                    ff:82:ae:59:a1:97:f7:4e:dd:af:fc:89:b9:57:10:
                    0b:40:a4:2f:db:7a:e7:d5:a3:6d:bd:e4:1d:54:30:
                    3d:b3:eb:d9:07:8a:6f:69:b5:4f:f9:4c:50:c7:23:
                    cb:a9:91:ea:bb:e4:f0:06:99:be:3f:74:3f:3b:50:
                    43:f8:c5:0b:3c:22:9f:07:42:64:02:65:94:dd:34:
                    f5:68:a0:47:bd:b3:ac:60:18:b0:89:f4:68:c8:24:
                    5e:80:45:65:14:85:83:71:24:ac:52:f1:82:65:15:
                    ff:65:5b:ca:66:5a:00:ac:77:0e:36:5f:ef:ac:3d:
                    75:6a:71:31:ba:ef:b5:34:bc:be:46:a1:f2:ac:a3:
                    31:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:58:D9:82:03:0E:A6:61:C8:32:C2:BA:C9:84:11:16:A5:C4:6A:F5
            X509v3 Authority Key Identifier:
                keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3138352e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.125.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:17:6a:2a:56:2f:b2:28:fd:05:80:5e:8b:c5:2e:69:ec:80:
         9c:cf:30:33:da:38:d3:ff:0c:e2:d4:25:3f:af:e6:ba:5e:2f:
         c2:c9:65:a6:3f:a3:72:17:dd:6d:be:84:c4:0f:06:d3:52:d2:
         9e:6c:25:d4:27:ac:2b:d2:e8:59:2d:95:6f:29:71:62:51:bb:
         3e:93:86:22:25:2d:92:77:85:c4:ac:61:61:cc:fb:ed:e3:eb:
         7b:7b:f9:8d:98:12:6f:06:e0:14:ab:5d:90:af:10:bc:6e:b8:
         bf:df:e5:39:31:8d:a4:42:4b:f1:92:d1:8d:aa:c6:42:4a:8f:
         8e:2e:1d:33:04:4f:08:8b:b9:27:b0:ff:a2:1e:0d:0e:41:25:
         e4:8a:d3:98:06:8d:24:11:f9:24:bc:ec:02:d3:b0:0c:c2:7d:
         19:57:50:65:00:aa:c0:f1:11:40:4c:1f:04:9b:f4:90:cb:ce:
         da:6c:9a:37:e1:5e:7e:4e:86:a0:b9:4c:ca:20:58:20:ed:8b:
         d5:86:7c:91:d3:01:25:ab:4b:09:88:66:f0:f4:65:12:ef:62:
         53:4d:9d:fa:31:4d:12:b7:02:04:a8:45:62:ac:f6:3a:27:40:
         10:00:d6:91:a2:62:35:a7:b9:aa:07:e0:f9:9b:2e:1c:45:29:
         a4:a9:52:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 14 17:24:32 2026 by rpki-client