This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3234302e302f32332d3234203d3e20383334.roa
File:                     3134372e3132352e3234302e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier:          dR7eWrB9QttFWJ///ukyY1LRvFxmIzexZM32ZIUZWt4=
Subject key identifier:   11:69:48:4E:BC:CF:AB:57:FC:03:B5:23:4B:CE:F5:C3:D4:D5:E1:60
Certificate issuer:       /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial:       67AD4A87236EEF9B45EAB624A19901789359EFCF
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3234302e302f32332d3234203d3e20383334.roa
Signing time:             Mon 09 Feb 2026 07:53:10 +0000
ROA not before:           Mon 09 Feb 2026 07:48:10 +0000
ROA not after:            Mon 08 Feb 2027 07:53:10 +0000
asID:                     834
IP address blocks:        147.125.240.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Feb 2026 04:56:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:ad:4a:87:23:6e:ef:9b:45:ea:b6:24:a1:99:01:78:93:59:ef:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
        Validity
            Not Before: Feb  9 07:48:10 2026 GMT
            Not After : Feb  8 07:53:10 2027 GMT
        Subject: CN=1169484EBCCFAB57FC03B5234BCEF5C3D4D5E160
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:91:b6:ea:0c:33:5a:ab:70:c9:30:28:e9:51:
                    01:be:91:c8:11:47:b2:77:16:35:34:d8:7f:8b:69:
                    01:fc:1e:25:16:a7:70:94:42:2c:57:2f:fd:ee:56:
                    b7:80:05:a1:e1:6b:5c:b0:aa:ef:db:89:34:76:0e:
                    bf:46:36:7e:89:83:7a:24:15:ee:a5:35:ed:c2:5f:
                    b1:45:97:f1:a3:92:52:ac:e0:29:de:0c:53:44:73:
                    82:af:05:40:ec:5e:e2:63:9b:e5:d6:f7:5f:d5:02:
                    84:d1:5e:ae:fd:81:95:bf:5e:67:97:ad:d3:73:14:
                    54:c5:95:5e:0d:5a:f9:a7:1b:84:5e:8b:6d:13:b7:
                    4c:55:7f:2e:ab:9c:15:54:2f:2f:60:3a:d2:53:95:
                    0c:df:61:b3:ef:09:91:69:46:78:58:63:ff:64:de:
                    48:76:e2:7e:ac:eb:6f:8c:a3:12:e6:d3:f4:d8:b8:
                    22:ae:4a:60:8e:36:43:29:85:8d:c6:15:b7:d7:8c:
                    75:00:2c:95:3b:97:c9:1d:98:b7:43:7a:db:23:fa:
                    5e:35:12:d4:41:f6:6e:12:d4:3a:3e:bb:61:ca:d8:
                    0d:70:09:6a:5d:06:42:05:7d:90:c5:02:4a:a8:f0:
                    33:63:82:9a:00:56:bd:d0:2b:11:26:39:6f:cb:48:
                    85:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:69:48:4E:BC:CF:AB:57:FC:03:B5:23:4B:CE:F5:C3:D4:D5:E1:60
            X509v3 Authority Key Identifier:
                keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3234302e302f32332d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.125.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         74:b9:da:10:7f:75:55:e5:a6:af:2a:50:0a:18:86:93:a7:9b:
         5e:ec:fa:ab:21:bf:14:32:fc:a6:94:90:fa:9d:1f:26:78:2f:
         15:7c:31:ae:78:c9:c6:9f:ff:fc:53:c8:bb:44:76:ad:51:c1:
         81:95:4b:69:30:e1:90:d9:c1:ed:1a:5a:52:cb:d2:74:4e:8e:
         a0:21:78:4e:15:50:87:30:44:9e:74:19:56:9b:cd:cd:ab:a5:
         0f:40:56:f3:64:a9:fa:50:5d:95:ce:1f:61:52:38:1a:67:3a:
         c3:11:34:80:a3:4e:13:19:6a:a4:2d:57:4e:f1:22:ad:28:b7:
         52:09:b4:a9:b0:e9:3c:2b:fa:58:87:20:b5:f7:27:45:93:42:
         22:60:6d:34:ad:40:2b:17:98:ce:79:56:a9:fa:89:d7:6f:59:
         40:91:40:3a:f0:65:5c:a2:c6:81:91:f4:9b:b3:e4:ed:e7:e6:
         72:a4:5b:a9:af:7a:01:44:4c:7f:16:c2:dc:e2:a2:1d:92:89:
         46:a1:eb:e2:fd:c7:e7:8f:7d:60:4c:23:70:f9:f0:1c:37:4f:
         e7:07:b6:58:5a:ec:f1:b7:a9:77:60:c6:f6:9e:0e:a0:97:7b:
         3a:50:f4:c6:46:97:9e:ee:8e:94:a2:92:11:f5:9f:04:c8:ec:
         c3:e2:c7:80
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUZ61KhyNu75tF6rYkoZkBeJNZ788wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl
YjVhNzZlYTAeFw0yNjAyMDkwNzQ4MTBaFw0yNzAyMDgwNzUzMTBaMDMxMTAvBgNV
BAMTKDExNjk0ODRFQkNDRkFCNTdGQzAzQjUyMzRCQ0VGNUMzRDRENUUxNjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnkbbqDDNaq3DJMCjpUQG+kcgR
R7J3FjU02H+LaQH8HiUWp3CUQixXL/3uVreABaHha1ywqu/biTR2Dr9GNn6Jg3ok
Fe6lNe3CX7FFl/GjklKs4CneDFNEc4KvBUDsXuJjm+XW91/VAoTRXq79gZW/XmeX
rdNzFFTFlV4NWvmnG4Rei20Tt0xVfy6rnBVULy9gOtJTlQzfYbPvCZFpRnhYY/9k
3kh24n6s62+MoxLm0/TYuCKuSmCONkMphY3GFbfXjHUALJU7l8kdmLdDetsj+l41
EtRB9m4S1Do+u2HK2A1wCWpdBkIFfZDFAkqo8DNjgpoAVr3QKxEmOW/LSIWRAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUEWlITrzPq1f8A7UjS871w9TV4WAwHwYDVR0j
BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy
NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0
YWR1by5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt
YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMy
MzQzMDJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAZN9
8DANBgkqhkiG9w0BAQsFAAOCAQEAdLnaEH91VeWmrypQChiGk6ebXuz6qyG/FDL8
ppSQ+p0fJngvFXwxrnjJxp///FPIu0R2rVHBgZVLaTDhkNnB7RpaUsvSdE6OoCF4
ThVQhzBEnnQZVpvNzaulD0BW82Sp+lBdlc4fYVI4Gmc6wxE0gKNOExlqpC1XTvEi
rSi3Ugm0qbDpPCv6WIcgtfcnRZNCImBtNK1AKxeYznlWqfqJ129ZQJFAOvBlXKLG
gZH0m7Pk7efmcqRbqa96AURMfxbC3OKiHZKJRqHr4v3H5499YEwjcPnwHDdP5we2
WFrs8bepd2DG9p4OoJd7OlD0xkaXnu6OlKKSEfWfBMjsw+LHgA==
-----END CERTIFICATE-----
Generated at Sat Feb 14 17:27:15 2026 by rpki-client