This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3138352e3231322e3131332e302f32342d3234203d3e203633313939.roa
File:                     3138352e3231322e3131332e302f32342d3234203d3e203633313939.roa (raw, json)
Hash identifier:          eynE4L1wg0TI2w/2R34A3jnbD62PHHb0IzqFm36KQUY=
Subject key identifier:   DB:20:20:D9:75:F0:56:77:C2:1B:C7:1F:B2:C1:E2:D7:2B:2A:12:A6
Certificate issuer:       /CN=cefce449bea8deaedb1804dba25c584df5873dc4
Certificate serial:       1B6A51B6CA5C923B78C89D23940F63CDE2774E43
Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3138352e3231322e3131332e302f32342d3234203d3e203633313939.roa
Signing time:             Mon 09 Feb 2026 03:50:42 +0000
ROA not before:           Mon 09 Feb 2026 03:45:42 +0000
ROA not after:            Mon 08 Feb 2027 03:50:42 +0000
asID:                     63199
IP address blocks:        185.212.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Feb 2026 09:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:6a:51:b6:ca:5c:92:3b:78:c8:9d:23:94:0f:63:cd:e2:77:4e:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4
        Validity
            Not Before: Feb  9 03:45:42 2026 GMT
            Not After : Feb  8 03:50:42 2027 GMT
        Subject: CN=DB2020D975F05677C21BC71FB2C1E2D72B2A12A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:32:c2:fe:93:10:98:32:20:03:09:2f:5d:29:
                    9a:a0:23:76:c7:78:6a:76:90:fe:62:17:21:51:db:
                    75:65:fc:c6:01:81:51:ed:0e:c4:c5:79:89:95:b9:
                    0b:8e:f8:4e:ef:97:b8:84:2a:51:3d:ec:53:70:0b:
                    f8:bb:f4:e3:69:23:5f:7e:c2:b0:4e:4f:96:55:03:
                    8c:4d:4f:dd:2b:36:06:a3:cc:83:63:17:20:89:9e:
                    2a:b8:2b:6d:01:cc:b7:8f:ff:11:47:4f:92:73:d1:
                    80:27:23:4b:c0:d4:1d:e7:49:02:00:8e:6c:06:22:
                    aa:96:08:7d:5d:c6:67:79:63:78:60:0b:76:a6:e4:
                    fb:bc:84:12:1f:54:6c:04:c0:67:b2:b5:3c:69:da:
                    db:f4:83:2d:53:aa:0d:b8:41:a6:dd:ce:c4:c5:da:
                    be:19:2f:9b:0a:2b:87:24:c4:61:be:1c:5d:c6:bb:
                    c0:48:81:01:aa:04:d0:7b:5d:57:09:76:95:8e:72:
                    6b:df:14:cb:ce:5f:90:43:0c:4d:d7:21:96:59:04:
                    8c:d7:e3:63:97:ab:10:a4:f8:34:4b:2d:86:10:ad:
                    87:a8:e3:79:50:49:d8:23:54:17:3b:11:14:c9:56:
                    31:f5:73:21:b4:e2:d7:c0:11:80:5b:97:92:62:a4:
                    d0:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:20:20:D9:75:F0:56:77:C2:1B:C7:1F:B2:C1:E2:D7:2B:2A:12:A6
            X509v3 Authority Key Identifier:
                keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3138352e3231322e3131332e302f32342d3234203d3e203633313939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.212.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:59:e9:8c:f7:06:59:bb:22:dc:0c:5a:24:d9:c7:e3:45:1a:
         e8:ad:e3:02:6f:81:59:35:2a:35:a5:9a:e6:20:1e:99:d0:33:
         32:e4:22:3f:c9:9b:1d:12:67:1a:0b:f8:2e:19:a1:a9:f8:d0:
         c1:52:e4:a2:59:8d:72:f0:4a:69:67:a7:8d:51:50:a8:11:37:
         a8:3c:96:c8:e3:5e:09:43:76:c0:c5:0b:48:f4:88:dd:79:6f:
         21:a7:6c:2c:b5:17:d6:01:6d:6e:ec:1f:ea:0d:44:fb:07:d0:
         64:75:65:55:0a:7c:1e:3f:bd:7f:79:7d:93:f0:09:dc:5e:5b:
         e2:05:13:25:49:7b:75:89:fd:c2:4a:53:af:db:76:1f:6a:f0:
         40:55:95:e9:2e:5f:75:3c:82:dc:23:e9:a9:6b:7e:37:a0:6f:
         5e:e3:5c:5f:db:5f:99:ac:9e:bf:81:81:8a:df:44:87:f7:7b:
         17:78:31:d2:c1:b1:f1:0b:c5:29:82:be:bc:bd:74:29:28:11:
         ef:89:f5:e7:88:b8:05:1a:7d:d8:62:e6:11:b8:92:36:67:d9:
         3e:0e:a7:02:9e:5d:38:08:ba:ef:87:3f:48:02:52:8a:32:b3:
         16:f7:52:c6:84:e3:c1:dc:2f:c4:9d:2f:3b:74:28:8f:67:35:
         d1:04:64:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 11 16:25:34 2026 by rpki-client