This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e9d7e455-0658-4960-bff4-0352219c2b1e/0/34352e3133332e37372e302f32342d3234203d3e203137353631.roa
File:                     34352e3133332e37372e302f32342d3234203d3e203137353631.roa (raw, json)
Hash identifier:          DRqCqjTTmocXEMPhaAW2LfrGPc7Vql9LBY0UQUvukm8=
Subject key identifier:   6F:33:6C:B6:E4:62:E2:2E:13:FE:47:43:8E:B1:7E:01:0F:FC:B1:5B
Certificate issuer:       /CN=c00f1497e83f6ab40a7834fb450bffe527db2bb2
Certificate serial:       5A4DD42A56060AFA09B009DC6E93E99C0EEF647E
Authority key identifier: C0:0F:14:97:E8:3F:6A:B4:0A:78:34:FB:45:0B:FF:E5:27:DB:2B:B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wA8Ul-g_arQKeDT7RQv_5SfbK7I.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/e9d7e455-0658-4960-bff4-0352219c2b1e/0/34352e3133332e37372e302f32342d3234203d3e203137353631.roa
Signing time:             Mon 02 Feb 2026 09:08:54 +0000
ROA not before:           Mon 02 Feb 2026 09:03:54 +0000
ROA not after:            Mon 01 Feb 2027 09:08:54 +0000
asID:                     17561
IP address blocks:        45.133.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/e9d7e455-0658-4960-bff4-0352219c2b1e/0/C00F1497E83F6AB40A7834FB450BFFE527DB2BB2.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/e9d7e455-0658-4960-bff4-0352219c2b1e/0/C00F1497E83F6AB40A7834FB450BFFE527DB2BB2.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wA8Ul-g_arQKeDT7RQv_5SfbK7I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 08:33:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:4d:d4:2a:56:06:0a:fa:09:b0:09:dc:6e:93:e9:9c:0e:ef:64:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c00f1497e83f6ab40a7834fb450bffe527db2bb2
        Validity
            Not Before: Feb  2 09:03:54 2026 GMT
            Not After : Feb  1 09:08:54 2027 GMT
        Subject: CN=6F336CB6E462E22E13FE47438EB17E010FFCB15B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:97:a7:23:d7:9a:e5:16:20:04:1c:3c:9d:ff:
                    c6:f8:bb:c4:a4:44:ed:5d:3f:65:4c:da:ba:4b:82:
                    43:5d:12:01:dd:93:25:b7:1c:21:9a:f4:c9:7e:48:
                    df:e7:22:94:3f:bb:61:99:c9:18:65:26:d9:3f:76:
                    9f:5a:aa:a1:80:89:3c:a7:e0:bb:c3:98:d2:4f:d1:
                    c1:42:20:28:26:03:c7:b7:6f:7e:b8:37:ea:bf:7f:
                    1c:f8:bc:a2:5e:7a:0c:b3:00:c1:b8:1f:58:24:4c:
                    e0:e2:6a:f5:6e:51:12:73:9b:d2:4a:a9:9d:a4:45:
                    15:fc:ca:1f:5c:5b:28:f6:00:62:90:8d:5b:a3:0e:
                    54:dd:27:e9:2e:d6:79:1d:16:97:dc:6e:8b:4b:dd:
                    c8:4e:4f:6c:6f:86:1b:0b:7f:99:e7:af:90:07:07:
                    08:d4:04:fb:9f:91:b1:4d:b7:e1:99:5c:ba:1f:18:
                    f6:4f:84:d1:d4:7a:13:d1:92:c8:cb:11:50:95:2d:
                    eb:e1:f9:6a:7e:3d:0b:c3:89:7a:17:4a:a4:b4:72:
                    26:b1:40:47:c2:8d:04:a6:0d:9c:22:fe:44:b9:52:
                    db:01:30:df:75:95:e2:cb:03:f7:44:f3:a6:5d:79:
                    56:77:e1:be:bb:af:ef:8a:96:bb:25:62:fd:f4:02:
                    ad:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:33:6C:B6:E4:62:E2:2E:13:FE:47:43:8E:B1:7E:01:0F:FC:B1:5B
            X509v3 Authority Key Identifier:
                keyid:C0:0F:14:97:E8:3F:6A:B4:0A:78:34:FB:45:0B:FF:E5:27:DB:2B:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/e9d7e455-0658-4960-bff4-0352219c2b1e/0/C00F1497E83F6AB40A7834FB450BFFE527DB2BB2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wA8Ul-g_arQKeDT7RQv_5SfbK7I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e9d7e455-0658-4960-bff4-0352219c2b1e/0/34352e3133332e37372e302f32342d3234203d3e203137353631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.133.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:93:d2:0b:37:b5:4e:a4:1c:9d:14:c6:e4:d9:0c:ec:21:a0:
         de:28:48:a7:cd:50:e0:97:52:e9:dc:35:b4:cc:32:a5:6d:05:
         e2:54:0e:7a:2f:e8:53:c5:d6:a9:d6:a5:8c:4d:99:be:0b:48:
         2d:4c:1a:bd:35:15:93:42:a6:14:5d:f1:9a:22:37:3c:da:a7:
         f8:2b:65:66:3d:39:28:c6:c0:59:37:16:91:8f:e5:59:f4:3f:
         98:b0:94:00:3d:52:b8:01:5a:23:20:c1:f4:49:b0:f6:6b:51:
         f9:31:55:4e:c1:eb:a3:c1:83:99:40:4e:55:32:3c:ee:3a:6b:
         58:b6:cc:f2:3e:1e:c6:6b:c2:4a:ee:bb:0f:d9:d7:63:ab:c9:
         89:77:bc:7e:52:36:d9:0d:cf:da:1c:b1:35:61:33:a4:47:2d:
         0a:71:15:5c:c1:5f:40:e9:01:8b:22:49:2b:59:ae:b1:b9:38:
         e4:7a:55:85:a2:24:97:ff:57:70:a7:c7:d1:d8:30:e9:d6:87:
         1f:20:02:70:66:4b:a2:b7:69:a9:87:f2:3a:b6:16:96:8a:15:
         fa:25:60:8c:44:d1:63:94:1c:4a:09:02:cb:96:64:7d:cb:e2:
         2d:4f:50:75:4b:48:a5:54:9f:13:80:42:79:c3:54:9f:2f:64:
         12:bf:6d:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:28:00 2026 by rpki-client