This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/39332e3131332e3231322e302f32342d3234203d3e203239383032.roa
File:                     39332e3131332e3231322e302f32342d3234203d3e203239383032.roa (raw, json)
Hash identifier:          KOkJXzM4wXOGsvFs/zh/ieHh7T/PcK/t6m2YsCzBo+I=
Subject key identifier:   FD:0B:D6:D9:E7:0D:02:96:10:C0:FA:2C:87:13:1E:DE:1E:92:6F:06
Certificate issuer:       /CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4
Certificate serial:       03726878614E07792EE41825B8F6AA1D0010EF2B
Authority key identifier: ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/39332e3131332e3231322e302f32342d3234203d3e203239383032.roa
Signing time:             Thu 29 Jan 2026 10:57:34 +0000
ROA not before:           Thu 29 Jan 2026 10:52:34 +0000
ROA not after:            Thu 28 Jan 2027 10:57:34 +0000
asID:                     29802
IP address blocks:        93.113.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 30 Jan 2026 12:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:72:68:78:61:4e:07:79:2e:e4:18:25:b8:f6:aa:1d:00:10:ef:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4
        Validity
            Not Before: Jan 29 10:52:34 2026 GMT
            Not After : Jan 28 10:57:34 2027 GMT
        Subject: CN=FD0BD6D9E70D029610C0FA2C87131EDE1E926F06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:17:eb:21:f7:8e:b9:da:a5:83:22:d2:8c:d1:
                    c5:ae:53:5e:ab:e3:a5:b8:62:f4:ac:ab:e9:08:06:
                    9a:e5:11:e5:12:e0:a4:e7:ca:ae:4f:f1:b9:8b:08:
                    95:4f:df:bc:3b:76:97:f6:aa:91:ea:b6:52:90:54:
                    d6:4d:a4:44:c9:2f:f7:e3:e7:69:bc:bb:f0:77:38:
                    ca:10:6f:96:0f:ba:49:b9:b8:47:3e:52:ed:49:7f:
                    01:cb:a4:82:7d:50:6b:15:98:73:9c:b1:40:d8:70:
                    7b:a2:4a:3e:95:49:dd:43:0e:59:08:94:98:64:dc:
                    aa:5c:b0:d9:8c:c1:7b:7e:91:07:1b:f2:46:2b:b3:
                    35:5f:cb:09:36:12:c2:05:05:49:f4:49:97:6b:aa:
                    cd:ec:3d:70:e1:2d:95:a7:09:67:2c:ac:ba:c4:a7:
                    49:0e:91:f7:10:78:61:e9:a6:7c:da:83:d8:6d:6f:
                    45:4d:78:a8:c7:b1:95:91:e0:76:ef:72:eb:d6:16:
                    28:cf:2f:f8:c9:56:9f:b0:a0:ec:8e:1d:3c:2d:a0:
                    7a:e4:83:90:24:5e:20:ca:fd:f8:8c:02:20:e6:92:
                    c7:e9:b5:0f:e3:6b:0e:c3:5e:a9:50:14:50:d6:f1:
                    25:26:ab:23:bf:c6:9c:8a:3e:04:92:1a:e7:1e:51:
                    e1:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:0B:D6:D9:E7:0D:02:96:10:C0:FA:2C:87:13:1E:DE:1E:92:6F:06
            X509v3 Authority Key Identifier:
                keyid:ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/39332e3131332e3231322e302f32342d3234203d3e203239383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.113.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:b0:a3:d2:33:42:23:42:37:c9:10:d7:38:73:ed:4c:d7:6d:
         fc:5f:6f:27:fd:c0:55:4b:a8:ae:20:78:23:2e:26:09:63:17:
         15:41:2d:10:bb:43:af:30:25:8c:00:84:9e:0e:b3:75:3e:2b:
         19:47:a4:5c:8e:c8:ef:a8:c3:2e:87:c2:5d:7c:06:54:a8:ef:
         49:16:4f:32:58:7e:10:53:9b:f2:9c:ac:9d:26:5e:da:c9:4c:
         7a:df:6d:cc:f4:1b:68:12:68:8f:2c:81:f4:64:6e:ec:d8:e6:
         8a:0c:22:2b:63:2d:17:a9:3c:f6:ff:a6:06:cf:35:28:de:3a:
         fe:6b:85:ef:0a:4e:03:c9:40:a0:19:92:0e:f6:3e:65:33:cf:
         9d:4d:ea:48:f3:d7:09:2b:f2:b8:93:b6:3d:ac:08:f2:eb:2c:
         da:83:e1:49:68:09:46:f3:8d:74:b3:fd:ca:a3:b0:11:f9:8c:
         b3:f9:93:a7:c5:2b:91:b5:0d:d6:b5:d6:7d:b2:e1:a9:55:2e:
         3d:21:e4:76:02:b3:f2:92:f6:1c:6c:1d:56:e0:f4:86:02:8a:
         67:fb:91:f7:24:6c:10:b5:71:c9:61:06:38:da:90:74:09:cd:
         df:0a:94:66:17:be:8c:11:66:13:74:67:2c:66:43:6c:37:0d:
         e5:a3:95:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 17:48:20 2026 by rpki-client