This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/34332e3233302e38342e302f32342d3234203d3e20383334.roa
File:                     34332e3233302e38342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          N+DNH3cZSUB3/2IAiDvrSRIBUTXQrXsxpW7BekUy55w=
Subject key identifier:   55:65:C8:E4:DF:71:76:C1:8F:73:B1:69:27:97:5B:F0:DA:3B:E4:BB
Certificate issuer:       /CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Certificate serial:       075D8891B387D9D32B3B71A74B381484F93B11ED
Authority key identifier: C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/34332e3233302e38342e302f32342d3234203d3e20383334.roa
Signing time:             Fri 06 Feb 2026 10:40:46 +0000
ROA not before:           Fri 06 Feb 2026 10:35:46 +0000
ROA not after:            Fri 05 Feb 2027 10:40:46 +0000
asID:                     834
IP address blocks:        43.230.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Feb 2026 10:48:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:5d:88:91:b3:87:d9:d3:2b:3b:71:a7:4b:38:14:84:f9:3b:11:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
        Validity
            Not Before: Feb  6 10:35:46 2026 GMT
            Not After : Feb  5 10:40:46 2027 GMT
        Subject: CN=5565C8E4DF7176C18F73B16927975BF0DA3BE4BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:18:3c:cd:2b:f7:ab:5d:a6:96:a5:88:79:10:
                    34:9b:31:3d:07:c5:a8:d4:4d:7b:83:c8:d4:22:e9:
                    ce:28:40:c8:a7:5d:91:9d:d9:26:8d:33:50:b9:44:
                    b3:b3:44:41:97:98:cd:09:2f:a9:65:43:c8:ec:d3:
                    ce:90:7f:53:68:43:62:9c:4b:59:cf:da:3e:9d:72:
                    c4:c0:1a:eb:5d:83:5d:fe:d9:d1:04:17:8a:43:80:
                    e6:76:07:f7:1d:81:ca:d6:e7:8c:47:73:9e:80:f8:
                    57:a2:84:d0:db:15:e3:ca:40:d7:9e:d3:f6:80:5f:
                    c2:a5:fe:34:08:ee:da:9b:2f:e8:81:a6:67:d3:5c:
                    65:ec:73:26:25:36:8c:1b:bb:39:63:43:57:1b:3e:
                    31:b2:4d:bc:c2:75:5a:a2:c5:7c:db:3d:14:25:cf:
                    2d:1a:d0:2f:2d:d7:4c:92:ba:69:1d:36:4c:4a:9e:
                    c6:cb:dd:13:bf:1c:c4:90:87:98:81:ea:a1:a3:50:
                    89:66:5e:9e:92:0d:4e:c1:06:1c:03:c4:e2:3a:2b:
                    83:cd:87:85:cc:10:d9:d8:f1:ca:e8:34:8d:da:9e:
                    30:81:52:bd:d2:d2:58:27:9d:0f:b2:6c:a6:19:44:
                    6b:c9:f8:1d:38:6b:6b:71:7d:14:ee:b9:8e:2c:5d:
                    30:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:65:C8:E4:DF:71:76:C1:8F:73:B1:69:27:97:5B:F0:DA:3B:E4:BB
            X509v3 Authority Key Identifier:
                keyid:C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/34332e3233302e38342e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.230.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:9b:59:61:2d:57:cd:ed:09:8c:40:a0:98:d6:17:d3:ad:bc:
         7d:82:ce:15:73:9d:0a:9d:66:5b:4d:ac:69:34:5b:23:3b:8b:
         2d:1c:bb:5b:06:35:45:e5:8b:b5:ba:ed:a4:16:54:a4:92:6c:
         56:7e:0d:bd:d7:6a:c6:0c:2f:c1:96:6b:f3:28:dd:ee:b7:0b:
         31:41:6b:09:84:8f:14:b9:d2:83:a0:0d:5d:82:bc:1e:ee:76:
         10:f2:2d:37:33:9d:01:7c:94:a1:9c:92:bc:70:f5:9e:27:38:
         bb:7e:66:b3:33:6b:13:b6:07:72:74:bf:17:8b:92:1f:26:76:
         52:34:5f:8f:ed:d6:40:bd:27:8c:9b:f6:3c:32:74:ed:97:20:
         f1:96:e2:b8:4d:5c:88:53:e7:b0:cb:f5:1a:08:d8:fb:ce:68:
         60:f0:2d:bf:e7:28:0c:a0:8f:52:c2:c1:2b:37:fe:f9:5f:ad:
         73:a3:3c:ee:c1:16:19:33:29:fa:34:3c:55:0d:85:59:da:3e:
         d5:85:60:9f:13:82:8f:6f:13:09:fc:50:57:f6:12:ec:19:bb:
         77:b7:b4:db:14:78:6c:71:7e:5a:90:76:af:e4:15:64:cc:19:
         11:f6:67:ad:14:08:68:69:c3:8b:eb:6b:eb:26:82:76:da:36:
         dd:cf:b6:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 14 17:26:38 2026 by rpki-client