This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/3138352e33382e32352e302f32342d3234203d3e203133333335.roa
File:                     3138352e33382e32352e302f32342d3234203d3e203133333335.roa (raw, json)
Hash identifier:          8Dov3dsVRdYA9hssq4paEGEc00JaP1eCascbI1uHeu4=
Subject key identifier:   E8:E7:21:EC:4A:E0:73:A6:8D:D5:31:6B:9C:3A:41:5E:51:07:71:00
Certificate issuer:       /CN=AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96
Certificate serial:       19E10AB51C48A15D9F270EEC96E2D7EB8A904C48
Authority key identifier: AE:2E:1D:EF:AD:81:FF:39:E0:28:3E:D6:1B:C9:F9:DC:6D:A9:BE:96
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/3138352e33382e32352e302f32342d3234203d3e203133333335.roa
Signing time:             Wed 04 Feb 2026 13:43:40 +0000
ROA not before:           Wed 04 Feb 2026 13:38:40 +0000
ROA not after:            Wed 03 Feb 2027 13:43:40 +0000
asID:                     13335
IP address blocks:        185.38.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jMMA-vL21JGGqLYuCPGQEHdDlz0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:e1:0a:b5:1c:48:a1:5d:9f:27:0e:ec:96:e2:d7:eb:8a:90:4c:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96
        Validity
            Not Before: Feb  4 13:38:40 2026 GMT
            Not After : Feb  3 13:43:40 2027 GMT
        Subject: CN=E8E721EC4AE073A68DD5316B9C3A415E51077100
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:42:45:4e:a6:a1:5b:58:8f:8b:fb:59:ad:a3:
                    ce:d3:a6:83:a6:67:8f:40:f5:30:df:87:26:8d:e4:
                    96:a7:36:59:4f:c4:ac:91:e8:0c:13:7e:5a:b2:22:
                    28:c5:3a:26:71:62:7a:aa:da:0e:ef:64:14:eb:5e:
                    4d:73:83:cc:9f:52:36:1b:20:1a:b7:9e:a6:d2:fd:
                    ad:eb:7c:87:d9:98:d7:aa:d3:3e:f0:93:39:7a:b7:
                    17:99:6f:28:bf:4e:cc:b4:54:e9:85:f0:ac:4f:f9:
                    b6:f4:54:ac:4b:30:a2:94:68:c2:0c:55:f4:e7:23:
                    4e:ca:f6:56:62:de:64:04:c2:5d:ea:d4:b4:19:e1:
                    12:7a:ef:2e:b5:7f:9f:54:fc:ff:54:cc:64:fe:12:
                    ee:06:d4:95:df:0f:8a:63:ce:56:9e:7e:77:b7:b9:
                    17:73:a4:b3:58:a5:26:e3:73:7b:22:37:a6:f2:08:
                    37:5b:49:ca:11:5b:a5:9d:d8:24:f5:e0:4d:c4:ed:
                    12:39:f2:2e:8d:3d:1f:be:59:8a:f4:36:fd:8a:5b:
                    36:d3:a3:2e:0e:93:22:31:b0:42:5b:f9:f3:97:21:
                    cf:92:02:ae:63:76:d7:57:bc:8a:73:57:60:d5:f8:
                    ed:5a:91:20:59:fa:a4:dc:cc:ee:61:70:ed:51:ea:
                    87:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:E7:21:EC:4A:E0:73:A6:8D:D5:31:6B:9C:3A:41:5E:51:07:71:00
            X509v3 Authority Key Identifier:
                keyid:AE:2E:1D:EF:AD:81:FF:39:E0:28:3E:D6:1B:C9:F9:DC:6D:A9:BE:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/3138352e33382e32352e302f32342d3234203d3e203133333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.38.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:87:17:44:9c:48:57:22:b5:93:b1:e0:e6:bf:de:3d:ec:9a:
         86:ef:52:d0:2c:c8:d4:5a:89:f0:a3:d2:87:00:c7:96:bf:50:
         55:03:05:8e:5e:d1:e5:a5:65:ad:e7:33:82:44:3d:92:26:a4:
         88:80:50:6a:f4:c6:4c:4e:68:52:7e:fc:50:d9:19:82:5f:54:
         d5:09:2f:b6:5b:4d:c2:5f:be:ca:14:35:f1:14:db:0e:f6:fa:
         99:fd:26:10:e8:23:b0:36:67:9c:e3:7c:be:06:94:47:d2:e3:
         bd:f6:bc:14:b1:5c:3e:d6:b7:bf:b3:37:fb:43:69:45:6c:ac:
         13:49:3c:6b:48:28:a8:1a:b3:e9:a6:5b:6a:fe:4c:3c:a3:68:
         1a:bd:ca:7e:29:da:f8:e4:95:7b:ad:7e:b7:70:3b:7f:1e:3c:
         63:e0:49:80:8f:7e:89:ad:1f:bb:82:ec:e4:39:c9:a0:97:50:
         99:d5:44:f9:f0:be:ad:e7:66:9f:a8:d7:98:3b:6f:3c:07:7e:
         c1:25:41:28:1d:21:41:4a:19:a4:ca:66:4c:29:c8:35:f3:14:
         39:c5:25:13:80:72:e7:f9:22:8b:a7:3f:7d:eb:42:25:75:4d:
         45:8a:0f:c4:97:0e:5a:11:2f:d7:fc:dc:f9:18:5d:cd:2a:18:
         4e:cd:a7:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:51:57 2026 by rpki-client