This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/3138352e33382e32362e302f32342d3234203d3e20323033303736.roa
File:                     3138352e33382e32362e302f32342d3234203d3e20323033303736.roa (raw, json)
Hash identifier:          sDu6cSq1jkixXmJL543CieEIPCSsRynaX7T0t0iTsp4=
Subject key identifier:   E2:86:89:17:33:53:A3:18:B3:30:B0:77:B9:D1:8B:A2:63:ED:2B:A5
Certificate issuer:       /CN=AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96
Certificate serial:       415DBF993DD9B34C014519D846BACA5802034C0D
Authority key identifier: AE:2E:1D:EF:AD:81:FF:39:E0:28:3E:D6:1B:C9:F9:DC:6D:A9:BE:96
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/3138352e33382e32362e302f32342d3234203d3e20323033303736.roa
Signing time:             Thu 05 Feb 2026 04:04:05 +0000
ROA not before:           Thu 05 Feb 2026 03:59:05 +0000
ROA not after:            Thu 04 Feb 2027 04:04:05 +0000
asID:                     203076
IP address blocks:        185.38.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jMMA-vL21JGGqLYuCPGQEHdDlz0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:5d:bf:99:3d:d9:b3:4c:01:45:19:d8:46:ba:ca:58:02:03:4c:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96
        Validity
            Not Before: Feb  5 03:59:05 2026 GMT
            Not After : Feb  4 04:04:05 2027 GMT
        Subject: CN=E28689173353A318B330B077B9D18BA263ED2BA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:08:d5:80:40:c6:6e:75:3e:1c:9d:a5:ac:aa:
                    b8:42:d8:5c:80:a1:49:2a:a2:54:ef:d0:fa:67:35:
                    e0:6c:fc:2b:88:e4:33:4d:dc:55:c6:95:4e:ed:06:
                    37:23:48:f0:05:17:d4:3f:14:37:18:6c:14:7e:21:
                    f5:45:00:68:11:b7:0c:27:a5:79:ad:4d:ab:e0:a7:
                    d0:6a:68:0d:46:52:0a:68:03:12:93:1c:a6:82:89:
                    7f:09:3b:f4:c8:36:ed:d1:e3:8e:31:75:a1:e7:78:
                    33:40:10:ba:f9:ad:55:74:1f:7c:08:12:98:46:55:
                    89:de:5b:59:bc:50:0a:fc:44:fe:11:73:c7:65:0a:
                    a0:66:6b:da:82:4a:a0:95:85:d9:ed:06:02:6f:73:
                    da:d8:75:2f:2d:e8:bd:ea:68:d4:47:bf:24:a9:b1:
                    b4:32:2c:b0:10:b3:30:be:4f:11:46:cb:5f:99:ce:
                    7c:d5:c0:82:35:4b:f8:92:a0:26:bb:04:c2:44:ef:
                    08:cb:c4:0a:ad:9b:dc:7d:1a:18:e2:3c:6b:ce:3a:
                    7c:76:5b:77:ef:6d:b8:e3:3c:12:fb:86:45:8f:01:
                    ca:26:1e:c0:37:93:53:42:2e:7a:5e:9e:80:06:98:
                    83:4d:cc:45:a3:ba:b3:a1:82:30:e3:33:d7:8b:f0:
                    ae:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:86:89:17:33:53:A3:18:B3:30:B0:77:B9:D1:8B:A2:63:ED:2B:A5
            X509v3 Authority Key Identifier:
                keyid:AE:2E:1D:EF:AD:81:FF:39:E0:28:3E:D6:1B:C9:F9:DC:6D:A9:BE:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/3138352e33382e32362e302f32342d3234203d3e20323033303736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.38.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:b9:fc:74:36:a4:49:d0:c4:27:7f:f0:f2:db:03:6c:78:40:
         9b:77:49:b5:f6:c3:58:4c:d8:87:69:24:50:a5:b0:a5:6c:ee:
         e7:9f:1f:24:05:d7:8c:ad:db:f9:d9:ef:2a:41:f9:aa:4f:44:
         57:e0:f0:79:f4:fc:b2:3d:3a:bc:cf:42:6a:a5:d3:e6:b3:bd:
         e4:d4:fc:86:c0:40:40:87:96:70:35:aa:eb:e9:c7:08:41:d9:
         d1:9e:b7:73:92:e2:ca:ad:98:be:99:83:02:23:b0:4c:49:d5:
         74:46:3f:5d:4e:cc:10:ca:24:80:06:97:2a:4d:37:e4:f0:84:
         06:da:8e:e7:f1:cd:21:8f:bf:68:ca:75:4f:9f:88:df:1f:a4:
         82:2f:75:23:d9:1a:3a:f2:8f:e5:d8:07:3e:77:e2:86:13:47:
         e1:e8:71:7c:60:de:14:09:98:35:19:a6:a5:52:6c:ef:a8:29:
         c2:89:ab:22:28:cd:b8:c2:f2:ae:2b:ca:0c:56:6f:70:d7:90:
         d5:b6:5b:66:48:a0:87:79:e4:24:03:20:2d:0f:22:b1:51:e3:
         a8:c6:3a:b9:e5:67:af:ac:fa:53:d7:24:e8:cf:dc:65:4c:89:
         8d:96:03:2c:36:18:de:e7:29:cc:bd:22:57:0c:bc:89:4b:7d:
         9b:38:c3:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:51:58 2026 by rpki-client