This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/3138352e33382e32372e302f32342d3234203d3e20323031303738.roa
File:                     3138352e33382e32372e302f32342d3234203d3e20323031303738.roa (raw, json)
Hash identifier:          ukyrW3OkENdui2e2lMLTPGtAVU5Vow3lLLqAXhAKFmY=
Subject key identifier:   20:66:28:78:D2:8A:99:8B:39:FB:08:ED:98:DA:E9:A7:C5:A2:E2:B6
Certificate issuer:       /CN=AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96
Certificate serial:       458158412CC60778B79FA18946EF5E1A27D5ADDB
Authority key identifier: AE:2E:1D:EF:AD:81:FF:39:E0:28:3E:D6:1B:C9:F9:DC:6D:A9:BE:96
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/3138352e33382e32372e302f32342d3234203d3e20323031303738.roa
Signing time:             Wed 04 Feb 2026 13:41:42 +0000
ROA not before:           Wed 04 Feb 2026 13:36:42 +0000
ROA not after:            Wed 03 Feb 2027 13:41:42 +0000
asID:                     201078
IP address blocks:        185.38.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jMMA-vL21JGGqLYuCPGQEHdDlz0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:81:58:41:2c:c6:07:78:b7:9f:a1:89:46:ef:5e:1a:27:d5:ad:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96
        Validity
            Not Before: Feb  4 13:36:42 2026 GMT
            Not After : Feb  3 13:41:42 2027 GMT
        Subject: CN=20662878D28A998B39FB08ED98DAE9A7C5A2E2B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:89:b4:0b:47:a4:e0:db:6d:b3:72:5f:ff:4d:
                    59:55:43:7b:19:25:a0:c9:c7:6a:91:ab:ce:f7:51:
                    13:b9:38:7f:f9:c3:fc:60:bc:92:79:27:f6:c7:53:
                    34:cf:4e:8d:70:85:d7:80:22:55:0c:e4:41:f6:7b:
                    85:44:1c:9d:8a:14:5f:87:28:f5:66:8b:a0:f8:10:
                    19:f9:c3:3a:67:69:8f:51:45:66:07:67:8d:4a:49:
                    9e:a6:31:3f:c1:03:c9:3f:3a:11:91:ce:97:f7:d5:
                    f2:e2:a4:a5:0e:56:14:21:10:1d:bb:26:32:43:47:
                    94:21:8b:fc:0a:a7:10:56:85:04:6c:3a:2e:ce:ea:
                    1c:43:9f:03:5f:e2:39:28:1c:ce:b2:aa:a6:14:1d:
                    9a:d0:f2:63:35:9e:79:cf:29:fa:df:41:ca:16:91:
                    0b:ac:9b:08:12:d7:44:c9:e8:35:0e:db:6f:2d:30:
                    4e:be:24:c4:21:99:6f:7a:7c:a4:3a:15:35:5c:60:
                    d4:3d:71:d4:f4:4b:07:39:fa:6a:65:60:3e:79:68:
                    8c:50:5b:9a:3c:c1:ef:64:59:a9:c2:35:23:ad:cc:
                    ee:6c:80:09:7e:c9:3b:3e:be:ac:01:34:7e:32:cf:
                    cd:5c:12:16:69:fd:64:c4:1e:7a:fa:bd:13:a9:ea:
                    49:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:66:28:78:D2:8A:99:8B:39:FB:08:ED:98:DA:E9:A7:C5:A2:E2:B6
            X509v3 Authority Key Identifier:
                keyid:AE:2E:1D:EF:AD:81:FF:39:E0:28:3E:D6:1B:C9:F9:DC:6D:A9:BE:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/3138352e33382e32372e302f32342d3234203d3e20323031303738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.38.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:53:2b:ee:ef:86:7c:53:2c:2d:7b:fc:25:c6:3e:46:7b:9f:
         c5:b5:7f:62:03:9a:d8:08:b3:dd:d0:53:35:58:d9:ea:1b:85:
         3b:58:22:74:1c:88:26:c4:fc:25:d0:99:9c:b4:72:57:c4:a4:
         f0:f2:69:41:3a:fb:3c:dd:b3:67:88:5a:7f:7e:64:f9:ad:ab:
         06:7a:a3:df:f4:02:b4:02:4c:10:0d:67:19:f4:7d:05:73:7f:
         fd:39:53:6d:36:36:95:40:a3:46:57:14:2d:23:b3:8d:f6:04:
         67:fc:c0:99:a2:55:4b:db:56:3d:bf:58:da:ad:65:ce:d5:67:
         f7:54:c2:5b:86:3a:20:16:59:12:83:7d:b5:b4:64:35:c4:21:
         ad:f1:79:71:84:a5:24:ab:c9:a7:e0:d2:20:cc:bd:fb:ce:19:
         b5:41:7e:3d:b7:59:07:0e:3b:0e:f9:56:8b:3d:c6:cc:2f:c4:
         34:09:b4:91:4c:dc:cc:05:8b:8e:93:2e:09:dc:c4:a9:b2:2f:
         c5:f8:76:17:1b:76:6a:cb:99:ce:cb:c4:3c:4c:4e:72:cd:c9:
         52:62:27:e3:ab:66:c4:ab:76:c0:22:aa:31:06:33:85:7f:c3:
         88:bd:3e:00:df:1d:3c:a6:ed:31:5d:f9:cf:a9:dd:ab:c0:33:
         b0:10:7a:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:51:57 2026 by rpki-client