This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/3139342e33312e3136342e302f32342d3234203d3e203136323736.roa
File:                     3139342e33312e3136342e302f32342d3234203d3e203136323736.roa (raw, json)
Hash identifier:          AK1oqHAqMnnxuZW3vUOIU/C69osd8/Sq7aeyLgJgdu4=
Subject key identifier:   92:B4:C9:EE:86:6A:8F:6A:63:19:70:76:58:86:4D:7D:05:DD:93:06
Certificate issuer:       /CN=AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96
Certificate serial:       6DE809D81730A5F0A14C3C22DB330C17EA930440
Authority key identifier: AE:2E:1D:EF:AD:81:FF:39:E0:28:3E:D6:1B:C9:F9:DC:6D:A9:BE:96
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/3139342e33312e3136342e302f32342d3234203d3e203136323736.roa
Signing time:             Wed 04 Feb 2026 13:42:28 +0000
ROA not before:           Wed 04 Feb 2026 13:37:28 +0000
ROA not after:            Wed 03 Feb 2027 13:42:28 +0000
asID:                     16276
IP address blocks:        194.31.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jMMA-vL21JGGqLYuCPGQEHdDlz0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:e8:09:d8:17:30:a5:f0:a1:4c:3c:22:db:33:0c:17:ea:93:04:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96
        Validity
            Not Before: Feb  4 13:37:28 2026 GMT
            Not After : Feb  3 13:42:28 2027 GMT
        Subject: CN=92B4C9EE866A8F6A6319707658864D7D05DD9306
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:2f:30:a9:c7:8f:4a:e8:af:3b:80:01:86:3d:
                    d3:6c:42:29:65:8d:5d:c6:3d:c4:da:b8:dd:e7:6c:
                    3e:7f:b5:f6:a6:ae:a9:0a:21:2c:6d:09:96:bb:29:
                    85:b5:ff:c9:7d:3e:2b:a2:af:e7:3d:ec:f2:36:84:
                    d6:03:00:85:88:35:62:b9:ee:9a:ad:96:10:e4:33:
                    9f:49:9b:5f:7c:c3:97:ce:37:f5:67:a9:c4:92:a6:
                    9f:87:d0:97:18:55:ee:ef:bb:56:7e:c8:4c:79:72:
                    87:80:a3:b6:eb:f7:c6:dc:a9:d5:24:22:f2:02:34:
                    e8:63:f6:b6:99:dd:f9:25:fe:72:91:14:5e:dd:e3:
                    e9:28:9a:e0:42:b1:60:cf:f0:bc:6d:23:fc:c3:41:
                    fa:7e:a4:a7:43:c8:85:81:d4:53:b6:23:00:b3:12:
                    75:09:d3:de:68:0d:c8:fe:3d:b4:03:88:c0:c7:a5:
                    26:f5:0f:4b:2d:20:0c:4b:21:7e:7e:c2:c8:25:14:
                    c1:b7:02:b4:65:1c:c5:25:24:82:8d:5d:7c:af:62:
                    ed:ce:10:1a:03:01:1f:38:aa:9a:e3:e2:3b:86:f2:
                    d3:99:db:47:fe:8d:df:83:85:ca:ba:58:2c:82:57:
                    60:51:bd:47:46:37:70:7a:c8:d7:4f:55:b8:06:c3:
                    84:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:B4:C9:EE:86:6A:8F:6A:63:19:70:76:58:86:4D:7D:05:DD:93:06
            X509v3 Authority Key Identifier:
                keyid:AE:2E:1D:EF:AD:81:FF:39:E0:28:3E:D6:1B:C9:F9:DC:6D:A9:BE:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/3139342e33312e3136342e302f32342d3234203d3e203136323736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.31.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:e4:45:fa:aa:4a:3d:3c:b4:1d:75:31:bd:3f:f1:d9:11:e1:
         9a:3c:47:fd:65:5c:b3:ae:6d:4f:d9:df:f9:af:8e:90:a7:28:
         8c:50:f2:bb:d8:96:0f:38:b5:5c:d8:30:eb:86:07:49:9f:31:
         31:2a:b8:b7:5e:7b:8f:57:91:3c:a3:c6:3c:a4:9f:1b:8a:1f:
         93:5c:76:5a:41:2d:42:e9:6f:3b:40:fc:30:a4:76:d0:67:ac:
         c0:31:de:c0:bf:42:d9:ed:47:00:c0:61:3f:f4:be:ee:43:db:
         32:c3:4b:21:96:46:4f:66:53:81:79:10:04:2d:fe:3c:63:13:
         09:c7:59:ef:84:47:dd:82:0c:fc:9a:8a:ac:7f:cc:5b:3c:b0:
         7f:8d:2d:58:e2:d2:20:99:58:bd:29:5f:5b:5f:62:da:b8:98:
         14:e8:cb:71:c5:ce:42:18:bf:b3:e6:04:a9:64:db:fc:55:b9:
         f2:f0:de:d6:ea:42:38:c5:f7:93:66:8e:79:b7:05:99:08:aa:
         9b:88:ca:39:ae:f6:63:27:4f:22:8e:08:e9:8c:c4:a4:1b:b1:
         4b:f3:1c:9f:10:1b:cd:1d:0b:97:0f:67:57:35:bc:2f:69:69:
         d7:9b:27:81:d5:99:d6:07:20:0f:a4:06:53:70:ec:08:e5:7e:
         25:77:47:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:51:57 2026 by rpki-client