This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/3139342e33312e3136352e302f32342d3234203d3e20323134303235.roa
File:                     3139342e33312e3136352e302f32342d3234203d3e20323134303235.roa (raw, json)
Hash identifier:          EY78SLNdqDoVTGyYCNTO3r94gx+kGyxnzZbPSk3cNUM=
Subject key identifier:   BA:1C:46:A2:D0:3A:5C:FB:3A:58:14:40:8C:F7:40:B6:CA:28:F2:A5
Certificate issuer:       /CN=AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96
Certificate serial:       6691494C0BD984891F5D3846FC9E51FC770A2B23
Authority key identifier: AE:2E:1D:EF:AD:81:FF:39:E0:28:3E:D6:1B:C9:F9:DC:6D:A9:BE:96
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/3139342e33312e3136352e302f32342d3234203d3e20323134303235.roa
Signing time:             Wed 04 Feb 2026 13:44:25 +0000
ROA not before:           Wed 04 Feb 2026 13:39:25 +0000
ROA not after:            Wed 03 Feb 2027 13:44:25 +0000
asID:                     214025
IP address blocks:        194.31.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jMMA-vL21JGGqLYuCPGQEHdDlz0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:91:49:4c:0b:d9:84:89:1f:5d:38:46:fc:9e:51:fc:77:0a:2b:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96
        Validity
            Not Before: Feb  4 13:39:25 2026 GMT
            Not After : Feb  3 13:44:25 2027 GMT
        Subject: CN=BA1C46A2D03A5CFB3A5814408CF740B6CA28F2A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:bd:7e:25:70:c5:23:d3:68:e5:e0:d0:58:9b:
                    ed:b9:c9:56:9a:be:a4:cd:3c:ec:f7:47:70:02:46:
                    99:38:4f:be:8b:71:88:78:99:58:ce:f9:4e:3d:8b:
                    0a:c9:30:e2:6d:73:22:03:d7:c7:b2:a7:e4:86:9f:
                    37:da:2f:c7:a0:43:55:fe:d7:5a:84:c4:82:b7:2a:
                    b2:26:6e:48:76:38:36:04:3e:b4:9d:be:d1:ec:3f:
                    8c:16:54:84:38:ae:1a:86:e9:2b:52:d2:4b:a5:5f:
                    ab:ce:69:e4:a1:da:c5:1f:ac:2d:13:91:7f:e2:98:
                    c2:ed:16:38:5f:e0:db:97:27:fd:81:83:d4:73:09:
                    cb:d8:90:1a:18:35:2c:da:f5:30:25:ac:2c:05:4c:
                    5a:12:f8:47:5f:73:a0:65:e1:c6:89:49:01:1d:1d:
                    41:19:12:3e:b7:1f:77:ed:85:ea:c6:1f:9e:9a:55:
                    3c:41:53:68:db:63:e6:1f:20:99:23:2d:27:5a:66:
                    52:c2:2b:34:81:39:b3:eb:43:72:19:ce:6d:1f:70:
                    17:f2:b4:1e:d0:c6:79:6e:f8:30:85:34:ab:1b:bd:
                    34:7f:94:69:92:1e:7b:e3:c3:80:a9:73:25:ad:de:
                    34:89:16:e1:6b:74:a0:14:ad:c0:e7:9e:5f:f2:50:
                    d5:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:1C:46:A2:D0:3A:5C:FB:3A:58:14:40:8C:F7:40:B6:CA:28:F2:A5
            X509v3 Authority Key Identifier:
                keyid:AE:2E:1D:EF:AD:81:FF:39:E0:28:3E:D6:1B:C9:F9:DC:6D:A9:BE:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/3139342e33312e3136352e302f32342d3234203d3e20323134303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.31.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:ea:be:80:b0:ee:96:3b:82:35:ca:0e:0e:59:4e:ee:5b:03:
         8e:c1:ed:ac:3b:0b:cd:81:04:b7:7a:1e:82:26:ed:2a:f9:30:
         8b:6f:95:5d:f0:80:8e:55:bf:26:e9:d3:b6:66:47:58:1c:61:
         de:77:49:c3:2c:d7:80:32:a4:08:e1:41:82:88:a2:f7:ec:8b:
         cb:1e:73:1f:05:2a:29:c8:64:fb:3c:16:de:6c:e0:05:b9:f1:
         81:43:86:61:e5:18:4e:6c:01:98:da:7e:d8:5c:0f:b9:c9:03:
         00:c5:9a:4d:d7:a3:7f:9f:df:50:b5:c6:92:ac:cc:7a:ad:72:
         d4:e0:e7:91:64:aa:c3:63:48:53:fe:c6:42:65:90:d8:e9:1f:
         b2:23:c2:f3:1a:74:17:33:cd:d9:5d:1f:5b:b0:6c:f1:67:11:
         a3:d2:bd:6a:a9:c0:37:ee:c7:b4:81:66:67:c0:58:36:0c:af:
         bf:24:60:d6:e9:60:40:89:9c:83:1c:00:4f:fa:52:d7:32:44:
         5d:02:62:05:89:07:96:93:d0:fc:d1:94:a7:c7:d5:1f:d7:6d:
         04:9a:fd:33:c1:8c:e4:ae:28:87:17:4e:79:3d:b9:47:6a:95:
         55:12:71:f0:66:fe:6d:1e:09:d4:b4:23:14:16:2b:b6:56:0c:
         66:c5:f3:c0
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIUZpFJTAvZhIkfXThG/J5R/HcKKyMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUUyRTFERUZBRDgxRkYzOUUwMjgzRUQ2MUJDOUY5REM2
REE5QkU5NjAeFw0yNjAyMDQxMzM5MjVaFw0yNzAyMDMxMzQ0MjVaMDMxMTAvBgNV
BAMTKEJBMUM0NkEyRDAzQTVDRkIzQTU4MTQ0MDhDRjc0MEI2Q0EyOEYyQTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpvX4lcMUj02jl4NBYm+25yVaa
vqTNPOz3R3ACRpk4T76LcYh4mVjO+U49iwrJMOJtcyID18eyp+SGnzfaL8egQ1X+
11qExIK3KrImbkh2ODYEPrSdvtHsP4wWVIQ4rhqG6StS0kulX6vOaeSh2sUfrC0T
kX/imMLtFjhf4NuXJ/2Bg9RzCcvYkBoYNSza9TAlrCwFTFoS+Edfc6Bl4caJSQEd
HUEZEj63H3ftherGH56aVTxBU2jbY+YfIJkjLSdaZlLCKzSBObPrQ3IZzm0fcBfy
tB7Qxnlu+DCFNKsbvTR/lGmSHnvjw4CpcyWt3jSJFuFrdKAUrcDnnl/yUNWTAgMB
AAGjggJ6MIICdjAdBgNVHQ4EFgQUuhxGotA6XPs6WBRAjPdAtsoo8qUwHwYDVR0j
BBgwFoAUri4d762B/zngKD7WG8n53G2pvpYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjA3YzkzZWQtYjgxOS00NWU4LTk0NWQtNDI2MzZkNDcx
NzEwLzAvQUUyRTFERUZBRDgxRkYzOUUwMjgzRUQ2MUJDOUY5REM2REE5QkU5Ni5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84ZDkwNjJkZS1mNTM2LTQ0
NWQtYmE3MS0wMzVmYmZlY2FhZDgvMC9BRTJFMURFRkFEODFGRjM5RTAyODNFRDYx
QkM5RjlEQzZEQTlCRTk2LmNlcjCBrwYIKwYBBQUHAQsEgaIwgZ8wgZwGCCsGAQUF
BzALhoGPcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9mMDdjOTNlZC1iODE5LTQ1ZTgtOTQ1ZC00MjYzNmQ0NzE3MTAvMC8zMTM5MzQy
ZTMzMzEyZTMxMzYzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzNDMwMzIz
NS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMIfpTANBgkqhkiG9w0BAQsFAAOCAQEAheq+gLDuljuCNcoO
DllO7lsDjsHtrDsLzYEEt3oegibtKvkwi2+VXfCAjlW/JunTtmZHWBxh3ndJwyzX
gDKkCOFBgoii9+yLyx5zHwUqKchk+zwW3mzgBbnxgUOGYeUYTmwBmNp+2FwPuckD
AMWaTdejf5/fULXGkqzMeq1y1ODnkWSqw2NIU/7GQmWQ2OkfsiPC8xp0FzPN2V0f
W7Bs8WcRo9K9aqnAN+7HtIFmZ8BYNgyvvyRg1ulgQImcgxwAT/pS1zJEXQJiBYkH
lpPQ/NGUp8fVH9dtBJr9M8GM5K4ohxdOeT25R2qVVRJx8Gb+bR4J1LQjFBYrtlYM
ZsXzwA==
-----END CERTIFICATE-----
Generated at Mon Feb 9 20:51:56 2026 by rpki-client