This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/34352e3133362e33372e302f32342d3234203d3e20323136313338.roa
File:                     34352e3133362e33372e302f32342d3234203d3e20323136313338.roa (raw, json)
Hash identifier:          JZ1L2KQs0f2eXdqI4to3PHDMlAV/dVTRle8eNzjpil8=
Subject key identifier:   2C:29:E9:8F:3D:20:E9:3E:3A:B5:42:04:BA:51:99:6A:32:6C:0E:26
Certificate issuer:       /CN=AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96
Certificate serial:       13CC481033ABEC51E501BAC616895B1A13364AD9
Authority key identifier: AE:2E:1D:EF:AD:81:FF:39:E0:28:3E:D6:1B:C9:F9:DC:6D:A9:BE:96
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/34352e3133362e33372e302f32342d3234203d3e20323136313338.roa
Signing time:             Wed 04 Feb 2026 13:40:46 +0000
ROA not before:           Wed 04 Feb 2026 13:35:46 +0000
ROA not after:            Wed 03 Feb 2027 13:40:46 +0000
asID:                     216138
IP address blocks:        45.136.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jMMA-vL21JGGqLYuCPGQEHdDlz0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:cc:48:10:33:ab:ec:51:e5:01:ba:c6:16:89:5b:1a:13:36:4a:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96
        Validity
            Not Before: Feb  4 13:35:46 2026 GMT
            Not After : Feb  3 13:40:46 2027 GMT
        Subject: CN=2C29E98F3D20E93E3AB54204BA51996A326C0E26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:5d:62:a5:0a:e1:83:73:e0:bc:d8:01:2f:13:
                    d5:8e:be:5a:13:e7:bf:d3:a0:e5:d6:5c:60:04:ed:
                    84:54:4d:fb:d9:af:a8:15:19:ae:57:30:2d:cc:9b:
                    b0:3e:5b:1f:49:48:99:6a:9f:c4:bf:a1:10:bf:fd:
                    7d:9e:25:6d:7e:ab:0a:cc:44:22:26:73:4f:d0:95:
                    ab:1d:b2:be:7b:d2:09:12:3e:d4:bb:d0:15:67:3c:
                    34:24:ba:9d:90:5d:ca:f2:f5:1c:03:79:d4:54:d1:
                    ef:d2:45:2c:60:51:ba:d1:d0:4e:9f:8c:86:68:e4:
                    10:e5:82:f9:06:58:41:5f:78:4d:0b:90:10:fa:f3:
                    a3:3a:fc:8b:65:d1:c7:b1:c2:3e:8d:ca:55:3e:79:
                    01:55:03:c3:1d:a6:f1:dc:97:d9:bd:c7:99:eb:db:
                    78:49:74:29:39:3e:93:aa:ef:8c:8f:2a:f1:56:87:
                    2a:eb:ed:9b:c6:dc:c9:07:cf:4e:26:80:b5:a5:9f:
                    16:d8:02:3f:93:25:94:8e:39:3c:73:e8:1a:97:83:
                    6d:1e:83:02:4a:46:cb:66:b6:56:04:32:66:b7:72:
                    cb:89:33:d2:40:c0:34:d0:b5:e1:85:86:0c:f8:57:
                    25:0e:b0:ae:ea:12:6f:c3:ac:bd:ff:6d:8e:d2:37:
                    57:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:29:E9:8F:3D:20:E9:3E:3A:B5:42:04:BA:51:99:6A:32:6C:0E:26
            X509v3 Authority Key Identifier:
                keyid:AE:2E:1D:EF:AD:81:FF:39:E0:28:3E:D6:1B:C9:F9:DC:6D:A9:BE:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/34352e3133362e33372e302f32342d3234203d3e20323136313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.136.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:ad:f9:2b:5c:6b:1c:03:63:17:95:29:3d:c2:19:d8:8f:40:
         49:47:84:05:bc:c9:4e:08:b7:2a:ed:54:55:09:5c:30:89:63:
         e4:da:09:20:c5:56:29:7d:b1:2d:54:ce:0d:29:66:b3:52:64:
         b3:06:4d:cf:2f:f9:b3:9e:59:d9:7f:4f:7f:66:f6:e2:e2:bc:
         7f:8c:06:dc:bb:67:bc:3e:11:d1:a8:6d:1e:be:9d:79:0e:7d:
         c4:2c:4c:d2:db:69:36:77:fa:43:dd:71:6c:67:4a:7d:2b:50:
         74:0e:cb:37:41:c2:33:a4:16:43:13:26:2d:57:49:4a:d8:1a:
         f2:39:fb:8f:a3:2f:41:9d:99:a6:2a:92:37:9d:98:91:05:4c:
         0c:3c:5f:e7:17:ea:8e:e2:97:20:b4:cf:07:ca:5b:de:ec:85:
         4e:1c:6f:fa:cd:f4:fa:50:8b:16:fe:1a:ec:86:3a:93:c4:54:
         ea:6a:94:bc:ba:cf:b0:bd:2e:1c:1e:59:66:ad:e1:50:5c:e4:
         39:82:f3:67:f4:53:e1:92:ad:bb:52:e1:66:51:cf:f1:94:a8:
         be:5e:75:64:c5:25:2d:5e:3d:4f:1b:7f:fc:40:61:42:0d:d3:
         b6:c7:6c:49:da:77:2d:eb:09:8b:05:b8:f8:97:9d:62:73:30:
         01:12:08:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:51:57 2026 by rpki-client