This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/34352e3133362e33372e302f32342d3234203d3e203233353332.roa
File:                     34352e3133362e33372e302f32342d3234203d3e203233353332.roa (raw, json)
Hash identifier:          lQ482c7dNPnq+b2J23abNSxD06d725wZrRqBuqXdD1I=
Subject key identifier:   3A:D8:CA:7C:B0:58:5A:7F:CC:56:D4:76:4D:8E:D9:06:06:ED:DF:C6
Certificate issuer:       /CN=AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96
Certificate serial:       5861312AE46BE2142AD6163EC3B81B40DA77A8DD
Authority key identifier: AE:2E:1D:EF:AD:81:FF:39:E0:28:3E:D6:1B:C9:F9:DC:6D:A9:BE:96
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/34352e3133362e33372e302f32342d3234203d3e203233353332.roa
Signing time:             Wed 04 Feb 2026 13:39:54 +0000
ROA not before:           Wed 04 Feb 2026 13:34:54 +0000
ROA not after:            Wed 03 Feb 2027 13:39:54 +0000
asID:                     23532
IP address blocks:        45.136.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jMMA-vL21JGGqLYuCPGQEHdDlz0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:61:31:2a:e4:6b:e2:14:2a:d6:16:3e:c3:b8:1b:40:da:77:a8:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96
        Validity
            Not Before: Feb  4 13:34:54 2026 GMT
            Not After : Feb  3 13:39:54 2027 GMT
        Subject: CN=3AD8CA7CB0585A7FCC56D4764D8ED90606EDDFC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:15:27:9c:e4:53:fe:51:61:06:ef:18:2f:f5:
                    99:1b:b1:de:02:19:57:60:7a:0d:fe:76:b6:0a:9f:
                    2f:27:93:5e:79:1e:f3:93:a7:a4:a6:91:d2:ec:8e:
                    2e:8e:56:19:24:37:1f:c5:ce:ea:78:5e:34:55:86:
                    4e:e4:67:5e:94:4e:09:4b:79:09:24:82:44:15:74:
                    bc:03:3c:21:59:ec:ba:8e:b3:89:b9:f0:ee:e4:8f:
                    b5:52:c6:75:0f:bf:db:e0:75:a4:02:a9:be:4f:75:
                    c7:98:9d:5d:4a:f4:8b:18:16:68:48:36:a3:a0:19:
                    a4:f2:0e:26:0a:1a:e6:df:0f:61:42:a1:83:96:ce:
                    de:d0:3b:7a:da:80:4b:e1:95:b6:0b:db:85:b1:90:
                    54:ea:2c:b8:7c:03:c8:eb:53:de:22:ed:6c:cf:e6:
                    44:88:53:71:f8:ce:82:d0:6a:3e:9e:3a:07:05:af:
                    aa:f1:79:ac:52:5e:84:e2:97:fc:cd:03:e8:93:53:
                    4e:6f:ab:93:31:14:e1:30:aa:19:19:21:78:e6:f0:
                    9a:48:f6:63:a2:7d:9f:94:4c:a1:8a:94:14:44:87:
                    1c:09:e1:61:29:bc:9d:cf:cb:6a:0a:47:ca:6e:49:
                    56:9a:7a:82:a6:84:33:82:b9:6a:49:7d:71:eb:48:
                    89:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:D8:CA:7C:B0:58:5A:7F:CC:56:D4:76:4D:8E:D9:06:06:ED:DF:C6
            X509v3 Authority Key Identifier:
                keyid:AE:2E:1D:EF:AD:81:FF:39:E0:28:3E:D6:1B:C9:F9:DC:6D:A9:BE:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/34352e3133362e33372e302f32342d3234203d3e203233353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.136.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:05:f7:5c:f5:67:61:be:fc:29:9a:42:b8:0a:55:7f:12:ca:
         ca:84:80:01:0d:1e:95:c8:9c:4b:6d:1c:fc:7a:b8:7f:8b:0c:
         77:ab:05:43:b1:a8:d5:b9:6b:7c:ac:88:47:d3:2c:b4:97:a4:
         9e:fc:7d:bd:5b:39:0d:f5:41:ee:f3:88:cd:61:e8:20:fa:bc:
         03:c5:fd:c5:24:d7:8d:34:02:d7:35:69:0b:d5:b2:64:1a:61:
         3b:d3:59:2d:d1:3a:c7:e6:6c:4e:80:77:d6:ea:0e:67:e3:51:
         4d:ea:4d:09:52:78:b3:ab:16:21:dc:86:59:1f:87:ed:93:a5:
         3b:95:be:c1:1a:b7:44:18:c6:33:a4:00:a2:57:7c:9b:44:54:
         d5:93:b7:fa:63:d0:ac:4f:bc:4b:94:0c:47:a6:b9:84:6d:16:
         bf:4a:b5:8c:7f:3b:4d:54:d4:b5:c1:85:bd:9c:42:28:2b:21:
         08:02:fa:df:5f:0c:68:85:e6:57:89:f3:3d:74:85:22:03:34:
         b5:c6:20:27:96:4e:27:b3:b8:5d:a2:8f:45:d9:82:99:2e:ab:
         e6:dd:57:7c:5e:c2:82:59:a7:43:5b:6d:91:f9:4a:b9:12:d8:
         9e:a0:48:dd:40:85:5a:6c:67:1d:db:54:50:b2:8c:d0:24:9b:
         3d:63:1f:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:51:57 2026 by rpki-client