This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/34352e3133362e33382e302f32342d3234203d3e203232343237.roa
File:                     34352e3133362e33382e302f32342d3234203d3e203232343237.roa (raw, json)
Hash identifier:          DVZekNAuwA3ip9E2oJI8N7TO3EANrn8mc568ZgMFs/g=
Subject key identifier:   7B:EE:0E:69:41:05:11:6F:9B:33:4A:0B:EE:D8:19:82:81:54:81:15
Certificate issuer:       /CN=AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96
Certificate serial:       4FCE009FF97FFAD2E717A84660B07DE07A4131DE
Authority key identifier: AE:2E:1D:EF:AD:81:FF:39:E0:28:3E:D6:1B:C9:F9:DC:6D:A9:BE:96
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/34352e3133362e33382e302f32342d3234203d3e203232343237.roa
Signing time:             Wed 04 Feb 2026 13:43:00 +0000
ROA not before:           Wed 04 Feb 2026 13:38:00 +0000
ROA not after:            Wed 03 Feb 2027 13:43:00 +0000
asID:                     22427
IP address blocks:        45.136.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jMMA-vL21JGGqLYuCPGQEHdDlz0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:ce:00:9f:f9:7f:fa:d2:e7:17:a8:46:60:b0:7d:e0:7a:41:31:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96
        Validity
            Not Before: Feb  4 13:38:00 2026 GMT
            Not After : Feb  3 13:43:00 2027 GMT
        Subject: CN=7BEE0E694105116F9B334A0BEED8198281548115
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4e:c3:d4:49:18:f5:fc:55:0a:c1:c9:5c:32:
                    97:e6:dd:4b:e5:22:0b:57:7e:9b:90:9e:b8:1d:b8:
                    ef:b4:39:24:22:35:c1:c1:f6:eb:5c:ec:51:a5:7d:
                    b1:ba:f3:53:02:79:89:e5:14:1b:8a:40:57:65:af:
                    81:b7:c1:14:04:a2:bf:3a:cc:56:de:ab:7d:a0:9c:
                    0e:ef:ff:04:7e:02:e1:ca:b0:b2:16:02:2b:86:d5:
                    c9:c6:b7:ae:1c:76:a4:ec:c8:04:a0:3e:60:b8:da:
                    be:61:4f:f2:ed:3f:26:56:a8:d5:80:20:6d:bb:10:
                    66:f0:07:17:5b:a4:2e:a6:1d:bd:9c:77:30:b2:c4:
                    da:51:7a:bf:e5:b2:e4:de:46:c1:93:ed:b5:57:b6:
                    eb:19:be:b6:cf:e7:e4:c0:aa:49:54:86:9c:be:0e:
                    33:65:cf:8f:3c:16:07:c7:e6:17:20:f1:99:0e:e9:
                    a2:16:e4:e5:6f:40:9e:87:90:6e:d3:4c:7f:21:90:
                    a0:0e:34:14:68:97:a2:a2:59:7f:09:75:bf:ce:56:
                    15:c7:4b:bb:91:54:9d:78:65:58:4d:df:15:59:e2:
                    15:c9:20:7f:bb:f6:d6:ab:d7:50:f5:3a:64:58:12:
                    01:ea:5b:b7:61:ba:aa:04:5a:7e:42:56:95:02:54:
                    8d:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:EE:0E:69:41:05:11:6F:9B:33:4A:0B:EE:D8:19:82:81:54:81:15
            X509v3 Authority Key Identifier:
                keyid:AE:2E:1D:EF:AD:81:FF:39:E0:28:3E:D6:1B:C9:F9:DC:6D:A9:BE:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/34352e3133362e33382e302f32342d3234203d3e203232343237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.136.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:e9:52:d5:fb:14:fe:fb:ce:04:2b:66:49:28:04:05:50:51:
         02:f6:d7:ff:12:2d:0e:3d:c2:fa:4b:a5:b3:70:67:94:df:cb:
         45:b1:17:7a:c9:16:ab:ef:ee:7b:1f:35:f8:59:c6:4d:53:99:
         2e:e7:e5:d7:fe:b7:e1:6a:1c:9a:10:82:36:b4:d9:de:63:91:
         0d:86:7c:31:4f:65:fc:c1:d6:a7:e1:16:e2:99:1a:66:6f:fa:
         70:70:7d:c9:59:50:c1:d4:58:e7:05:95:45:7b:fe:9c:e0:bc:
         03:40:64:fc:ad:c0:6d:a5:87:37:16:98:3e:e1:74:ce:8b:f1:
         47:fe:2e:c4:c8:a3:8a:98:df:d6:73:b6:57:c3:ac:96:e3:fa:
         f9:48:b7:dd:6e:ee:15:9e:d6:09:d8:d9:f8:ae:49:68:ec:57:
         f5:3b:54:36:21:7b:42:78:aa:94:dc:a8:97:ac:6d:df:fc:4a:
         00:4e:96:1b:6f:1c:25:26:3a:8a:94:cc:7f:fc:56:0d:74:00:
         32:e1:1a:04:48:ae:2f:48:7c:70:1f:83:af:e8:51:4d:73:bb:
         c1:24:23:90:bb:df:19:b2:26:e2:44:db:4b:9c:3e:02:be:70:
         42:16:28:9d:c0:14:b6:0b:b3:56:c7:f4:bf:27:f4:d8:34:36:
         2c:28:0f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:51:40 2026 by rpki-client