This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/34352e3133362e33392e302f32342d3234203d3e20313337323335.roa
File:                     34352e3133362e33392e302f32342d3234203d3e20313337323335.roa (raw, json)
Hash identifier:          UhTypQACgX/qose3+Rz5crr8U0o2FSTLVVAcLhIaRXU=
Subject key identifier:   EE:3F:CA:92:C7:EF:CC:7D:0C:3C:EC:89:77:7F:D7:08:07:CB:4C:5E
Certificate issuer:       /CN=AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96
Certificate serial:       0B305AEC60B8B4000790E0B8A2FA6507973990E5
Authority key identifier: AE:2E:1D:EF:AD:81:FF:39:E0:28:3E:D6:1B:C9:F9:DC:6D:A9:BE:96
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/34352e3133362e33392e302f32342d3234203d3e20313337323335.roa
Signing time:             Wed 04 Feb 2026 13:43:20 +0000
ROA not before:           Wed 04 Feb 2026 13:38:20 +0000
ROA not after:            Wed 03 Feb 2027 13:43:20 +0000
asID:                     137235
IP address blocks:        45.136.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jMMA-vL21JGGqLYuCPGQEHdDlz0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:30:5a:ec:60:b8:b4:00:07:90:e0:b8:a2:fa:65:07:97:39:90:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96
        Validity
            Not Before: Feb  4 13:38:20 2026 GMT
            Not After : Feb  3 13:43:20 2027 GMT
        Subject: CN=EE3FCA92C7EFCC7D0C3CEC89777FD70807CB4C5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b1:90:65:97:89:eb:61:93:a9:4b:70:34:61:
                    d1:bf:42:e4:4e:77:64:fa:22:f7:56:93:0e:d2:66:
                    09:fa:cd:54:e1:8b:4d:ba:09:e9:9e:f4:ae:f1:7d:
                    84:19:d1:48:7f:3a:98:58:4d:59:db:f4:e0:84:5a:
                    dc:27:c3:62:fc:f2:fc:07:8f:46:1c:0f:9f:e3:53:
                    f6:33:93:bf:6d:3a:10:52:07:14:35:7f:9e:51:ac:
                    c4:a1:79:8e:2d:cf:b3:cf:eb:18:3b:91:ab:f0:41:
                    d1:d3:d5:ab:be:de:6e:03:56:66:7a:de:2a:18:b8:
                    a7:a7:45:42:9e:34:15:64:32:f6:07:de:25:c7:0d:
                    25:0c:85:1e:d3:62:23:e5:5d:58:d0:5c:6a:b4:7d:
                    2b:20:9a:78:d7:1c:d4:6d:a6:79:ff:09:79:ed:15:
                    b7:21:76:9f:99:5c:9d:bf:97:ef:fa:a1:ea:14:3d:
                    a0:f1:a5:74:64:59:ff:1e:33:f8:57:b4:54:17:84:
                    20:2e:98:16:af:54:5c:7b:79:bb:da:a1:21:46:f7:
                    7a:e4:76:f8:0b:1b:2d:7d:17:68:0e:8a:5b:8b:51:
                    c4:47:78:b0:4f:11:ce:01:c3:73:e8:94:02:06:e8:
                    d4:7a:c8:13:39:aa:8c:7a:34:3e:a0:98:d2:13:e0:
                    cb:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:3F:CA:92:C7:EF:CC:7D:0C:3C:EC:89:77:7F:D7:08:07:CB:4C:5E
            X509v3 Authority Key Identifier:
                keyid:AE:2E:1D:EF:AD:81:FF:39:E0:28:3E:D6:1B:C9:F9:DC:6D:A9:BE:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/34352e3133362e33392e302f32342d3234203d3e20313337323335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.136.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:19:ce:5a:4e:c9:93:4d:53:84:22:ff:08:1c:c2:7f:02:1d:
         8f:84:a9:3b:a2:58:9a:37:4b:c0:1c:2f:fc:6c:96:1e:b6:e1:
         0c:ed:ed:b0:51:76:aa:d8:c4:55:b5:6f:73:cf:a6:c7:fe:12:
         e8:ee:f0:cc:7a:fe:41:c5:c0:dd:4a:67:06:1d:23:18:dd:6f:
         83:69:aa:34:df:65:41:60:cc:14:66:77:e8:70:ee:8e:55:bb:
         08:02:8e:4d:05:e5:92:19:21:e2:9d:91:7e:f5:d6:31:bf:f8:
         51:4a:78:23:08:cc:98:81:01:bd:1e:35:a1:ed:d6:4b:fd:dd:
         e1:2f:52:83:ed:47:18:98:93:36:6c:c0:7c:6d:74:cd:61:02:
         71:06:f5:29:70:4f:95:31:73:ce:d4:3e:e8:2c:2e:24:55:2e:
         ee:6d:0c:e7:c3:f6:ca:44:e6:ef:31:be:67:82:cd:9b:f1:c6:
         68:f6:90:3a:5b:83:6e:9a:c0:3b:d8:d0:5f:4b:13:56:da:ca:
         4f:1c:3d:de:96:f7:5e:fa:7c:f3:87:93:7c:3b:6f:9c:c6:65:
         95:92:01:2f:d6:22:d0:67:ba:1e:89:16:31:f6:7d:54:26:e4:
         0e:a1:86:23:11:3b:09:3a:e5:e9:44:56:4a:28:92:c4:0a:ed:
         8b:c0:23:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:51:57 2026 by rpki-client