This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38312e32322e33362e302f32342d3234203d3e20343031333232.roa
File:                     38312e32322e33362e302f32342d3234203d3e20343031333232.roa (raw, json)
Hash identifier:          gbHOpKm6jooMrcDTq1ap58dVUX1C12ZCAYL1a2JqBPg=
Subject key identifier:   FE:87:81:59:63:47:62:73:B8:B0:CB:65:46:D1:AB:04:C8:B9:5D:52
Certificate issuer:       /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial:       78A0C7FDDC5B61CD394EB0D08864944385382DC6
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38312e32322e33362e302f32342d3234203d3e20343031333232.roa
Signing time:             Mon 26 Jan 2026 09:44:32 +0000
ROA not before:           Mon 26 Jan 2026 09:39:32 +0000
ROA not after:            Mon 25 Jan 2027 09:44:32 +0000
asID:                     401322
IP address blocks:        81.22.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Feb 2026 14:05:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:a0:c7:fd:dc:5b:61:cd:39:4e:b0:d0:88:64:94:43:85:38:2d:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
        Validity
            Not Before: Jan 26 09:39:32 2026 GMT
            Not After : Jan 25 09:44:32 2027 GMT
        Subject: CN=FE87815963476273B8B0CB6546D1AB04C8B95D52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:76:b7:cd:fb:9e:bb:cc:43:9e:9b:b6:52:84:
                    cc:67:92:c3:e4:0b:ab:1d:04:fb:a0:44:44:f4:ff:
                    ed:9d:5b:78:5d:73:77:f9:7b:73:62:90:8c:84:b9:
                    0a:14:a0:f5:c4:84:2d:67:56:d8:39:ca:6f:56:5a:
                    cd:24:7c:81:04:b6:0d:0a:72:c5:f6:d4:e7:65:00:
                    88:53:f4:38:7a:a0:f7:53:05:bd:c3:72:59:35:e8:
                    e4:9f:06:bc:4d:26:87:72:c0:7e:26:4f:cb:ac:b6:
                    4b:f3:4b:7e:c8:1c:9e:1f:60:15:0d:8b:d8:3e:06:
                    d8:14:b6:61:d2:97:37:43:72:e0:ae:ae:48:55:b3:
                    15:6e:d7:97:2f:17:ad:e4:9e:ad:77:5b:87:42:96:
                    2f:4a:f3:41:59:2f:c2:f4:2a:4a:85:97:ad:6c:e3:
                    b8:2d:c7:0d:f3:55:39:05:96:e2:ee:64:39:bc:e9:
                    8b:8f:02:30:2e:00:ac:84:e3:e9:eb:45:54:8d:ec:
                    82:3e:20:ba:d9:d5:08:6b:39:fd:c0:f6:b5:e9:ce:
                    72:e2:97:6f:0d:4c:de:9f:a8:99:75:2b:0e:52:ee:
                    34:d5:bf:aa:8d:54:38:2f:79:1f:53:60:f3:eb:b9:
                    f9:df:cd:f3:ee:5e:c1:0e:9f:7c:53:f8:21:87:02:
                    79:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:87:81:59:63:47:62:73:B8:B0:CB:65:46:D1:AB:04:C8:B9:5D:52
            X509v3 Authority Key Identifier:
                keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38312e32322e33362e302f32342d3234203d3e20343031333232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.22.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cd:09:9a:e5:5d:d6:5f:a6:3c:cc:85:f6:1a:2d:cb:34:60:7d:
         2b:82:73:5a:17:eb:ec:02:f8:3c:2b:6d:9f:f7:11:bb:d1:e0:
         b5:95:65:3e:80:9b:94:11:21:96:7a:bd:db:99:d2:2d:47:37:
         d4:51:a8:16:44:d3:8e:0f:c9:b4:87:b5:46:2f:5b:16:79:f0:
         34:8c:14:01:24:51:a2:4e:2d:be:ac:b3:ac:16:45:26:5f:60:
         24:bb:dc:82:f4:cd:37:71:81:56:48:4b:83:27:8b:e3:a3:28:
         09:60:5c:d4:36:2c:99:19:2d:ce:37:c6:a7:a2:5e:bc:17:be:
         9e:96:af:e2:01:56:d1:90:3f:ab:91:ef:10:b7:a1:c9:ff:96:
         14:ae:b8:98:e1:77:69:e9:4c:6b:79:38:f2:dc:07:cb:5b:78:
         49:95:21:85:69:8a:e1:36:ad:78:47:a7:5d:14:1c:19:1d:24:
         26:97:7d:4e:3f:c9:25:7d:41:9f:20:f6:9c:d8:e2:6c:b2:3e:
         fc:2a:88:1b:c9:fe:f1:57:3b:a5:f8:13:25:a7:bf:9b:ea:a9:
         81:96:80:6f:5a:c1:fb:b1:bd:a3:e6:13:80:70:30:92:f2:15:
         8d:63:f4:97:9f:d7:b0:da:05:cd:21:a5:9c:9c:39:db:3d:ef:
         23:62:ae:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 15 07:03:40 2026 by rpki-client