This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3137302e302f32342d3234203d3e20323035383836.roa
File:                     3134352e37392e3137302e302f32342d3234203d3e20323035383836.roa (raw, json)
Hash identifier:          1GJTU5EArzFWHVhhiUmpDWG2fOgSiR08omiyywpB5h0=
Subject key identifier:   8C:C8:A9:3C:73:64:A1:5F:6D:5C:12:65:CF:76:5E:50:53:DE:F1:12
Certificate issuer:       /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial:       69ECDB46AACB345597EBE4694954B7F252BA6C4C
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3137302e302f32342d3234203d3e20323035383836.roa
Signing time:             Thu 13 Nov 2025 18:06:57 +0000
ROA not before:           Thu 13 Nov 2025 18:01:57 +0000
ROA not after:            Thu 12 Nov 2026 18:06:57 +0000
asID:                     205886
IP address blocks:        145.79.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Dec 2025 21:22:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:ec:db:46:aa:cb:34:55:97:eb:e4:69:49:54:b7:f2:52:ba:6c:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
        Validity
            Not Before: Nov 13 18:01:57 2025 GMT
            Not After : Nov 12 18:06:57 2026 GMT
        Subject: CN=8CC8A93C7364A15F6D5C1265CF765E5053DEF112
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:76:77:63:30:e1:04:e5:1c:94:1a:ec:08:6c:
                    f8:65:32:5a:c9:25:d4:d0:29:db:66:ea:30:a4:82:
                    59:60:2d:27:2e:8c:2b:6f:08:30:f4:01:81:09:ae:
                    0e:1c:6c:e4:33:cd:89:c0:19:8c:f1:79:3b:ae:61:
                    6c:36:95:1f:71:b8:07:18:67:ff:09:9b:0a:a7:3e:
                    85:bb:4b:47:b3:33:85:68:9e:3e:91:e7:21:f4:f0:
                    4d:dd:49:6d:29:7f:db:e7:e2:ae:12:1b:58:6f:02:
                    0a:0a:62:58:e7:82:5d:97:75:d3:0f:89:f0:a3:94:
                    f3:38:5b:ae:74:dc:4d:69:a4:f0:75:20:4a:8f:2d:
                    a9:6b:0b:4f:d2:aa:b0:a6:b5:d0:c7:f0:77:39:44:
                    f9:8d:6b:c5:90:de:e4:30:7c:57:14:d8:19:75:7f:
                    2c:d8:b9:40:57:1a:d7:f9:1b:02:c2:7f:cd:ca:59:
                    a2:69:83:84:3a:8c:2a:c5:d0:2d:04:ac:53:bd:c7:
                    c8:13:47:ea:31:76:e5:a0:2e:75:d5:91:5f:48:67:
                    be:e5:f7:ba:3a:39:68:5e:21:7a:c7:64:1a:e5:c3:
                    b9:ed:6b:c5:cf:96:d7:4d:9b:51:85:db:d0:43:93:
                    c4:dc:10:5a:0c:c3:1a:70:dd:97:a0:c5:ff:46:56:
                    f4:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:C8:A9:3C:73:64:A1:5F:6D:5C:12:65:CF:76:5E:50:53:DE:F1:12
            X509v3 Authority Key Identifier:
                keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3137302e302f32342d3234203d3e20323035383836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  145.79.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:d2:45:58:b8:cd:47:2c:90:53:7c:ed:9f:a9:71:80:05:f9:
         cf:ab:30:d2:ff:25:aa:4d:90:d7:cd:46:cc:5c:03:f2:f7:ff:
         a4:bf:97:d7:ba:b8:59:9d:9a:92:1c:4d:b5:06:d8:bd:bd:5f:
         55:81:50:53:77:78:4d:8f:18:44:d8:6f:92:7a:26:b2:e4:5e:
         fd:f7:72:87:d2:0a:6f:62:ce:db:a1:fb:1b:f8:86:76:1d:4d:
         da:0f:14:bb:77:77:5c:19:f3:2f:d5:d2:91:a9:49:75:9c:7b:
         21:6d:ce:f1:66:7d:cb:e0:f9:f6:22:35:e6:d9:d9:07:28:d4:
         5b:94:68:49:a7:db:59:a3:82:b2:7f:18:60:6d:94:8b:42:f0:
         0c:c6:72:97:47:f9:99:33:e7:0b:4f:3c:98:09:80:7f:95:6a:
         c2:20:96:90:b2:67:f1:c5:40:29:cb:6b:21:cc:b3:cd:57:82:
         7a:fd:b3:d4:21:2d:02:76:df:4a:f0:af:b0:07:45:cd:15:fa:
         18:e9:f3:31:3e:f2:fc:cd:22:d0:36:33:44:13:13:2c:c8:ee:
         ac:13:6e:cc:e3:bc:28:ce:e4:44:04:6c:81:85:a9:46:ee:87:
         df:8c:57:39:f7:51:79:99:40:c6:4a:21:ca:aa:0a:2c:c9:da:
         bd:76:f3:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 05:36:28 2025 by rpki-client