This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3234312e3135302e302f32342d3234203d3e20323132323338.roa
File:                     3138352e3234312e3135302e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier:          Rnvup4DrIEkJEDaUL088uFIoQOrTMifq57mBF2n93iw=
Subject key identifier:   18:75:75:7C:DE:6F:6F:2F:11:15:BC:EB:47:03:B6:B3:5C:37:D0:6A
Certificate issuer:       /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial:       61E5DB2EF662B50A5D03741968C4306231EEE207
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3234312e3135302e302f32342d3234203d3e20323132323338.roa
Signing time:             Fri 02 Jan 2026 16:51:11 +0000
ROA not before:           Fri 02 Jan 2026 16:46:11 +0000
ROA not after:            Fri 01 Jan 2027 16:51:11 +0000
asID:                     212238
IP address blocks:        185.241.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 01:05:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:e5:db:2e:f6:62:b5:0a:5d:03:74:19:68:c4:30:62:31:ee:e2:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
        Validity
            Not Before: Jan  2 16:46:11 2026 GMT
            Not After : Jan  1 16:51:11 2027 GMT
        Subject: CN=1875757CDE6F6F2F1115BCEB4703B6B35C37D06A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:0d:98:d5:e5:16:cb:4b:7a:06:61:fc:1b:d1:
                    aa:3d:53:e8:8b:03:59:fb:77:57:b3:45:c2:8c:64:
                    14:b3:c4:6f:47:dd:11:d9:4d:7a:4f:49:6d:2b:8c:
                    33:9b:cc:e0:de:36:43:38:60:15:e6:4c:1d:4b:08:
                    12:f2:3c:73:8d:72:63:97:ad:c5:bd:9a:f7:a1:07:
                    8e:7b:74:3c:75:56:9c:e0:e9:76:60:cb:e8:b9:71:
                    10:8d:85:4f:3a:1e:5f:1c:c6:9d:b9:e4:08:fa:76:
                    2a:63:3c:1e:46:53:82:32:82:bd:f5:58:9b:69:f2:
                    80:8b:81:7f:51:48:9c:d5:9b:4f:43:f8:a4:0c:20:
                    40:a9:78:e1:59:39:92:29:11:c0:d1:bb:5f:76:b9:
                    d1:a3:b6:97:aa:11:6f:5a:29:36:61:2e:63:d4:3b:
                    0c:13:b9:e3:96:b3:fc:2f:60:56:11:44:70:0f:40:
                    70:1d:30:48:93:56:27:c6:61:b9:8b:67:a3:5a:df:
                    35:df:14:d4:82:2e:20:df:15:47:2a:97:17:ee:16:
                    35:cf:a0:e8:7b:a1:3d:be:84:01:96:19:0b:5c:d8:
                    1f:ed:ac:81:50:00:3a:f0:9c:b4:bc:61:66:95:f0:
                    88:59:45:c0:7f:36:54:c2:1c:e6:52:f1:7d:5f:d2:
                    0f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:75:75:7C:DE:6F:6F:2F:11:15:BC:EB:47:03:B6:B3:5C:37:D0:6A
            X509v3 Authority Key Identifier:
                keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3234312e3135302e302f32342d3234203d3e20323132323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.241.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:5d:cb:be:88:28:d5:89:da:18:32:e1:89:fa:9f:15:52:a6:
         7f:98:cc:7d:f5:15:c8:84:82:9c:d5:49:0c:01:a4:6d:45:9d:
         6e:30:79:63:d3:7a:43:8e:47:81:1f:67:c8:74:24:cf:eb:7b:
         37:c9:a1:36:4b:4f:84:3b:48:82:e9:7f:dc:2f:64:22:25:76:
         b3:bf:8c:e2:91:2a:6d:30:5c:d7:a6:9f:43:5f:e5:aa:9f:a4:
         87:24:aa:cf:85:f9:0f:66:a6:de:d8:05:5c:27:75:31:6d:48:
         c8:4e:4c:29:1b:91:80:39:74:f6:9b:11:5e:35:8b:8e:2a:2e:
         ee:f2:18:aa:5d:43:df:8c:7a:2e:d5:98:6a:ef:e0:a5:61:07:
         20:13:bf:e8:8e:65:82:6a:c1:e2:5a:b7:4e:0a:9d:fb:09:73:
         7b:9f:5d:5c:34:ae:40:fe:16:52:d1:6a:aa:4f:b9:bb:07:69:
         f9:75:24:c2:c1:48:1b:d0:60:e2:e6:87:a7:9c:ec:b4:60:d4:
         ee:0e:d6:4c:09:0c:ba:f2:b7:ec:22:45:ee:1d:66:83:95:39:
         05:b0:59:79:84:b0:6d:62:35:1e:9b:ff:b3:ec:7a:05:33:b2:
         72:2a:a0:92:bc:32:ba:59:10:d5:0f:c1:ce:38:3b:d6:11:73:
         94:6b:0e:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 14:27:31 2026 by rpki-client