This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e3137392e3139322e302f32342d3234203d3e20313336373837.roa
File:                     3139352e3137392e3139322e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier:          H0hH7NRtHBDV4Ozma6xFY3dy1+Pr/igQXCjAZzR0DK0=
Subject key identifier:   CC:56:79:A5:D8:A9:6C:56:ED:C6:3B:46:2A:F2:D8:74:A8:F4:A4:71
Certificate issuer:       /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial:       695E5DE47F1C33933A6600CC84528DD6BF3355B2
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e3137392e3139322e302f32342d3234203d3e20313336373837.roa
Signing time:             Mon 29 Dec 2025 09:50:59 +0000
ROA not before:           Mon 29 Dec 2025 09:45:59 +0000
ROA not after:            Mon 28 Dec 2026 09:50:59 +0000
asID:                     136787
IP address blocks:        195.179.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 01:05:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:5e:5d:e4:7f:1c:33:93:3a:66:00:cc:84:52:8d:d6:bf:33:55:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
        Validity
            Not Before: Dec 29 09:45:59 2025 GMT
            Not After : Dec 28 09:50:59 2026 GMT
        Subject: CN=CC5679A5D8A96C56EDC63B462AF2D874A8F4A471
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:2c:ff:17:a6:a1:6e:31:1f:ee:ec:89:51:03:
                    51:39:75:41:dd:80:08:55:a5:20:0e:21:c4:4e:93:
                    8e:e8:3e:37:3e:7f:d5:96:41:07:39:ce:6d:f2:f8:
                    b7:1a:cd:67:2a:2a:a3:64:00:e2:a8:86:d9:9d:6b:
                    86:17:46:1a:d5:db:13:9e:f0:19:6f:22:ae:16:8a:
                    0f:8f:70:e0:2d:9e:d0:9e:9f:0c:f3:9b:7f:81:94:
                    e6:82:1d:c1:b6:2c:20:de:ff:84:5a:31:3a:ae:a2:
                    b7:c0:0e:c9:83:bc:93:4c:06:f9:ae:b1:a2:3c:10:
                    c0:9c:72:8c:59:5c:48:fe:57:2a:27:c7:99:18:78:
                    96:66:f3:4a:81:73:67:39:58:9a:ad:cd:4f:a8:5a:
                    0c:bb:46:14:58:67:02:06:48:35:20:7d:c9:52:35:
                    98:23:15:97:80:31:c2:73:c6:65:f0:d6:72:9e:70:
                    82:7e:90:1a:7c:10:f0:ff:41:40:62:db:62:19:52:
                    ad:85:6b:22:94:3d:b5:1c:47:92:6f:41:4b:f2:47:
                    99:4a:9a:b3:29:02:87:21:6d:26:91:ec:03:3e:79:
                    3f:38:95:15:73:02:b4:bc:b5:6f:65:e6:0e:13:0d:
                    15:f8:8b:ec:af:f9:da:46:b5:9d:f0:3e:e3:61:5d:
                    5b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:56:79:A5:D8:A9:6C:56:ED:C6:3B:46:2A:F2:D8:74:A8:F4:A4:71
            X509v3 Authority Key Identifier:
                keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e3137392e3139322e302f32342d3234203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.179.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:c8:09:d9:95:dc:03:71:a7:60:a3:ba:2b:65:46:78:d4:59:
         58:e0:6f:3c:cb:00:e2:8e:ec:22:a4:e4:0e:f9:54:5d:2a:13:
         65:9c:df:c6:1f:41:7a:7a:a6:b4:36:d3:9f:31:9d:09:c4:30:
         48:f7:6c:21:dd:3f:6f:23:29:6b:5c:39:8f:3f:87:d3:1b:dc:
         6b:1e:57:af:d3:09:41:f0:be:a5:0b:3e:8f:30:30:a0:1f:8b:
         58:16:8d:00:d7:dd:e7:90:13:5c:e7:ac:5c:53:7b:a8:25:93:
         c3:61:32:a5:00:84:05:4b:80:c3:cc:44:56:2e:45:b9:80:d7:
         c2:b7:e6:70:e6:7f:fe:5f:12:22:d7:a1:f2:b1:8d:e7:a1:d5:
         7a:01:e2:3e:5d:66:b2:0a:26:29:66:29:bd:43:57:66:2c:e7:
         b9:31:39:99:04:19:52:44:9c:20:d0:36:85:d8:d4:62:8a:b5:
         65:0c:83:94:15:d0:35:91:10:56:e1:20:5f:95:5b:00:39:36:
         7a:79:18:4b:da:6d:a5:ea:b7:70:1e:42:be:7f:09:2e:44:f6:
         8d:00:f3:03:b5:5a:72:39:c9:36:1e:93:8d:12:d6:33:a3:30:
         7f:1e:1c:06:6d:fb:69:5f:75:3d:8d:9f:45:79:c4:fb:bc:13:
         98:ea:0a:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 14:27:26 2026 by rpki-client