This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3136332e302f32342d3234203d3e20383334.roa
File:                     36322e38342e3136332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          lnwng7tqwnikrdDQtzgEePw6oBcTbV8btoseC4phO4k=
Subject key identifier:   EA:CE:09:2A:AB:05:61:44:D1:55:E6:EC:FD:40:37:0C:BF:1B:5E:2A
Certificate issuer:       /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial:       232686CD5679EDB3F1BD29B66DF457815FB3CA17
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3136332e302f32342d3234203d3e20383334.roa
Signing time:             Tue 25 Nov 2025 10:50:33 +0000
ROA not before:           Tue 25 Nov 2025 10:45:33 +0000
ROA not after:            Tue 24 Nov 2026 10:50:33 +0000
asID:                     834
IP address blocks:        62.84.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Dec 2025 21:22:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:26:86:cd:56:79:ed:b3:f1:bd:29:b6:6d:f4:57:81:5f:b3:ca:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
        Validity
            Not Before: Nov 25 10:45:33 2025 GMT
            Not After : Nov 24 10:50:33 2026 GMT
        Subject: CN=EACE092AAB056144D155E6ECFD40370CBF1B5E2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:4c:50:99:78:dd:0b:94:11:69:8a:13:dc:4c:
                    c7:ce:58:25:2a:25:db:fb:16:e4:bd:c6:88:4d:43:
                    cc:a6:50:c8:4f:7f:06:8a:31:57:00:28:b9:d4:8a:
                    16:8c:02:0d:2f:1e:c5:ce:cb:93:03:b1:35:1b:6e:
                    d1:75:7c:ad:ff:b2:3a:7c:27:06:2e:ef:29:3e:2f:
                    43:ca:c0:f7:b3:52:a9:12:85:5b:a4:d8:38:9b:47:
                    32:32:96:f0:8e:5d:72:7a:ab:27:ea:e2:51:fd:63:
                    87:15:4c:03:8a:64:af:5e:f2:d5:80:62:8a:9e:9f:
                    f4:3e:95:8d:7b:5b:e9:78:0a:3f:04:da:e3:dc:14:
                    7d:db:06:b3:2b:9f:08:ec:aa:17:32:f9:d1:b3:21:
                    2b:23:ec:d9:40:12:3f:7c:eb:3e:dd:9d:77:b5:7e:
                    f1:b3:aa:f4:99:64:5e:c3:7f:1b:bf:34:0a:bc:44:
                    d3:f0:9c:52:2b:41:49:8a:f9:77:dc:af:d1:04:2c:
                    bd:68:16:72:e6:c1:3a:4d:5f:80:6a:f9:76:33:11:
                    d5:d3:9d:d7:48:49:35:c6:b6:33:d2:70:3d:f7:ca:
                    09:b5:3a:0d:8c:e4:55:62:f7:bc:2b:a5:c8:04:12:
                    b2:b1:26:e1:6e:be:bf:21:59:86:bd:b4:07:2c:bf:
                    8e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:CE:09:2A:AB:05:61:44:D1:55:E6:EC:FD:40:37:0C:BF:1B:5E:2A
            X509v3 Authority Key Identifier:
                keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3136332e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.84.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:fe:04:f0:16:26:13:7d:62:e8:69:fd:a0:58:a4:df:36:5b:
         57:59:56:5d:ce:25:a6:03:e7:55:68:a1:ce:44:ee:15:44:86:
         1d:97:70:77:88:c6:9b:2c:77:ef:df:a7:c9:53:db:02:5b:4b:
         f9:b6:50:62:a7:5b:2d:df:f6:c4:90:8f:54:e6:ab:45:5d:68:
         3c:6c:6d:0d:fe:50:91:d0:1e:85:b8:4a:3b:51:46:ca:5a:80:
         42:90:b3:ab:7f:6f:ad:25:ad:43:9f:95:b4:a5:ce:f5:73:f2:
         12:d0:3f:32:1a:01:c9:0c:97:9c:48:55:60:df:31:a0:d2:38:
         fe:e8:b3:ff:5d:2c:8a:f4:f4:23:37:63:62:82:93:b1:1d:56:
         f1:28:5d:51:37:bf:65:df:b7:9f:53:37:e2:d9:91:b8:db:09:
         7a:7e:d5:5f:cb:5a:31:b6:e9:a9:26:fa:ba:9e:9e:a7:2f:1e:
         38:5d:e5:5d:fc:cb:e1:86:f0:13:dc:dc:ad:40:45:e8:02:5f:
         9a:e1:99:28:03:be:8d:fe:1d:23:e6:79:54:d4:28:82:84:0e:
         13:9b:d6:80:eb:a6:f7:76:a4:87:d4:cc:5c:b8:c0:e7:ea:41:
         de:37:13:bd:5b:5b:36:9c:63:6f:9f:1d:53:04:bd:09:9e:2f:
         d3:6c:05:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 05:36:37 2025 by rpki-client