This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/352e3138322e33342e302f32342d3234203d3e20323136313939.roa
File:                     352e3138322e33342e302f32342d3234203d3e20323136313939.roa (raw, json)
Hash identifier:          sE45z/JemJ8w3308Jrt/GVsOjDihXqkEGeGPumyof4M=
Subject key identifier:   6B:96:A9:D4:40:50:E7:CD:15:62:F8:BE:10:25:66:54:CC:98:FD:07
Certificate issuer:       /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial:       36C8B49750436132A2573FAAC20CAE0FA265C58A
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/352e3138322e33342e302f32342d3234203d3e20323136313939.roa
Signing time:             Mon 17 Nov 2025 14:34:06 +0000
ROA not before:           Mon 17 Nov 2025 14:29:06 +0000
ROA not after:            Mon 16 Nov 2026 14:34:06 +0000
asID:                     216199
IP address blocks:        5.182.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 05:02:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:c8:b4:97:50:43:61:32:a2:57:3f:aa:c2:0c:ae:0f:a2:65:c5:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
        Validity
            Not Before: Nov 17 14:29:06 2025 GMT
            Not After : Nov 16 14:34:06 2026 GMT
        Subject: CN=6B96A9D44050E7CD1562F8BE10256654CC98FD07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:41:0e:cb:73:12:2c:27:e5:72:13:13:5a:ce:
                    c3:89:89:0d:af:3b:e3:65:1d:5c:d3:90:65:34:14:
                    20:04:46:f9:2d:3b:f7:ef:c5:60:a2:b0:fd:2c:f0:
                    88:90:58:1e:93:26:64:23:da:30:0a:b5:ef:60:6d:
                    ca:38:34:b8:36:5f:76:7a:b7:d7:7c:f8:a4:67:d1:
                    18:bc:2d:35:f6:94:9d:87:64:86:fe:d4:b3:d3:17:
                    0e:64:e6:d9:06:fb:a5:53:c4:cf:1b:fc:ff:3b:d8:
                    17:e3:c3:7b:16:9b:d8:56:27:1a:84:23:75:c4:93:
                    85:7a:0b:27:50:6e:9e:8d:b1:2d:ec:72:8b:3e:8a:
                    4a:17:52:4f:86:c6:ea:9f:5a:43:a9:55:85:13:c5:
                    3c:75:95:57:96:9b:eb:5c:c7:a5:7b:4d:31:dd:a0:
                    4a:c2:e8:b0:73:19:94:cd:df:36:a9:06:5c:00:ef:
                    ec:79:00:9e:0b:0d:a8:88:ba:2f:cc:3d:c4:51:5b:
                    3b:4f:2f:bf:f1:05:92:e3:76:22:be:b4:df:3e:78:
                    18:42:91:55:3f:df:e6:a2:06:e0:23:7c:26:3e:dd:
                    49:bb:cd:a7:bd:25:00:eb:1a:6c:bf:bc:52:7b:e5:
                    1b:e5:ed:b7:f8:43:86:9d:a5:d3:f5:8c:1c:d6:2d:
                    6a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:96:A9:D4:40:50:E7:CD:15:62:F8:BE:10:25:66:54:CC:98:FD:07
            X509v3 Authority Key Identifier:
                keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/352e3138322e33342e302f32342d3234203d3e20323136313939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.182.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:fa:78:22:f3:9f:3f:1b:00:4f:90:2a:b3:67:a3:1c:7e:1a:
         03:8f:08:28:44:35:a3:3f:1f:92:42:93:86:7c:47:14:9d:c2:
         e6:dd:9d:62:31:e8:d5:ed:b4:0a:a6:f4:65:8e:f0:5d:10:fe:
         5e:2d:53:19:82:64:09:80:55:70:b8:33:ed:9b:d9:2e:71:90:
         3a:20:9c:a2:ac:5e:86:35:30:bb:31:2e:4e:d5:67:6e:a3:63:
         98:8e:e1:25:d6:90:3d:22:e9:85:e7:f2:48:31:ac:52:d4:85:
         0a:e2:37:29:f6:e7:d0:b3:08:06:22:68:5a:a2:6b:2e:91:9e:
         4b:85:9e:c5:18:c7:46:67:87:af:5b:f9:34:18:d4:73:02:2a:
         bd:f7:37:c6:06:05:50:c4:85:c2:78:3f:6f:40:9c:6c:7d:25:
         aa:94:2c:2f:4c:31:5b:67:d7:4f:6b:80:ab:63:2f:25:94:13:
         70:d6:3b:82:af:c1:26:b2:89:6c:9c:56:64:6b:94:87:d3:44:
         bf:ee:cb:22:d2:00:53:85:83:11:b5:f3:1b:34:83:04:18:3f:
         f0:23:a9:18:53:83:49:ac:6e:f5:35:c9:f1:23:49:bf:93:df:
         29:57:b8:61:a7:e2:0c:bc:41:f2:05:13:3d:85:f8:18:7c:14:
         aa:be:e5:9f
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUNsi0l1BDYTKiVz+qwgyuD6JlxYowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDg4NDY5ZDFhMzMwODVmZjg4YjNlNTk5ZDIyM2NhNzRj
MjMxM2EzYTAeFw0yNTExMTcxNDI5MDZaFw0yNjExMTYxNDM0MDZaMDMxMTAvBgNV
BAMTKDZCOTZBOUQ0NDA1MEU3Q0QxNTYyRjhCRTEwMjU2NjU0Q0M5OEZEMDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtQQ7LcxIsJ+VyExNazsOJiQ2v
O+NlHVzTkGU0FCAERvktO/fvxWCisP0s8IiQWB6TJmQj2jAKte9gbco4NLg2X3Z6
t9d8+KRn0Ri8LTX2lJ2HZIb+1LPTFw5k5tkG+6VTxM8b/P872Bfjw3sWm9hWJxqE
I3XEk4V6CydQbp6NsS3scos+ikoXUk+GxuqfWkOpVYUTxTx1lVeWm+tcx6V7TTHd
oErC6LBzGZTN3zapBlwA7+x5AJ4LDaiIui/MPcRRWztPL7/xBZLjdiK+tN8+eBhC
kVU/3+aiBuAjfCY+3Um7zae9JQDrGmy/vFJ75Rvl7bf4Q4adpdP1jBzWLWqlAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUa5ap1EBQ580VYvi+ECVmVMyY/QcwHwYDVR0j
BBgwFoAUCIRp0aMwhf+Is+WZ0iPKdMIxOjowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzUvMDg4NDY5RDFBMzMwODVGRjg4QjNFNTk5RDIyM0NBNzRDMjMxM0EzQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NJUnAwYU13aGYtSXMtV1owaVBLZE1J
eE9qby5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzUvMzUyZTMxMzgzMjJlMzMzNDJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzNjMxMzkzOS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAAW2
IjANBgkqhkiG9w0BAQsFAAOCAQEArfp4IvOfPxsAT5Aqs2ejHH4aA48IKEQ1oz8f
kkKThnxHFJ3C5t2dYjHo1e20Cqb0ZY7wXRD+Xi1TGYJkCYBVcLgz7ZvZLnGQOiCc
oqxehjUwuzEuTtVnbqNjmI7hJdaQPSLphefySDGsUtSFCuI3Kfbn0LMIBiJoWqJr
LpGeS4WexRjHRmeHr1v5NBjUcwIqvfc3xgYFUMSFwng/b0CcbH0lqpQsL0wxW2fX
T2uAq2MvJZQTcNY7gq/BJrKJbJxWZGuUh9NEv+7LItIAU4WDEbXzGzSDBBg/8COp
GFODSaxu9TXJ8SNJv5PfKVe4YafiDLxB8gUTPYX4GHwUqr7lnw==
-----END CERTIFICATE-----
Generated at Fri Dec 5 13:06:50 2025 by rpki-client