This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS200784.roa
File:                     AS200784.roa (raw, json)
Hash identifier:          YSYzuCQDISgZdfh6L6m+mKDnEnj54ioXoH4ar5Sy0tE=
Subject key identifier:   B2:96:9A:C3:F7:2B:62:61:D1:B3:CD:E1:33:49:A4:56:79:10:93:57
Certificate issuer:       /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial:       24619217344801F2A2710662858B85ED22099E1E
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS200784.roa
Signing time:             Thu 15 Jan 2026 16:55:33 +0000
ROA not before:           Thu 15 Jan 2026 16:50:33 +0000
ROA not after:            Thu 14 Jan 2027 16:55:33 +0000
asID:                     200784
IP address blocks:        150.241.212.0/24 maxlen: 24
                          150.241.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 20:24:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:61:92:17:34:48:01:f2:a2:71:06:62:85:8b:85:ed:22:09:9e:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
        Validity
            Not Before: Jan 15 16:50:33 2026 GMT
            Not After : Jan 14 16:55:33 2027 GMT
        Subject: CN=B2969AC3F72B6261D1B3CDE13349A45679109357
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ed:86:ce:33:6f:ef:f3:38:98:dd:7d:cf:26:
                    3e:18:24:91:97:0f:26:5a:62:31:f4:53:84:13:1c:
                    b5:c2:f2:b4:20:0a:b7:e2:54:1c:93:0c:39:95:e0:
                    cd:2f:e3:f4:db:8a:2e:88:61:61:89:8e:a6:50:6c:
                    21:01:03:00:87:07:44:49:8f:48:fd:5a:b4:4b:89:
                    27:25:ed:38:f2:46:52:58:c0:6a:fe:9e:f8:3c:a2:
                    db:6a:54:76:e9:c4:87:5d:8a:6a:fc:88:a1:d6:a9:
                    fb:03:5f:6c:49:2f:8f:b1:86:41:71:76:f4:2d:3f:
                    15:c0:91:c6:5b:04:48:89:98:97:99:a3:64:80:73:
                    ef:bf:ef:61:41:da:22:68:64:a3:5d:a1:ff:7e:ad:
                    7c:f7:b6:52:70:3d:76:1b:8e:46:40:ef:dd:85:9f:
                    c9:57:73:13:91:4d:4b:c0:16:4f:f1:67:fd:9b:97:
                    23:51:f5:d5:8a:9b:41:56:18:a1:9d:0d:14:f0:bb:
                    49:e8:b4:36:f6:cc:1b:4f:62:9b:06:03:60:0c:d1:
                    1e:45:48:7a:49:93:74:32:19:d7:62:bd:d7:14:0f:
                    c7:ef:f8:2f:85:e7:46:08:8a:a8:f9:93:4d:a9:0e:
                    66:22:57:1c:b0:f3:bb:07:93:93:23:28:b5:97:1a:
                    d2:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:96:9A:C3:F7:2B:62:61:D1:B3:CD:E1:33:49:A4:56:79:10:93:57
            X509v3 Authority Key Identifier:
                keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS200784.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.241.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5d:f8:f7:2a:dc:60:94:a5:80:b2:d5:6f:30:36:f5:43:6f:d8:
         47:cb:74:bb:1c:69:32:31:48:39:4a:88:96:57:bf:53:cb:22:
         fd:30:f3:02:5e:31:00:4a:9a:7f:38:39:d8:aa:96:c7:bf:a4:
         ba:e4:70:0c:4e:04:86:37:df:74:59:de:87:65:21:a5:e3:d6:
         a3:81:09:bd:40:8d:b3:48:d2:b1:eb:f6:76:b2:b2:87:53:78:
         7e:73:30:8c:7e:22:00:39:e0:a1:3e:69:13:76:7a:75:ff:b6:
         d4:d7:c2:23:c4:da:ac:3e:d8:eb:07:93:35:2b:85:46:8a:a4:
         8c:5c:ef:b7:e4:93:d5:80:e9:7e:dc:bc:f0:31:97:61:15:8f:
         49:e4:df:88:1c:23:e4:f9:b3:ef:bf:58:7b:b6:83:30:11:2a:
         6d:ba:a7:98:ba:07:5d:73:a9:69:73:1c:af:b8:1d:8f:73:eb:
         76:2a:dc:f2:1f:cb:13:e0:25:59:d3:e8:97:c1:4f:5d:17:6a:
         40:39:cb:4f:98:62:2a:e9:25:f7:d5:07:28:0f:ed:05:67:54:
         d4:31:ab:0b:e9:7d:a6:82:73:9f:52:02:d6:8f:36:89:49:ad:
         87:5d:6b:60:b8:b1:22:19:44:d2:20:9a:59:82:fe:11:24:fc:
         e9:d0:48:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:28:57 2026 by rpki-client