This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS273864.roa
File:                     AS273864.roa (raw, json)
Hash identifier:          8vcb85rwxda6xjX4ckDH8K/Mg0TtLzqGpXkx2GCypR0=
Subject key identifier:   DA:69:78:B6:E8:25:6E:DB:44:7F:07:33:28:68:1A:5D:FB:FC:EB:B9
Certificate issuer:       /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial:       4DF1022D55AC8FE58657F802D6D5E5A88C57CC95
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS273864.roa
Signing time:             Thu 22 Jan 2026 19:25:13 +0000
ROA not before:           Thu 22 Jan 2026 19:20:13 +0000
ROA not after:            Thu 21 Jan 2027 19:25:13 +0000
asID:                     273864
IP address blocks:        167.148.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:f1:02:2d:55:ac:8f:e5:86:57:f8:02:d6:d5:e5:a8:8c:57:cc:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
        Validity
            Not Before: Jan 22 19:20:13 2026 GMT
            Not After : Jan 21 19:25:13 2027 GMT
        Subject: CN=DA6978B6E8256EDB447F073328681A5DFBFCEBB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:3c:1a:a2:ef:38:e2:4f:c8:13:0a:8b:99:3a:
                    e2:86:82:d0:d0:ff:84:95:ca:e4:a5:2f:af:82:a5:
                    09:40:3f:df:62:14:07:94:4c:8f:74:e1:f6:4b:14:
                    ed:f9:60:2a:63:0f:2b:09:1f:0c:cb:22:9a:a5:7e:
                    63:ce:91:b5:df:94:d0:0e:ba:25:ab:73:1d:ad:3c:
                    6d:9c:1f:9d:71:b5:64:5e:2f:ad:97:e9:c1:ec:e7:
                    f5:a0:0d:60:7c:6e:5c:d5:89:d6:75:e8:2c:e9:71:
                    9f:a6:cc:8d:43:98:e8:fa:24:0c:d3:0b:e8:48:4d:
                    f7:cc:c4:c0:fb:17:7a:27:e6:39:85:5f:34:02:60:
                    73:13:38:59:4c:04:f5:2a:56:67:83:10:8d:f6:93:
                    4d:af:46:85:40:e2:4f:c1:2a:6a:1f:57:9c:7f:1a:
                    c7:dd:1f:5d:82:45:15:49:35:5d:61:e4:72:66:87:
                    2d:65:25:98:93:af:53:fe:d0:6f:32:33:8f:05:66:
                    88:11:25:32:74:9f:a5:e9:52:d6:61:4e:36:12:45:
                    b7:27:46:5f:bb:5c:99:0a:de:5a:12:01:27:97:d1:
                    d4:b3:6f:e6:27:06:42:0c:1c:ca:e4:7e:27:c0:49:
                    77:78:38:5a:e1:1d:02:6e:c4:25:fa:13:40:fc:18:
                    36:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:69:78:B6:E8:25:6E:DB:44:7F:07:33:28:68:1A:5D:FB:FC:EB:B9
            X509v3 Authority Key Identifier:
                keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS273864.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.148.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:c2:b5:8b:11:85:77:76:68:58:81:82:5d:14:ba:4b:a1:87:
         66:26:de:7f:e7:3e:d3:31:7d:29:4e:99:c8:34:0c:26:78:01:
         f7:20:57:03:af:65:e4:c7:e0:45:ad:77:61:fd:f6:61:ab:d6:
         2c:09:2b:bf:94:50:c4:52:64:ca:30:69:22:b9:6f:45:69:4f:
         39:82:7c:7b:71:23:34:ad:25:63:da:5a:ca:a7:44:b5:66:88:
         49:f5:5a:0f:94:24:d8:01:4b:bd:97:4d:3a:20:08:0a:d4:a7:
         db:34:18:4e:1f:d8:17:05:a7:84:77:73:10:ff:47:21:42:c8:
         a4:6e:3e:6a:05:a6:eb:26:03:c9:8f:3b:87:dc:7a:1b:63:a8:
         81:1d:df:da:e4:87:1a:7b:2b:7b:5b:82:62:fe:e3:ae:26:62:
         ca:3a:7b:98:dd:08:76:35:f5:95:42:4f:18:5b:82:8c:8e:f7:
         cc:9e:37:5d:07:49:56:6e:ac:16:62:d7:2a:ea:0d:c9:b2:84:
         1d:57:34:16:5f:3d:d9:2c:b6:f8:16:a3:d4:85:08:cc:d5:37:
         07:f5:bc:a5:d9:8e:56:b7:a4:79:a0:95:f8:3d:0e:4d:23:30:
         8c:75:cf:5c:18:8d:ae:75:4b:fe:84:96:3a:79:87:8b:41:51:
         63:b7:80:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:10:20 2026 by rpki-client