This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3130392e3131312e3234372e302f32342d3234203d3e2039313235.roa
File:                     3130392e3131312e3234372e302f32342d3234203d3e2039313235.roa (raw, json)
Hash identifier:          zhFnIl7Zl+HipxrHxl5YmFraln3W2yW/ZZW2hbmnow4=
Subject key identifier:   4A:BA:C6:41:EC:DE:87:0D:39:F5:F9:42:FF:21:31:5D:FF:D6:AB:C0
Certificate issuer:       /CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Certificate serial:       2DD1B5469848025746993E61791CFFF4F9D9F0A0
Authority key identifier: 4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3130392e3131312e3234372e302f32342d3234203d3e2039313235.roa
Signing time:             Tue 06 Jun 2023 09:12:26 +0000
ROA not before:           Tue 06 Jun 2023 09:07:26 +0000
ROA not after:            Tue 04 Jun 2024 09:12:26 +0000
asID:                     9125
IP address blocks:        109.111.247.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:d1:b5:46:98:48:02:57:46:99:3e:61:79:1c:ff:f4:f9:d9:f0:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
        Validity
            Not Before: Jun  6 09:07:26 2023 GMT
            Not After : Jun  4 09:12:26 2024 GMT
        Subject: CN=4ABAC641ECDE870D39F5F942FF21315DFFD6ABC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d6:c3:88:65:c1:c1:ae:38:01:4e:5e:33:9e:
                    36:da:90:18:ba:6f:0b:12:71:12:84:52:59:67:47:
                    81:47:f0:5a:d3:06:15:79:44:8b:21:f9:47:91:5c:
                    9e:9e:0c:d6:ef:2a:67:37:ce:ea:a9:de:0b:d2:2f:
                    17:e9:7c:1f:4e:64:b8:1b:64:9e:c8:b7:be:f9:93:
                    53:03:62:71:ff:f9:70:b5:6a:ab:a7:3e:10:8f:3d:
                    cf:57:6c:3f:a4:79:13:36:22:46:96:bb:4f:ad:48:
                    3d:b6:16:f2:47:bd:f4:68:ee:ce:90:cf:14:56:ba:
                    62:62:23:f2:41:77:97:7a:bb:27:fd:92:bf:19:61:
                    ba:22:8b:40:6d:51:3b:62:6c:ba:e8:2a:5a:b4:bd:
                    37:59:e2:93:cf:c2:07:18:26:97:de:91:8b:14:fe:
                    f4:1c:35:d3:d3:28:a7:2b:f3:52:95:c6:42:cd:a8:
                    ca:ff:20:56:f4:67:e8:00:77:d6:84:3e:86:3e:b6:
                    d8:83:31:2b:f7:7c:49:16:a6:3b:1f:d3:f2:d7:89:
                    94:85:6e:d9:4c:4f:4c:39:6f:52:19:eb:4b:c3:ca:
                    33:ac:37:05:f2:24:98:a4:98:9d:4f:d3:9e:b4:79:
                    5e:4a:2c:46:48:43:2d:4f:6a:c8:85:fd:16:00:a4:
                    de:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:BA:C6:41:EC:DE:87:0D:39:F5:F9:42:FF:21:31:5D:FF:D6:AB:C0
            X509v3 Authority Key Identifier:
                keyid:4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/4F9948D82C74F5B80667B4A37394C8A56B7FE484.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3130392e3131312e3234372e302f32342d3234203d3e2039313235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.111.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:55:a1:f8:ee:c7:01:9c:85:07:81:56:91:53:7c:0f:50:de:
         ac:44:0e:9c:6f:8f:de:7e:7c:64:3a:c1:5a:00:1e:71:90:1a:
         d1:4e:1e:b2:29:be:3d:0c:a6:2f:ad:b1:1a:bd:34:23:ca:e3:
         10:74:79:00:53:bf:fe:b0:d4:a8:4a:9c:de:e9:21:b6:83:7b:
         65:0d:cf:3e:2a:94:49:15:fa:ab:e1:89:de:12:0e:49:bb:d4:
         c8:c2:e0:f4:e9:87:f2:bf:f9:ab:b3:d0:9d:94:92:d5:83:a4:
         d8:a7:b2:8c:75:b5:c9:f4:3c:02:7d:77:5e:29:1b:26:80:dc:
         24:1f:4b:4b:20:89:51:e5:30:6e:ca:e7:87:e4:03:c0:e4:4c:
         32:40:ec:72:d8:01:e9:38:d5:ca:2e:9b:78:1e:db:b0:25:d2:
         fe:8a:33:c6:6f:42:45:f3:b0:78:a3:34:af:9e:3c:55:d4:8e:
         9b:96:b5:26:df:8c:58:06:73:ee:f6:96:83:34:4f:9d:fa:30:
         6c:65:01:c6:bf:58:23:af:b7:a9:df:54:8e:98:61:7a:3b:b7:
         5a:18:bb:0d:89:37:ae:c7:d1:6a:4c:0a:a8:20:7e:63:c8:6d:
         86:6f:76:d3:49:37:4f:bb:19:f4:75:1c:2d:f2:0a:5f:3c:3d:
         c4:ed:fe:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 09:55:53 2025 by rpki-client