This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3137382e3235342e3134352e302f32342d3234203d3e2039313235.roa
File:                     3137382e3235342e3134352e302f32342d3234203d3e2039313235.roa (raw, json)
Hash identifier:          J3lk25VDRfkGP1Xr2Mpw+uyJxfaYh6Ma+R2vf/nkPpc=
Subject key identifier:   62:2A:BE:C1:A7:60:85:71:50:7A:3E:50:08:65:C2:4D:1E:63:6C:90
Certificate issuer:       /CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Certificate serial:       0931B97607D7ECB7C59CF58F4C035DD2797E4B6E
Authority key identifier: 4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3137382e3235342e3134352e302f32342d3234203d3e2039313235.roa
Signing time:             Tue 06 Jun 2023 09:15:04 +0000
ROA not before:           Tue 06 Jun 2023 09:10:04 +0000
ROA not after:            Tue 04 Jun 2024 09:15:04 +0000
asID:                     9125
IP address blocks:        178.254.145.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:31:b9:76:07:d7:ec:b7:c5:9c:f5:8f:4c:03:5d:d2:79:7e:4b:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
        Validity
            Not Before: Jun  6 09:10:04 2023 GMT
            Not After : Jun  4 09:15:04 2024 GMT
        Subject: CN=622ABEC1A7608571507A3E500865C24D1E636C90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:05:4a:db:d9:90:2d:3c:f3:46:25:8c:13:05:
                    cb:08:40:0a:82:98:d1:56:58:fe:04:26:6a:35:43:
                    fd:01:d3:e3:92:d1:60:db:86:2f:a8:12:22:88:11:
                    b9:c4:0b:f3:e8:22:9b:60:fb:51:ec:7b:85:a3:9a:
                    ec:c1:8a:41:ca:8d:09:fc:a5:d3:de:50:95:01:66:
                    ba:7c:fa:67:0c:b2:78:5b:d7:67:e9:27:ad:c3:b8:
                    d5:4e:21:71:eb:b0:4b:bb:fa:5c:7e:b8:ed:d1:47:
                    d5:9b:b0:1e:d0:8a:16:a1:ef:23:5e:10:7a:66:68:
                    84:6b:7e:7a:2b:21:96:c6:18:28:f3:2f:46:20:57:
                    5b:e0:a7:de:5c:79:a6:63:ce:90:da:73:02:e8:18:
                    7b:a1:31:ce:71:11:c8:55:52:b8:d8:b7:be:34:13:
                    0a:00:27:ac:dc:28:4d:07:27:c0:4f:7b:f7:38:fd:
                    9b:d9:95:59:fc:8e:86:87:d1:6f:84:04:dd:a3:7c:
                    51:f6:1a:8a:a3:b1:e1:1b:41:4e:73:4c:26:74:f0:
                    24:31:5c:a6:44:03:73:9f:52:38:8a:2d:c7:f8:aa:
                    4d:3f:32:f3:a5:3b:e8:fb:23:4f:a9:4d:25:7c:cf:
                    d0:d4:28:45:94:3e:16:32:dd:43:1c:5b:5d:35:39:
                    55:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:2A:BE:C1:A7:60:85:71:50:7A:3E:50:08:65:C2:4D:1E:63:6C:90
            X509v3 Authority Key Identifier:
                keyid:4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/4F9948D82C74F5B80667B4A37394C8A56B7FE484.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3137382e3235342e3134352e302f32342d3234203d3e2039313235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.254.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:1c:b8:eb:e4:c6:08:ab:36:e3:00:be:5a:c2:3a:28:ac:2a:
         b9:a5:c2:48:1e:db:04:41:fd:e1:df:22:ab:19:4f:95:6d:44:
         81:73:fb:af:74:2f:79:ec:e1:e5:56:ce:21:ce:d6:cc:e5:d5:
         74:25:43:02:6f:5d:bd:47:6c:d2:ec:aa:81:2d:de:7d:b3:5a:
         55:32:83:af:d0:52:e3:70:97:3b:bb:73:74:48:21:87:a5:98:
         d1:e6:dd:0d:19:5b:e6:9b:a2:5f:45:a1:36:de:e8:a8:38:0d:
         23:b2:2e:24:04:31:cd:46:c8:b5:9e:68:13:8f:ec:47:ae:b8:
         5e:f3:1c:4a:7f:fa:9f:5f:33:3a:44:fa:e8:7d:f4:bd:9e:5f:
         0f:18:4e:47:dc:eb:d3:38:11:aa:6c:db:a1:7b:4f:5c:ef:9f:
         40:22:e6:07:cd:a4:45:60:2d:fe:1b:dd:87:60:a5:84:0e:ff:
         3c:e4:6b:9d:4a:2c:e2:23:b1:61:d0:1f:0c:5a:cc:38:c9:90:
         4a:6f:ac:4e:1f:43:9a:4a:12:58:14:1e:af:0f:95:50:25:3a:
         3d:0a:1e:49:75:2f:c7:b8:fa:a5:aa:0f:a6:ce:48:69:c0:56:
         68:08:a2:31:a4:93:07:4c:28:93:49:0c:8e:47:b7:c6:f6:25:
         c6:c3:34:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 11:25:50 2025 by rpki-client