This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3137382e3235342e3136302e302f32332d3233203d3e203238393634.roa
File:                     3137382e3235342e3136302e302f32332d3233203d3e203238393634.roa (raw, json)
Hash identifier:          bgnads0nDdbpXk19t/6587oTSNp8+ZGq4xj9/Tktscc=
Subject key identifier:   5A:9D:0D:22:08:94:36:90:DB:6B:AE:04:75:E4:59:71:3F:38:5D:A9
Certificate issuer:       /CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Certificate serial:       16918D476B30A6F718896CEF766B99E2B3886261
Authority key identifier: 4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3137382e3235342e3136302e302f32332d3233203d3e203238393634.roa
Signing time:             Tue 06 Jun 2023 09:15:35 +0000
ROA not before:           Tue 06 Jun 2023 09:10:35 +0000
ROA not after:            Tue 04 Jun 2024 09:15:35 +0000
asID:                     28964
IP address blocks:        178.254.160.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:91:8d:47:6b:30:a6:f7:18:89:6c:ef:76:6b:99:e2:b3:88:62:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
        Validity
            Not Before: Jun  6 09:10:35 2023 GMT
            Not After : Jun  4 09:15:35 2024 GMT
        Subject: CN=5A9D0D2208943690DB6BAE0475E459713F385DA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:35:45:aa:ec:66:86:df:d9:22:0c:ca:7c:99:
                    de:eb:e5:1e:40:f5:cc:23:b2:7f:32:65:e8:88:c3:
                    b9:38:2a:2c:ee:b5:b6:01:28:a1:6c:be:a6:a0:4f:
                    03:e9:7e:48:8d:d1:22:5c:ac:74:bb:d9:d5:8f:1d:
                    1c:1d:b1:8c:32:09:27:67:27:a2:ed:3f:bf:5c:da:
                    80:4b:b4:b9:1d:43:93:62:35:34:eb:6f:ce:40:a2:
                    06:5b:33:48:39:2c:2e:97:6e:97:73:d4:37:5d:fd:
                    d0:ee:e2:a5:32:41:c3:19:da:d7:f9:3f:3e:f5:d2:
                    b3:72:a3:05:b1:73:cb:91:50:b0:c7:2d:a9:85:2f:
                    70:0e:be:49:2c:60:b1:21:a5:6f:01:f4:36:88:cb:
                    6f:37:e1:a0:5f:70:bc:63:6f:57:84:37:fa:57:e7:
                    c3:ab:ca:59:7f:5d:70:22:5b:17:ca:93:75:8c:88:
                    fd:9d:88:65:0d:68:2a:f9:6b:b4:0b:d7:15:d1:0a:
                    41:f9:8e:35:67:b8:07:d6:a3:1e:6f:7b:8e:c6:e0:
                    be:aa:d8:8c:46:4a:ce:fe:a1:06:dd:71:32:f1:48:
                    82:6c:60:8f:77:19:00:a1:05:95:53:80:37:65:dc:
                    ba:3a:75:5d:99:19:1f:3d:7a:75:a4:31:0f:4a:f9:
                    68:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:9D:0D:22:08:94:36:90:DB:6B:AE:04:75:E4:59:71:3F:38:5D:A9
            X509v3 Authority Key Identifier:
                keyid:4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/4F9948D82C74F5B80667B4A37394C8A56B7FE484.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3137382e3235342e3136302e302f32332d3233203d3e203238393634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.254.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         77:3c:7b:9c:5c:13:45:57:2e:48:a0:ea:dd:29:a2:00:6f:b0:
         8b:02:e0:6f:97:ee:2b:77:1f:ca:db:2d:3f:0b:c4:25:03:35:
         f4:04:c9:a9:ce:24:46:e5:03:eb:62:0a:fc:26:3d:1e:22:e8:
         dd:fb:b4:c1:ff:f0:51:fd:52:e6:98:53:a5:10:11:e4:d2:59:
         cb:a6:3e:ec:c6:33:70:8a:b3:92:a4:84:75:52:28:5d:40:bd:
         b4:52:1c:fd:b4:6c:6b:c6:85:20:49:8c:9d:b1:d2:dc:d2:fa:
         88:eb:03:07:70:b7:32:ef:7e:d4:94:09:f6:9a:84:b6:4f:ad:
         6f:06:a3:ce:ce:d7:0e:b9:af:b8:24:97:59:3c:3e:46:d4:f2:
         d6:c4:70:49:40:a8:e7:72:9a:76:fd:67:44:8b:88:1c:b5:62:
         25:bd:7c:54:90:10:e1:9c:cc:b9:87:1a:2f:9c:50:37:28:83:
         d5:5c:87:86:ce:58:f1:98:59:cd:d6:9e:59:d7:3d:d1:69:f8:
         3c:54:bb:6c:90:20:f0:8f:b6:90:f8:63:41:61:7e:ba:1a:b7:
         f4:89:e2:ed:12:40:1a:f4:de:29:91:e9:5b:6b:86:07:76:ed:
         a4:5a:6e:49:98:2b:8e:ed:19:42:0b:06:7b:b2:ad:d8:0a:4c:
         3a:64:9f:c9
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUFpGNR2swpvcYiWzvdmuZ4rOIYmEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGY5OTQ4ZDgyYzc0ZjViODA2NjdiNGEzNzM5NGM4YTU2
YjdmZTQ4NDAeFw0yMzA2MDYwOTEwMzVaFw0yNDA2MDQwOTE1MzVaMDMxMTAvBgNV
BAMTKDVBOUQwRDIyMDg5NDM2OTBEQjZCQUUwNDc1RTQ1OTcxM0YzODVEQTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChNUWq7GaG39kiDMp8md7r5R5A
9cwjsn8yZeiIw7k4KizutbYBKKFsvqagTwPpfkiN0SJcrHS72dWPHRwdsYwyCSdn
J6LtP79c2oBLtLkdQ5NiNTTrb85AogZbM0g5LC6Xbpdz1Ddd/dDu4qUyQcMZ2tf5
Pz710rNyowWxc8uRULDHLamFL3AOvkksYLEhpW8B9DaIy2834aBfcLxjb1eEN/pX
58Oryll/XXAiWxfKk3WMiP2diGUNaCr5a7QL1xXRCkH5jjVnuAfWox5ve47G4L6q
2IxGSs7+oQbdcTLxSIJsYI93GQChBZVTgDdl3Lo6dV2ZGR89enWkMQ9K+WidAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUWp0NIgiUNpDba64EdeRZcT84XakwHwYDVR0j
BBgwFoAUT5lI2Cx09bgGZ7Sjc5TIpWt/5IQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDU1NmY0MTYtYWFkNi00MWJmLWFlYmYtODBhMmNjNjdh
NDY2LzAvNEY5OTQ4RDgyQzc0RjVCODA2NjdCNEEzNzM5NEM4QTU2QjdGRTQ4NC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q1bEkyQ3gwOWJnR1o3U2pjNVRJcFd0
XzVJUS5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNDU1NmY0MTYt
YWFkNi00MWJmLWFlYmYtODBhMmNjNjdhNDY2LzAvMzEzNzM4MmUzMjM1MzQyZTMx
MzYzMDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzgzOTM2MzQucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAGy/qAwDQYJKoZIhvcNAQELBQADggEBAHc8e5xcE0VXLkig6t0pogBvsIsC4G+X
7it3H8rbLT8LxCUDNfQEyanOJEblA+tiCvwmPR4i6N37tMH/8FH9UuaYU6UQEeTS
WcumPuzGM3CKs5KkhHVSKF1AvbRSHP20bGvGhSBJjJ2x0tzS+ojrAwdwtzLvftSU
CfaahLZPrW8Go87O1w65r7gkl1k8PkbU8tbEcElAqOdymnb9Z0SLiBy1YiW9fFSQ
EOGczLmHGi+cUDcog9Vch4bOWPGYWc3WnlnXPdFp+DxUu2yQIPCPtpD4Y0Fhfroa
t/SJ4u0SQBr03imR6Vtrhgd27aRabkmYK47tGUILBnuyrdgKTDpkn8k=
-----END CERTIFICATE-----
Generated at Wed Dec 17 18:39:30 2025 by rpki-client