This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3138352e3135372e34352e302f32342d3234203d3e203238393634.roa
File:                     3138352e3135372e34352e302f32342d3234203d3e203238393634.roa (raw, json)
Hash identifier:          aXlNG828KNc73Mey1HrBQ/QMxsJ+3eLrsKUWvGSfjVc=
Subject key identifier:   6D:6E:3E:3F:7C:AB:32:8F:D3:4C:ED:A5:CF:63:00:F8:1F:D1:91:1D
Certificate issuer:       /CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Certificate serial:       1C4C0F3EECF1E5502D45786741EEF673E00E783E
Authority key identifier: 4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3138352e3135372e34352e302f32342d3234203d3e203238393634.roa
Signing time:             Tue 06 Jun 2023 09:19:57 +0000
ROA not before:           Tue 06 Jun 2023 09:14:57 +0000
ROA not after:            Tue 04 Jun 2024 09:19:57 +0000
asID:                     28964
IP address blocks:        185.157.45.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:4c:0f:3e:ec:f1:e5:50:2d:45:78:67:41:ee:f6:73:e0:0e:78:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
        Validity
            Not Before: Jun  6 09:14:57 2023 GMT
            Not After : Jun  4 09:19:57 2024 GMT
        Subject: CN=6D6E3E3F7CAB328FD34CEDA5CF6300F81FD1911D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ff:0e:dd:c5:62:db:59:8a:7f:45:09:91:a2:
                    2d:b7:ae:dc:e0:69:6d:18:80:6b:a2:ca:25:0b:34:
                    f5:be:f5:b9:1a:94:1f:62:c6:3b:23:df:50:3d:34:
                    9c:44:af:fd:e4:bf:b6:49:bb:b3:e7:65:f9:be:56:
                    28:83:87:6d:ed:4e:9a:9d:96:9e:5b:14:c0:2b:5c:
                    c8:ee:e4:a1:56:ac:86:25:bc:f7:2a:44:0e:1a:47:
                    49:68:46:f7:30:b7:02:61:6e:a0:7d:33:fa:49:c4:
                    3e:32:b5:fc:89:61:79:fd:07:ed:53:e2:a1:53:ec:
                    0a:c3:9f:08:45:f3:d3:68:f7:5d:96:ee:d5:e6:91:
                    30:5a:56:ab:20:f5:ab:84:2e:c6:dd:79:4b:74:06:
                    2c:5b:d9:bb:db:25:fa:0f:71:b2:b2:7e:f3:bc:d5:
                    2e:99:cc:81:1c:0d:60:ec:66:fe:be:af:65:a3:8c:
                    50:2c:0b:ec:8f:c4:92:e5:21:82:e6:ff:e8:53:58:
                    f7:20:e6:e7:6d:f8:83:37:d7:56:89:8c:61:d5:c2:
                    5c:6e:08:60:73:9c:01:7f:c8:06:9b:99:bd:0b:44:
                    93:ea:44:27:2b:c5:5e:b7:23:8a:12:4d:41:69:e8:
                    96:33:f2:0c:20:65:72:72:b2:dd:04:a5:22:e9:df:
                    c8:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:6E:3E:3F:7C:AB:32:8F:D3:4C:ED:A5:CF:63:00:F8:1F:D1:91:1D
            X509v3 Authority Key Identifier:
                keyid:4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/4F9948D82C74F5B80667B4A37394C8A56B7FE484.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/3138352e3135372e34352e302f32342d3234203d3e203238393634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.157.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:1c:a4:7a:51:8c:0c:e7:9b:3e:e8:97:0e:de:06:97:3b:14:
         43:b3:7f:40:f9:45:0a:4c:13:26:2d:95:55:84:20:e3:c2:53:
         2c:ba:de:e8:58:0d:de:a0:a2:5c:45:55:60:82:f9:ef:f2:db:
         3e:4c:3f:62:06:0b:2d:c0:21:f2:04:01:3c:f1:8c:23:bd:e7:
         75:41:12:70:ad:eb:22:1d:7a:ae:2f:1c:93:21:66:97:c1:af:
         ae:1b:c9:78:54:7f:63:74:d9:0c:9d:68:95:a0:26:96:75:43:
         d7:e8:c3:09:fe:51:d7:d1:43:e4:4c:d0:7e:9b:d9:d0:39:c3:
         4d:78:79:aa:5c:98:2f:d9:37:32:60:95:a5:05:87:cb:6e:f9:
         11:83:f0:f5:a1:b5:34:37:5d:26:b1:24:99:15:95:a5:53:69:
         03:e6:82:59:e2:81:2a:9c:3a:43:71:34:ec:48:c1:4b:8b:44:
         3a:e4:8f:a2:bb:7a:a5:ae:f8:0b:41:09:c8:94:c5:c3:09:a6:
         7e:db:f1:cd:cf:4c:d1:70:d9:3d:1b:d3:e7:70:d3:5f:3a:24:
         31:bd:4b:83:7f:d9:90:56:1d:b5:78:d8:ed:b7:9a:b4:86:a3:
         46:89:2b:ef:94:97:46:15:39:65:71:3c:22:98:86:15:c9:ac:
         0b:c5:ff:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 15:42:18 2025 by rpki-client