This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e3135352e3135392e302f32342d3234203d3e203438363738.roa
File:                     34352e3135352e3135392e302f32342d3234203d3e203438363738.roa (raw, json)
Hash identifier:          u1WBAghFeZR2xUdqMEiqWOz/pelKlX54cSNJdRoIvTc=
Subject key identifier:   1B:6D:54:4C:CC:C9:13:41:43:93:CA:79:1D:4E:AF:0F:47:BA:7C:26
Certificate issuer:       /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial:       49EE1F92AED9F1974668D16F000A67ADBA799AE9
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e3135352e3135392e302f32342d3234203d3e203438363738.roa
Signing time:             Fri 07 Nov 2025 16:55:11 +0000
ROA not before:           Fri 07 Nov 2025 16:50:11 +0000
ROA not after:            Fri 06 Nov 2026 16:55:11 +0000
asID:                     48678
IP address blocks:        45.155.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 09:33:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:ee:1f:92:ae:d9:f1:97:46:68:d1:6f:00:0a:67:ad:ba:79:9a:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
        Validity
            Not Before: Nov  7 16:50:11 2025 GMT
            Not After : Nov  6 16:55:11 2026 GMT
        Subject: CN=1B6D544CCCC913414393CA791D4EAF0F47BA7C26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ed:f9:ad:80:77:cd:1c:d3:5b:55:65:66:ac:
                    e7:bc:b2:fb:f8:06:c2:59:f4:6a:da:d5:7a:94:f5:
                    17:8a:18:79:17:e8:33:b0:5f:65:f4:13:11:52:2b:
                    f5:5a:fe:4e:91:e0:cb:34:09:20:06:0e:d0:85:52:
                    bc:8a:11:68:4c:5a:59:94:39:45:d5:71:39:7d:c5:
                    6d:a1:f1:ae:82:e0:eb:70:71:06:75:a5:c3:ab:61:
                    e8:e9:f5:e0:b8:57:dc:eb:e1:f5:d3:cd:9e:cf:c6:
                    b4:c2:72:32:f9:af:0c:81:29:8d:77:d6:66:47:a6:
                    7a:da:b0:a6:d2:04:41:a9:32:dc:e7:13:6d:53:1d:
                    a7:a7:af:65:6e:bd:5c:9c:71:1f:09:09:df:31:b9:
                    4f:af:9b:58:af:db:51:fc:dd:8b:21:c2:d7:62:ad:
                    7e:f5:26:df:69:d5:4a:3f:e3:3c:33:ab:f8:42:9a:
                    4d:b3:cc:ca:ed:63:7e:55:3b:25:1a:b9:5c:b2:b1:
                    7f:4e:94:d2:7c:19:4a:10:fe:c4:57:8b:e8:86:2d:
                    fc:a7:de:01:e0:75:45:69:b5:f7:87:7b:4a:ec:5d:
                    a3:64:f7:81:c4:43:8c:e6:ae:77:9b:e2:51:42:fa:
                    4f:5e:63:b8:0d:7f:1a:0b:8a:a9:ab:ef:49:d7:14:
                    b6:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:6D:54:4C:CC:C9:13:41:43:93:CA:79:1D:4E:AF:0F:47:BA:7C:26
            X509v3 Authority Key Identifier:
                keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e3135352e3135392e302f32342d3234203d3e203438363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.155.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         da:01:bb:78:51:8d:09:05:d2:f6:89:fe:2b:cd:cb:5d:29:be:
         d2:52:07:ef:5a:da:78:dd:7d:f1:99:81:0e:36:a2:b6:ea:95:
         2c:92:b2:cd:92:e8:84:97:32:ef:27:73:37:17:9e:aa:64:7a:
         c2:cb:3a:b5:4f:68:1c:63:15:09:a1:36:dc:dd:2c:67:5e:58:
         b9:aa:0e:b9:49:8e:aa:19:fd:98:8c:34:98:3b:0d:2a:1b:72:
         ed:84:f9:26:f2:78:39:35:7b:fd:81:2c:8d:06:59:72:e0:92:
         85:85:4c:55:09:8d:10:30:82:91:bd:c8:2e:c6:4b:81:d0:bd:
         15:f9:87:aa:46:e9:4d:95:74:6c:95:27:0f:54:42:be:23:ec:
         59:df:f6:c3:6b:7b:73:67:ab:42:08:91:90:64:1c:fb:4e:80:
         89:62:ae:44:32:75:38:24:44:6f:af:6d:a2:8b:17:3b:14:57:
         4f:9a:7e:4e:a0:16:94:74:ee:7b:d5:35:df:a4:ae:46:05:49:
         42:c3:ee:9f:ff:90:15:b4:ac:f7:7e:c1:83:e5:57:7a:ea:0d:
         e9:a7:a5:de:77:46:5b:b5:9c:7a:1c:fc:7a:f2:77:0e:08:e1:
         fb:00:ed:c1:2c:8b:2e:a8:49:b1:4e:57:6e:64:64:4c:70:58:
         36:e0:81:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:09:14 2025 by rpki-client