This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS272696.roa
File:                     AS272696.roa (raw, json)
Hash identifier:          PDqSbebyoXIyFd1tRwNINaHttvmAYrJA23S0eEj0xmY=
Subject key identifier:   AC:3A:1E:8C:C7:20:74:6C:E1:2B:48:80:2C:ED:98:21:ED:DC:26:7E
Certificate issuer:       /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial:       01F9FE4B48D35EBDEA10839D255DCD22B1B757B1
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS272696.roa
Signing time:             Thu 06 Nov 2025 17:55:11 +0000
ROA not before:           Thu 06 Nov 2025 17:50:11 +0000
ROA not after:            Thu 05 Nov 2026 17:55:11 +0000
asID:                     272696
IP address blocks:        181.215.4.0/24 maxlen: 24
                          191.96.156.0/24 maxlen: 24
                          191.101.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 22:12:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:f9:fe:4b:48:d3:5e:bd:ea:10:83:9d:25:5d:cd:22:b1:b7:57:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
        Validity
            Not Before: Nov  6 17:50:11 2025 GMT
            Not After : Nov  5 17:55:11 2026 GMT
        Subject: CN=AC3A1E8CC720746CE12B48802CED9821EDDC267E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e4:84:99:e5:40:ad:9a:0a:e4:3d:e4:42:75:
                    37:0c:0d:96:6a:8b:ae:f4:8e:a9:35:5d:2e:cc:24:
                    6f:cd:41:dd:b1:b3:8f:71:5f:9e:9d:f5:88:1d:4e:
                    d0:2e:74:05:60:d2:7a:8f:c0:52:a8:6e:b7:12:94:
                    f4:6e:56:5f:02:bc:2c:40:7b:25:57:a7:74:e5:1a:
                    82:b7:1c:37:a3:12:67:39:39:d3:70:6e:46:63:86:
                    f5:8f:92:42:c8:50:c0:97:44:df:4a:86:bd:ff:c0:
                    ff:85:1a:29:a4:8b:86:00:83:3d:7a:4e:86:1a:98:
                    e9:0d:40:d7:38:be:8f:9a:3e:0a:75:7e:a3:61:dd:
                    1f:e3:03:a4:e0:a9:29:b4:f4:e6:0b:37:e0:36:93:
                    46:91:91:99:b9:65:8f:1b:48:f0:fc:c2:fd:b4:3d:
                    13:37:34:2b:d4:0a:fc:df:07:24:b8:3c:04:1d:13:
                    42:f7:39:45:ae:f2:96:fc:53:ce:ac:70:77:f7:b6:
                    90:45:0b:b1:cd:3b:fd:0e:47:b1:82:9a:c2:db:aa:
                    67:2c:17:d4:0f:fc:4c:92:9d:77:67:55:62:34:c3:
                    b7:5a:40:ac:0f:c4:6e:86:1b:cb:4f:ed:72:c0:58:
                    45:63:7b:4b:7a:d8:c7:78:c2:e9:d4:f2:eb:9c:57:
                    9d:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:3A:1E:8C:C7:20:74:6C:E1:2B:48:80:2C:ED:98:21:ED:DC:26:7E
            X509v3 Authority Key Identifier:
                keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS272696.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.215.4.0/24
                  191.96.156.0/24
                  191.101.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:74:6a:93:39:d5:98:bb:67:5e:e3:1e:06:13:73:67:a3:bd:
         e3:1c:14:f5:75:18:88:e1:c8:9f:73:90:3e:60:8a:cb:fd:78:
         82:0b:d3:c4:d3:12:d6:1e:2c:96:b8:92:5d:36:28:0f:34:be:
         40:41:c3:ab:7f:3d:5f:40:21:03:db:92:9f:c8:c2:d4:5a:08:
         b4:21:81:92:bc:57:50:81:f5:c9:52:78:a3:4f:c4:cd:f4:b4:
         5d:e9:a5:a0:41:9f:14:04:91:f9:1d:8b:62:63:f1:db:b1:9f:
         21:b3:92:48:d1:7c:c8:e4:5c:1c:d5:69:24:87:06:9b:f6:8a:
         cb:d0:e6:b1:9b:db:0a:6c:27:74:cb:e4:45:a7:cf:ce:95:98:
         61:25:e1:4d:dd:a8:e0:d0:68:e0:5f:ba:07:8f:97:d3:7d:7b:
         7d:bc:e0:24:96:25:8c:84:59:e9:40:ba:05:78:bf:34:57:54:
         ba:33:74:6d:a7:38:82:fe:fb:f2:71:d1:bb:3e:46:4f:1b:7d:
         e8:7e:e0:52:31:e7:c5:d3:95:fc:63:6e:19:74:46:11:50:9c:
         b6:8a:8c:19:6f:08:8b:b4:2c:09:9f:88:16:5e:3c:d3:ec:4c:
         d4:49:f0:55:ed:6a:3c:c5:2b:23:45:4a:2e:a9:4d:04:a3:a2:
         75:ca:ce:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:06:15 2025 by rpki-client