This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS30475.roa
File:                     AS30475.roa (raw, json)
Hash identifier:          W1fa5kEdbD/n7MqkVoDe9j+f4jE4D/bb+IZ85pA5Zb8=
Subject key identifier:   6C:44:DF:F7:D8:48:80:4D:C1:B6:4C:90:B9:AD:4F:75:F7:86:28:B6
Certificate issuer:       /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial:       6D610863C4A55CF2C6F4BEA020E42C5AB82588A4
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS30475.roa
Signing time:             Thu 22 Jan 2026 19:55:35 +0000
ROA not before:           Thu 22 Jan 2026 19:50:35 +0000
ROA not after:            Thu 21 Jan 2027 19:55:35 +0000
asID:                     30475
IP address blocks:        45.95.15.0/24 maxlen: 24
                          185.170.40.0/24 maxlen: 24
                          193.7.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 03:48:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:61:08:63:c4:a5:5c:f2:c6:f4:be:a0:20:e4:2c:5a:b8:25:88:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
        Validity
            Not Before: Jan 22 19:50:35 2026 GMT
            Not After : Jan 21 19:55:35 2027 GMT
        Subject: CN=6C44DFF7D848804DC1B64C90B9AD4F75F78628B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e4:f0:24:a3:29:85:05:b2:f0:49:1c:1c:0e:
                    8f:67:07:87:a2:83:0e:12:63:66:0b:ae:3c:a7:9c:
                    97:2b:d4:5e:7b:93:92:87:b9:be:5d:ce:ce:4a:2a:
                    12:da:83:2f:5e:69:99:c0:4f:54:98:14:06:9c:05:
                    b6:2d:85:55:83:e5:01:dc:d1:02:64:fe:57:95:5b:
                    2f:77:a2:27:25:03:a8:de:a3:f8:56:ba:e8:be:3a:
                    30:a1:f0:81:47:0f:c1:e1:9f:3a:94:03:55:3c:a9:
                    93:b0:eb:cd:cc:fa:0d:f1:43:8d:1e:49:34:be:1f:
                    33:41:e7:18:85:50:26:be:2f:ba:db:04:23:44:c9:
                    1a:6a:b4:3e:83:b4:43:6b:28:b3:88:f6:53:54:6c:
                    e3:f8:53:88:8a:9e:c8:d3:ab:98:c2:48:6d:bd:b5:
                    ab:95:4b:5f:65:b4:73:e3:82:e5:f0:c3:41:9f:6c:
                    b9:31:23:02:67:e6:e5:aa:96:47:ad:6f:ef:c7:7f:
                    59:92:2e:35:57:2a:c3:12:25:7f:97:71:e1:b1:33:
                    4c:e6:c4:98:fb:8d:31:cf:38:ac:f5:7a:3e:4c:00:
                    58:5a:a4:ef:a9:c4:42:04:b7:18:11:e7:1b:f2:fe:
                    fe:b4:01:2e:8d:4a:a0:28:c0:c0:3b:42:15:26:3f:
                    66:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:44:DF:F7:D8:48:80:4D:C1:B6:4C:90:B9:AD:4F:75:F7:86:28:B6
            X509v3 Authority Key Identifier:
                keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS30475.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.95.15.0/24
                  185.170.40.0/24
                  193.7.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:ab:a6:53:ae:44:46:13:75:f1:d6:c6:ba:cb:c6:00:22:de:
         b9:90:16:be:26:b1:5b:57:d1:42:76:7c:ed:25:c1:e8:0d:dc:
         30:d4:ad:38:06:0d:11:e8:e1:15:ec:c9:af:56:7b:e1:0c:11:
         fb:44:a5:44:a9:c9:2f:d8:5d:11:66:95:d4:f7:6c:13:56:6a:
         e5:58:d8:40:73:98:cd:9e:ad:12:34:ca:70:73:bc:68:58:74:
         7d:da:d4:f4:ee:8a:37:44:a7:51:8b:b3:26:98:31:ca:c1:35:
         72:a4:c5:ef:8c:92:c2:b5:ca:47:37:ce:6b:f8:a9:33:42:6b:
         c8:cd:35:7b:b7:67:6d:18:08:48:20:b6:ab:14:02:50:d3:6d:
         05:89:40:5c:32:27:0a:0d:4f:9f:9d:4f:f3:6f:0e:d7:84:1e:
         5c:d4:a3:eb:ef:b2:96:90:44:d7:6c:c5:61:ee:c6:e6:0b:3b:
         c6:fa:a1:cd:40:cf:0d:cb:7a:fc:4d:c4:10:57:a9:d5:e9:53:
         a4:67:ae:0c:21:2e:30:26:c7:a9:36:89:2d:af:2e:7f:f2:61:
         35:38:64:05:cf:40:92:2f:a5:1f:46:14:92:af:b1:da:6a:1d:
         18:1f:0b:88:8f:c8:10:4e:39:47:b2:bd:3e:e1:1e:5c:db:2a:
         c9:f1:8c:ed
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIUbWEIY8SlXPLG9L6gIOQsWrgliKQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yNjAxMjIxOTUwMzVaFw0yNzAxMjExOTU1MzVaMDMxMTAvBgNV
BAMTKDZDNDRERkY3RDg0ODgwNERDMUI2NEM5MEI5QUQ0Rjc1Rjc4NjI4QjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCX5PAkoymFBbLwSRwcDo9nB4ei
gw4SY2YLrjynnJcr1F57k5KHub5dzs5KKhLagy9eaZnAT1SYFAacBbYthVWD5QHc
0QJk/leVWy93oiclA6jeo/hWuui+OjCh8IFHD8HhnzqUA1U8qZOw683M+g3xQ40e
STS+HzNB5xiFUCa+L7rbBCNEyRpqtD6DtENrKLOI9lNUbOP4U4iKnsjTq5jCSG29
tauVS19ltHPjguXww0GfbLkxIwJn5uWqlketb+/Hf1mSLjVXKsMSJX+XceGxM0zm
xJj7jTHPOKz1ej5MAFhapO+pxEIEtxgR5xvy/v60AS6NSqAowMA7QhUmP2bJAgMB
AAGjggIVMIICETAdBgNVHQ4EFgQUbETf99hIgE3BtkyQua1PdfeGKLYwHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMzA0NzUucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBIDBAAtXw8D
BAC5qigDBADBB8gwDQYJKoZIhvcNAQELBQADggEBAIurplOuREYTdfHWxrrLxgAi
3rmQFr4msVtX0UJ2fO0lwegN3DDUrTgGDRHo4RXsya9We+EMEftEpUSpyS/YXRFm
ldT3bBNWauVY2EBzmM2erRI0ynBzvGhYdH3a1PTuijdEp1GLsyaYMcrBNXKkxe+M
ksK1ykc3zmv4qTNCa8jNNXu3Z20YCEggtqsUAlDTbQWJQFwyJwoNT5+dT/NvDteE
HlzUo+vvspaQRNdsxWHuxuYLO8b6oc1Azw3LevxNxBBXqdXpU6RnrgwhLjAmx6k2
iS2vLn/yYTU4ZAXPQJIvpR9GFJKvsdpqHRgfC4iPyBBOOUeyvT7hHlzbKsnxjO0=
-----END CERTIFICATE-----
Generated at Sun Jan 25 11:50:07 2026 by rpki-client