This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS54252.roa
File:                     AS54252.roa (raw, json)
Hash identifier:          P//v8X9Pqwk2yovxJZAMHaRSelQy4RCcjVBEdWwTnsY=
Subject key identifier:   73:78:02:19:56:99:7E:8A:9E:B5:EC:1B:C7:A4:07:F7:13:8B:C9:72
Certificate issuer:       /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial:       4134F7FE35B9965932AA18DB34BF3C0F15B24058
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS54252.roa
Signing time:             Mon 24 Nov 2025 07:55:12 +0000
ROA not before:           Mon 24 Nov 2025 07:50:12 +0000
ROA not after:            Mon 23 Nov 2026 07:55:12 +0000
asID:                     54252
IP address blocks:        147.78.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 23:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:34:f7:fe:35:b9:96:59:32:aa:18:db:34:bf:3c:0f:15:b2:40:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
        Validity
            Not Before: Nov 24 07:50:12 2025 GMT
            Not After : Nov 23 07:55:12 2026 GMT
        Subject: CN=7378021956997E8A9EB5EC1BC7A407F7138BC972
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ea:5e:e5:f9:50:56:62:4e:23:47:36:91:37:
                    e9:ee:08:a7:d2:b2:eb:2b:09:7c:35:4f:d1:18:b5:
                    65:80:d6:cc:9c:dd:ec:81:30:f2:99:c0:f0:4a:1d:
                    f2:98:b3:3b:a9:f0:70:78:ed:e7:42:bb:0a:67:5e:
                    30:ea:fb:32:a0:77:7a:ab:aa:57:b8:63:2f:b6:e7:
                    09:b6:31:f1:f2:36:1f:3e:0f:3b:a6:68:85:ec:03:
                    c3:8a:d8:e5:c4:f7:2f:9d:8d:ed:03:36:14:18:b1:
                    2b:18:2e:c9:4f:ea:62:4d:49:90:50:bf:21:cd:55:
                    64:69:97:f5:a3:83:a9:a7:09:39:95:17:16:a2:65:
                    75:32:e2:32:35:a2:46:c2:75:91:0a:4a:27:2d:09:
                    df:0e:b4:80:7e:85:3d:f3:97:fc:12:98:1f:a7:d0:
                    a0:63:04:1f:3f:ea:8a:69:e1:eb:db:6d:2d:04:e1:
                    21:6f:73:dc:f3:b3:c8:19:49:e6:fb:29:a5:59:24:
                    b1:02:3b:16:ff:ba:e9:d2:b3:ca:e0:7d:0d:37:df:
                    a1:95:0f:31:d1:55:c5:c7:fb:64:ba:32:64:68:13:
                    80:82:55:df:e0:4c:f5:95:4a:52:41:fe:fb:0e:54:
                    15:c4:8e:5b:3b:38:7f:37:52:17:21:8d:b6:16:39:
                    77:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:78:02:19:56:99:7E:8A:9E:B5:EC:1B:C7:A4:07:F7:13:8B:C9:72
            X509v3 Authority Key Identifier:
                keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS54252.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.78.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:66:88:d7:6f:2c:b5:e9:c1:d1:e0:82:c3:79:81:98:3c:a0:
         90:62:c0:0d:c6:5a:fa:4d:92:13:44:72:65:1c:68:df:8f:59:
         ea:89:9f:23:7b:20:91:87:77:5c:60:d6:e9:11:61:54:e5:07:
         76:8b:01:32:64:84:53:55:03:42:4a:72:db:20:d3:6d:fb:29:
         45:e3:6e:3e:2d:35:65:12:b9:34:0d:88:33:0f:5f:39:d6:00:
         46:da:27:33:d5:d6:dc:3a:89:11:be:ec:ee:8e:8f:68:c7:4e:
         eb:eb:6d:14:e6:35:61:e6:25:1c:4c:93:3c:f4:4f:97:10:48:
         41:c9:4c:63:71:3f:3b:0b:f6:77:12:27:29:2f:33:e9:61:86:
         7a:d1:d6:f7:3f:2c:35:14:55:18:48:3d:ce:82:ba:97:5d:20:
         b5:0d:47:5b:d0:d6:03:54:09:21:5a:87:6c:78:f0:bd:44:b5:
         95:d4:a4:06:5f:77:50:a8:bb:70:4a:67:cb:ef:ef:ee:a1:9f:
         c0:f2:51:be:be:6f:9b:b1:d7:83:a0:70:17:17:8a:5a:e1:57:
         c7:b5:67:e0:9f:76:a5:fd:a9:65:8a:ab:fa:4f:ba:f8:94:92:
         4d:8e:2c:32:6d:74:7b:95:ff:38:30:6e:48:81:76:ee:d8:eb:
         91:10:6a:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 08:41:40 2025 by rpki-client