This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS147180.roa
File:                     AS147180.roa (raw, json)
Hash identifier:          PWWZ//pLAYXiwpol21s/TZskV18qrQrl1Uw5JiIRdbw=
Subject key identifier:   EB:38:5C:E5:D7:1A:BD:F8:B1:C2:DF:CE:02:B8:3B:64:AA:41:2C:FA
Certificate issuer:       /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial:       1EA7A567AC15112C65AE4DF91402EBEFB6A6153C
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS147180.roa
Signing time:             Tue 06 Jan 2026 01:00:46 +0000
ROA not before:           Tue 06 Jan 2026 00:55:46 +0000
ROA not after:            Tue 05 Jan 2027 01:00:46 +0000
asID:                     147180
IP address blocks:        2a14:7581:9f49::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 01:36:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:a7:a5:67:ac:15:11:2c:65:ae:4d:f9:14:02:eb:ef:b6:a6:15:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
        Validity
            Not Before: Jan  6 00:55:46 2026 GMT
            Not After : Jan  5 01:00:46 2027 GMT
        Subject: CN=EB385CE5D71ABDF8B1C2DFCE02B83B64AA412CFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:7f:f1:14:75:3b:a8:9a:38:9a:e7:ff:05:e0:
                    a7:a8:c3:7b:cc:d4:49:4b:dc:fa:de:dc:aa:fd:1f:
                    97:11:ee:98:00:32:93:d8:73:29:89:ad:fc:0f:b9:
                    6f:7a:a3:d4:99:8b:03:95:06:99:14:6b:b0:7f:35:
                    39:a3:00:65:e2:27:90:4d:32:18:4b:7e:08:08:65:
                    26:5e:81:9e:b7:25:f7:1e:d4:7f:89:d2:d5:cf:94:
                    85:cb:55:1b:15:9c:11:b6:87:79:ee:ab:25:5c:2d:
                    89:d4:40:f7:81:b3:2c:65:03:62:1c:3b:0f:b3:63:
                    ee:45:36:46:3a:ed:54:df:c7:b0:a1:80:19:9b:3d:
                    ca:b8:23:b2:58:d0:1d:9f:7e:46:8e:60:72:b7:8f:
                    12:14:89:2d:2b:84:e9:26:19:d0:6d:02:3b:2a:24:
                    4e:23:b1:18:43:42:3c:72:63:0f:09:f7:58:63:37:
                    3f:73:70:ee:bb:69:89:d8:d6:bf:96:fc:49:fc:1a:
                    65:cf:70:cc:6c:66:95:2a:36:6e:58:08:66:85:bb:
                    09:c7:ef:3a:58:98:f7:d1:b2:2e:1c:c9:b4:a2:4b:
                    12:2b:b9:6b:1b:70:ea:1d:21:29:dc:fd:d1:db:28:
                    b6:ea:43:3d:00:97:c7:45:a7:09:d4:6c:ec:ee:6d:
                    b1:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:38:5C:E5:D7:1A:BD:F8:B1:C2:DF:CE:02:B8:3B:64:AA:41:2C:FA
            X509v3 Authority Key Identifier:
                keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS147180.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:9f49::/48

    Signature Algorithm: sha256WithRSAEncryption
         40:4e:9a:80:07:b3:8c:04:46:cb:b1:2b:72:d5:5b:9e:f9:d3:
         74:d7:70:98:6f:2b:ae:ee:24:3b:96:28:d1:79:ce:12:11:e2:
         64:ac:0e:76:41:fc:a7:6b:4b:32:9c:4e:3c:86:90:d4:76:63:
         c9:5d:56:f2:4d:58:e2:46:cf:c8:fb:28:4e:ef:55:71:4c:22:
         16:a3:10:7b:1c:f3:2a:1f:8e:68:e0:54:89:dd:ff:db:ee:d8:
         8f:03:a1:22:07:23:c2:09:9f:8b:48:c8:af:b9:18:2c:12:fc:
         ca:be:3d:7d:c7:c2:71:62:b8:08:d1:21:bc:a5:e9:2b:c6:c6:
         c8:38:20:d3:57:43:5c:d4:f5:b0:f3:74:2d:01:be:38:49:36:
         a7:39:8b:9b:94:06:87:c9:9e:16:eb:e3:c9:83:46:4c:c2:de:
         4e:7f:2d:b7:d8:75:43:cc:9b:8e:d5:c5:5d:c1:07:35:06:e6:
         c2:21:42:30:09:c1:68:d7:e7:b4:81:bc:64:28:b9:11:87:f4:
         3e:52:36:eb:6f:91:b1:5a:13:66:3b:a7:cc:67:d5:eb:10:75:
         73:d4:1a:36:88:f4:d7:91:52:99:88:6d:d7:3e:25:71:7d:4e:
         90:dd:10:fd:84:18:27:94:7d:62:2b:14:b0:d5:56:9b:ee:81:
         a8:b4:ea:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:10:50 2026 by rpki-client