This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131392e302f32342d3234203d3e20323135343337.roa
File:                     39332e39352e3131392e302f32342d3234203d3e20323135343337.roa (raw, json)
Hash identifier:          fzZO0LU0Zg6LT5tIVAqNcA3S+CyddC4kIOBWwsfw5Ho=
Subject key identifier:   EB:D4:AF:E1:09:44:9C:40:FF:98:C4:9E:B0:E5:E4:40:A5:C7:14:8A
Certificate issuer:       /CN=b172548fa3c460e26cb519ee524361bca6c7132e
Certificate serial:       6B11A558DFDF29AB6D609DDA066FA79F8BB7EEF1
Authority key identifier: B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131392e302f32342d3234203d3e20323135343337.roa
Signing time:             Fri 26 Dec 2025 17:55:32 +0000
ROA not before:           Fri 26 Dec 2025 17:50:32 +0000
ROA not after:            Fri 25 Dec 2026 17:55:32 +0000
asID:                     215437
IP address blocks:        93.95.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 21:16:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:11:a5:58:df:df:29:ab:6d:60:9d:da:06:6f:a7:9f:8b:b7:ee:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b172548fa3c460e26cb519ee524361bca6c7132e
        Validity
            Not Before: Dec 26 17:50:32 2025 GMT
            Not After : Dec 25 17:55:32 2026 GMT
        Subject: CN=EBD4AFE109449C40FF98C49EB0E5E440A5C7148A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:73:e0:4b:f7:fb:f7:aa:b8:b2:3f:74:4b:00:
                    4e:7e:0c:d2:e2:27:b6:e3:cb:cb:b3:14:af:56:9c:
                    1a:66:0d:db:eb:78:07:eb:df:d8:e7:83:24:51:af:
                    f8:6a:26:0a:6a:49:21:8a:f5:a4:1e:30:12:ab:e8:
                    e3:4c:5e:2c:c3:8b:ae:08:47:65:ea:28:25:d4:3c:
                    d1:a7:92:be:03:2c:65:9c:42:fd:1f:7e:87:28:5a:
                    79:33:7e:75:dc:4b:8e:44:39:74:4d:df:e6:0d:55:
                    6b:36:25:fa:5c:ac:75:98:21:86:fc:7b:9d:81:1d:
                    c5:81:9c:0b:f7:f6:fe:84:13:73:f0:cd:09:17:eb:
                    ce:06:40:f3:c0:ce:65:10:55:4b:77:be:a4:91:05:
                    7e:33:2f:c3:02:5b:51:41:e7:cd:7d:d0:2b:47:55:
                    15:ce:d7:af:79:f3:55:f8:be:6c:d1:e7:79:ea:e0:
                    d3:c2:d7:5b:59:c5:89:06:7a:7d:5c:0c:e4:f4:d6:
                    5f:84:bf:4c:7d:cc:84:1d:d4:87:27:e6:03:e0:86:
                    f4:8c:0f:e8:b6:c0:e8:49:6f:66:a3:93:d2:4c:53:
                    cd:a8:38:48:a7:68:cb:59:96:0b:9b:c2:a6:89:32:
                    62:9f:59:85:d8:34:66:25:cc:e1:56:62:38:0d:08:
                    c6:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:D4:AF:E1:09:44:9C:40:FF:98:C4:9E:B0:E5:E4:40:A5:C7:14:8A
            X509v3 Authority Key Identifier:
                keyid:B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131392e302f32342d3234203d3e20323135343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.95.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:b3:0f:94:87:15:4f:60:8c:48:27:11:20:8d:14:ff:83:8c:
         72:d0:83:ed:76:16:70:68:de:75:4d:3c:84:0b:ca:c8:19:b6:
         3b:22:11:73:01:52:59:8f:c6:2c:43:55:a9:1b:24:1b:12:3e:
         fb:1f:88:7f:c4:78:9b:88:e2:5a:38:a9:34:b6:13:63:11:7a:
         de:35:42:16:ce:93:6f:23:0e:58:ff:56:cd:75:24:6d:d2:bf:
         6d:43:a5:8b:e1:39:52:01:45:41:2f:57:80:81:ec:e8:08:c3:
         3e:2b:dd:60:25:ab:15:b5:40:1a:27:a7:15:50:d5:7e:66:04:
         bd:cb:f9:3e:b2:a0:bc:d8:c8:5f:0f:d2:e2:94:13:bb:be:fa:
         12:05:f1:da:b2:fa:fb:a7:f7:71:af:41:27:d2:16:9d:c5:27:
         1d:dd:2b:10:ea:ec:16:e9:76:f7:aa:50:aa:bc:f9:8f:d2:c1:
         80:a9:27:d5:1b:d2:9d:67:79:ea:16:a2:e3:ef:8a:94:3c:2d:
         1b:81:7c:1e:dd:15:8e:5c:c7:1e:2e:d0:0e:10:d3:fb:74:b1:
         00:76:30:c7:72:5e:a6:3c:3a:c9:b9:86:45:d8:e8:55:9e:a6:
         68:47:a8:f2:26:19:23:8e:13:73:7c:1f:ad:da:7e:79:6e:c0:
         30:39:48:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:33:24 2026 by rpki-client