This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS29262.roa
File:                     AS29262.roa (raw, json)
Hash identifier:          zOeA3Xin2RvDQgepr20ZrSyWkSbc5/8b+kfvQGg5+zs=
Subject key identifier:   10:9F:88:8D:E8:41:6F:2B:46:56:35:60:0B:1C:58:D7:52:E1:AD:D8
Certificate issuer:       /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Certificate serial:       0C5F91155985DF489C6C846484B88C6F414614AB
Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS29262.roa
Signing time:             Fri 23 Jan 2026 16:14:38 +0000
ROA not before:           Fri 23 Jan 2026 16:09:38 +0000
ROA not after:            Fri 22 Jan 2027 16:14:38 +0000
asID:                     29262
IP address blocks:        62.182.32.0/24 maxlen: 24
                          62.182.33.0/24 maxlen: 24
                          62.182.34.0/24 maxlen: 24
                          62.182.35.0/24 maxlen: 24
                          77.241.72.0/24 maxlen: 24
                          77.241.73.0/24 maxlen: 24
                          77.241.74.0/24 maxlen: 24
                          77.241.75.0/24 maxlen: 24
                          139.28.32.0/22 maxlen: 22
                          139.28.240.0/24 maxlen: 24
                          139.28.241.0/24 maxlen: 24
                          194.169.92.0/24 maxlen: 24
                          194.169.93.0/24 maxlen: 24
                          194.169.94.0/24 maxlen: 24
                          194.169.95.0/24 maxlen: 24
                          2a02:f240::/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 04:21:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:5f:91:15:59:85:df:48:9c:6c:84:64:84:b8:8c:6f:41:46:14:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
        Validity
            Not Before: Jan 23 16:09:38 2026 GMT
            Not After : Jan 22 16:14:38 2027 GMT
        Subject: CN=109F888DE8416F2B465635600B1C58D752E1ADD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:7c:4f:42:53:36:58:73:ca:e3:de:41:4e:22:
                    95:4b:f7:b9:a8:57:de:88:15:f6:88:2b:24:c0:52:
                    eb:21:fe:fa:a3:c3:01:df:0d:c1:01:a9:50:d2:05:
                    89:0e:22:72:18:5d:15:67:1f:92:88:cf:64:d4:ba:
                    04:22:23:f8:6c:60:11:e9:a2:a7:0c:be:7f:2d:59:
                    23:0f:54:6c:e5:98:32:28:2e:d9:d6:ae:9c:a6:6e:
                    88:15:cc:6b:e5:4a:f5:3f:ff:0b:e7:7f:55:c1:97:
                    ec:55:60:0c:e3:06:29:df:9b:42:61:a4:e5:3b:b1:
                    02:dc:6a:87:46:7d:fe:1f:27:1f:bd:6e:20:60:1e:
                    41:69:4b:5d:fb:df:e4:48:de:3a:a2:5f:3b:40:a9:
                    f5:fa:ba:a1:c0:75:3b:1b:d7:6a:56:f4:90:40:98:
                    c4:a6:bc:1f:e7:12:a9:3e:19:07:68:45:bf:17:0c:
                    c3:05:b6:13:55:d1:d7:6a:1a:a1:ce:c5:60:23:1a:
                    14:99:8e:38:40:66:68:53:cd:ef:d6:16:e0:45:cf:
                    df:00:95:bf:c7:f2:d0:84:8e:36:5d:1f:86:28:07:
                    43:52:e7:88:ce:67:82:69:3b:62:22:f0:61:54:b4:
                    84:87:65:ed:f5:e8:8a:00:ed:31:0e:20:ae:01:ce:
                    46:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:9F:88:8D:E8:41:6F:2B:46:56:35:60:0B:1C:58:D7:52:E1:AD:D8
            X509v3 Authority Key Identifier:
                keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS29262.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.182.32.0/22
                  77.241.72.0/22
                  139.28.32.0/22
                  139.28.240.0/23
                  194.169.92.0/22
                IPv6:
                  2a02:f240::/29

    Signature Algorithm: sha256WithRSAEncryption
         5f:08:fa:2c:16:28:88:ef:92:b6:e5:c0:53:8c:11:ce:fe:4e:
         96:e8:ec:28:0e:a1:9b:13:f9:c2:82:b9:c6:c3:5f:7d:30:30:
         24:fe:32:30:9d:25:bf:90:01:6a:aa:37:b7:77:ea:7c:bd:b0:
         db:15:03:3b:1b:d9:08:67:a6:72:46:ce:45:01:8a:a3:0e:33:
         fe:1a:6f:8b:cb:85:2b:6c:02:8e:85:c4:fa:b0:24:d1:d9:3b:
         4e:5e:04:7b:e2:40:17:15:33:70:d7:93:25:ba:a4:f4:1f:5d:
         6a:43:7f:56:c8:c6:e3:64:12:ee:e1:5a:cb:fc:7e:4c:35:8b:
         a1:ed:e0:25:ac:fc:47:ad:54:86:ce:e3:f6:fc:d8:a4:4c:9a:
         9a:74:3d:76:a5:7c:0a:0a:97:46:31:e9:de:35:2e:6a:d3:6c:
         57:ea:93:96:71:28:5f:1e:94:bb:a0:7b:5f:15:be:59:80:d2:
         a0:da:1e:87:ba:57:e6:8b:5d:af:ef:77:9f:8f:35:59:ed:0e:
         5f:83:f7:0b:a6:95:be:2b:37:da:7a:aa:92:7a:46:d2:77:bf:
         43:d2:5f:c9:a0:36:a5:80:22:ec:1a:a6:cd:5c:d6:84:8e:cf:
         a4:4f:96:14:4b:17:a7:b7:73:15:e6:0e:88:cf:24:2c:71:a5:
         02:1b:c7:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:51:53 2026 by rpki-client