This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS36530.roa
File:                     AS36530.roa (raw, json)
Hash identifier:          c0Jn4cccmBe0NtJ6ueP9MwE5DpkTm18W75htfCCRQOg=
Subject key identifier:   5F:08:D6:B3:55:3C:0D:53:C4:7B:26:F5:1B:7C:13:E7:26:73:AF:2E
Certificate issuer:       /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial:       7EF7A8204C8EEFC598A14C2DB316613497323583
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS36530.roa
Signing time:             Mon 08 Dec 2025 13:54:43 +0000
ROA not before:           Mon 08 Dec 2025 13:49:43 +0000
ROA not after:            Mon 07 Dec 2026 13:54:43 +0000
asID:                     36530
IP address blocks:        141.11.78.0/24 maxlen: 24
                          141.11.108.0/24 maxlen: 24
                          141.11.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Dec 2025 07:18:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:f7:a8:20:4c:8e:ef:c5:98:a1:4c:2d:b3:16:61:34:97:32:35:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
        Validity
            Not Before: Dec  8 13:49:43 2025 GMT
            Not After : Dec  7 13:54:43 2026 GMT
        Subject: CN=5F08D6B3553C0D53C47B26F51B7C13E72673AF2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f7:d6:bd:55:f0:3b:91:ae:9d:91:bb:87:38:
                    6b:bf:19:11:b9:fc:63:ea:98:c6:dc:02:25:21:33:
                    51:7d:1d:34:ab:90:dc:69:aa:cd:a4:41:88:42:c5:
                    31:1f:0e:46:93:1a:1c:08:a4:95:1a:de:12:75:0e:
                    48:fb:f8:8b:c5:13:4c:70:f7:da:3a:3d:74:9f:be:
                    c8:72:6f:57:d6:e8:e2:9f:e7:96:4d:7e:5e:3d:0a:
                    1b:89:bd:e5:8a:39:10:48:08:a1:31:2d:69:31:dc:
                    2f:48:5e:7b:63:dc:46:6d:1a:8d:60:59:1b:10:45:
                    d3:a5:6d:ae:b8:03:bd:12:91:c7:63:34:ef:f4:38:
                    ac:c6:b1:d9:16:e0:aa:b4:70:40:08:b0:e8:15:22:
                    9d:9c:b8:5c:57:59:cb:5f:f7:4c:90:6d:0c:d1:49:
                    00:44:ec:67:83:77:95:76:39:94:2d:df:b5:2d:f9:
                    b8:e5:8c:22:91:c9:44:38:3d:b8:5a:c2:9c:b4:19:
                    c2:ee:0a:2d:05:6e:e1:62:1b:7c:55:f0:0f:41:94:
                    ab:79:b4:e4:a8:ba:69:d5:4e:e9:d1:51:5f:7c:f6:
                    08:71:6c:d6:e7:18:7d:28:49:91:61:5b:38:33:b4:
                    48:23:66:e6:ce:e9:bf:6f:e9:0d:58:63:98:c1:14:
                    b3:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:08:D6:B3:55:3C:0D:53:C4:7B:26:F5:1B:7C:13:E7:26:73:AF:2E
            X509v3 Authority Key Identifier:
                keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS36530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.11.78.0/24
                  141.11.108.0/24
                  141.11.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:7b:79:12:7f:25:7d:6f:e2:09:b3:47:c4:db:de:68:6c:e9:
         30:3d:e7:61:1e:96:70:0d:78:a3:73:ad:43:20:6e:df:4b:06:
         33:7a:fd:49:a7:a0:ea:8b:19:dd:43:54:b0:c7:81:4d:2e:d9:
         67:f0:69:39:f8:9e:f3:fa:58:7d:9f:30:f1:f1:93:32:e2:c4:
         ba:fe:e1:78:13:06:e8:6c:23:39:d0:15:e9:bc:e6:27:93:87:
         63:4a:c8:c4:01:0c:60:a5:d2:66:9b:02:50:1b:23:62:fc:a6:
         6d:dc:d7:33:0c:a2:4d:30:cc:c1:10:9e:f9:2f:be:09:98:a7:
         f7:20:e3:15:98:0b:62:24:4f:3e:9a:a1:38:83:4b:6b:b5:32:
         d4:ba:7e:e0:69:22:1e:b5:3a:bd:ef:52:bb:3c:f2:64:f6:49:
         3d:59:ff:e2:c4:6e:f6:17:58:16:5a:87:cf:5e:22:f3:e1:49:
         60:87:63:00:78:6c:8d:11:36:ec:7c:12:1b:71:31:de:23:af:
         e3:cb:bc:86:a9:03:20:02:c7:1a:3a:2e:a6:5a:c6:15:78:97:
         05:9b:73:50:5e:36:a3:64:a4:ee:58:2f:06:01:58:19:22:dc:
         8a:ee:e9:3d:05:0d:c6:a2:c4:f1:88:5e:49:73:81:86:3d:45:
         89:04:bb:68
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIUfveoIEyO78WYoUwtsxZhNJcyNYMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw
ODI4ZWNhOTAeFw0yNTEyMDgxMzQ5NDNaFw0yNjEyMDcxMzU0NDNaMDMxMTAvBgNV
BAMTKDVGMDhENkIzNTUzQzBENTNDNDdCMjZGNTFCN0MxM0U3MjY3M0FGMkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG99a9VfA7ka6dkbuHOGu/GRG5
/GPqmMbcAiUhM1F9HTSrkNxpqs2kQYhCxTEfDkaTGhwIpJUa3hJ1Dkj7+IvFE0xw
99o6PXSfvshyb1fW6OKf55ZNfl49ChuJveWKORBICKExLWkx3C9IXntj3EZtGo1g
WRsQRdOlba64A70SkcdjNO/0OKzGsdkW4Kq0cEAIsOgVIp2cuFxXWctf90yQbQzR
SQBE7GeDd5V2OZQt37Ut+bjljCKRyUQ4Pbhawpy0GcLuCi0FbuFiG3xV8A9BlKt5
tOSoumnVTunRUV989ghxbNbnGH0oSZFhWzgztEgjZubO6b9v6Q1YY5jBFLOPAgMB
AAGjggIVMIICETAdBgNVHQ4EFgQUXwjWs1U8DVPEeyb1G3wT5yZzry4wHwYDVR0j
BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5
ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn
bzdLay5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt
NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTMzY1MzAucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBIDBACNC04D
BACNC2wDBACNC/AwDQYJKoZIhvcNAQELBQADggEBAAF7eRJ/JX1v4gmzR8Tb3mhs
6TA952EelnANeKNzrUMgbt9LBjN6/UmnoOqLGd1DVLDHgU0u2WfwaTn4nvP6WH2f
MPHxkzLixLr+4XgTBuhsIznQFem85ieTh2NKyMQBDGCl0mabAlAbI2L8pm3c1zMM
ok0wzMEQnvkvvgmYp/cg4xWYC2IkTz6aoTiDS2u1MtS6fuBpIh61Or3vUrs88mT2
ST1Z/+LEbvYXWBZah89eIvPhSWCHYwB4bI0RNux8EhtxMd4jr+PLvIapAyACxxo6
LqZaxhV4lwWbc1BeNqNkpO5YLwYBWBki3Iru6T0FDcaixPGIXklzgYY9RYkEu2g=
-----END CERTIFICATE-----
Generated at Wed Dec 17 13:46:21 2025 by rpki-client