This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS201780.roa
File:                     AS201780.roa (raw, json)
Hash identifier:          rqKyZuqqbIqv0lDSH7tIucn7Xafn3axoODFqL8BRjgQ=
Subject key identifier:   A0:FA:6E:02:87:57:7A:E2:85:57:A7:27:5B:BD:1E:5D:DC:58:25:79
Certificate issuer:       /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial:       6107A094A601C55C52AE03BB9BD552EBCF965EB4
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS201780.roa
Signing time:             Mon 12 Jan 2026 12:55:33 +0000
ROA not before:           Mon 12 Jan 2026 12:50:33 +0000
ROA not after:            Mon 11 Jan 2027 12:55:33 +0000
asID:                     201780
IP address blocks:        185.36.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:07:a0:94:a6:01:c5:5c:52:ae:03:bb:9b:d5:52:eb:cf:96:5e:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
        Validity
            Not Before: Jan 12 12:50:33 2026 GMT
            Not After : Jan 11 12:55:33 2027 GMT
        Subject: CN=A0FA6E0287577AE28557A7275BBD1E5DDC582579
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ca:6e:80:31:24:09:4d:2c:35:b1:87:b4:b4:
                    58:c1:58:db:33:57:3d:98:d2:64:6c:27:4a:5d:dc:
                    fc:54:8e:2a:85:1b:45:23:65:6c:1f:7c:1c:60:9d:
                    8a:61:1b:b7:af:39:59:7b:bf:59:b8:bb:16:ec:ef:
                    ff:e5:2d:8f:50:aa:82:a0:a7:f0:54:2d:75:00:81:
                    58:0c:f6:ea:62:6b:f9:ab:f2:10:4d:95:a9:99:01:
                    32:ee:c6:81:2c:64:c2:fe:f1:e5:16:13:5a:5d:29:
                    9b:a6:57:47:9f:e6:f9:47:21:cf:38:d9:7d:ea:8b:
                    1e:9e:c1:6f:33:f2:6b:a9:ca:1d:40:1c:18:03:3c:
                    88:05:d4:67:02:a7:06:a4:db:33:0d:4a:09:97:fb:
                    3f:5d:dc:53:58:44:4d:7b:d4:43:29:42:47:e7:8a:
                    12:04:35:e3:26:e3:c1:c8:88:97:f6:22:90:bb:f0:
                    c0:3e:bb:3c:78:cd:87:cc:49:58:77:45:d7:3c:82:
                    81:99:97:86:cf:e0:55:5d:c1:aa:aa:5c:10:6d:7c:
                    3d:07:8a:3b:85:9d:ad:cf:6b:59:bd:f2:70:20:33:
                    37:d0:eb:30:e7:63:b1:aa:a4:00:d1:b7:4a:42:c4:
                    ab:f7:94:3b:a9:63:e3:b7:cb:0f:b2:ba:73:3a:55:
                    d7:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:FA:6E:02:87:57:7A:E2:85:57:A7:27:5B:BD:1E:5D:DC:58:25:79
            X509v3 Authority Key Identifier:
                keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS201780.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.36.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:47:42:26:36:c3:61:e8:b8:c6:db:be:cf:7f:34:56:40:c7:
         8e:0c:09:23:c5:bf:58:31:7b:9f:58:44:3e:a8:f6:aa:eb:da:
         4b:ce:65:59:45:23:ff:7f:41:2e:85:db:07:51:d4:2c:77:a1:
         ee:b3:d1:bd:2f:59:79:36:54:f0:65:00:f4:9c:ed:f1:7c:fd:
         81:36:f4:31:5e:76:17:ad:00:5c:cb:3a:06:42:16:55:62:a6:
         35:33:74:51:a7:f9:32:8b:ef:f8:04:22:6b:42:78:f4:55:f5:
         05:55:24:53:3d:50:20:29:15:ce:01:ac:6a:24:c1:b6:2f:c5:
         bb:0c:a2:c9:d8:b9:4d:cf:91:33:37:cc:18:c7:26:03:6f:c9:
         8e:30:19:18:69:1a:e9:e7:d2:e9:46:01:1a:53:ff:fa:b8:bc:
         05:f6:a0:a4:2e:ee:dc:94:e5:8f:8d:c9:bf:6c:d5:8c:7a:2e:
         56:1a:bf:16:6c:eb:63:0e:93:35:cc:c5:7a:40:bb:24:93:7a:
         56:55:39:1f:e5:65:8d:c7:d3:b9:a0:c5:be:cb:32:37:2c:ae:
         ed:68:2e:20:8c:27:74:a8:68:75:62:0b:a0:39:ce:60:71:bb:
         85:7c:09:67:6b:5e:66:3d:d7:5a:e5:b6:84:92:80:64:c1:e6:
         bd:cd:74:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:52:33 2026 by rpki-client