This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS209630.roa
File:                     AS209630.roa (raw, json)
Hash identifier:          2rQ8M7BGYUS1TeyznCZ3y1u6ROiZ33lHnmaAtWyMxvU=
Subject key identifier:   2C:AB:5B:30:E2:D4:5C:C3:F3:B7:C1:D4:07:A5:EA:23:14:19:58:8B
Certificate issuer:       /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial:       5156AC480D030E161E21F6D8A3F0DF6C296EE8D0
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS209630.roa
Signing time:             Fri 23 Jan 2026 17:00:38 +0000
ROA not before:           Fri 23 Jan 2026 16:55:38 +0000
ROA not after:            Fri 22 Jan 2027 17:00:38 +0000
asID:                     209630
IP address blocks:        95.135.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 03:44:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:56:ac:48:0d:03:0e:16:1e:21:f6:d8:a3:f0:df:6c:29:6e:e8:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
        Validity
            Not Before: Jan 23 16:55:38 2026 GMT
            Not After : Jan 22 17:00:38 2027 GMT
        Subject: CN=2CAB5B30E2D45CC3F3B7C1D407A5EA231419588B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f7:e3:7e:dc:22:64:41:1a:de:e4:39:75:00:
                    b3:37:d3:93:9d:73:72:24:99:17:87:ea:31:7c:99:
                    ce:b1:40:ec:e3:b3:ac:95:92:0e:16:e5:b4:65:b7:
                    85:59:2b:a6:5a:4c:dc:1a:e4:e3:22:5b:6a:e1:90:
                    3e:97:85:17:5a:84:83:38:53:45:4f:fc:9a:6e:46:
                    09:4a:42:1e:ee:0e:46:12:b7:a2:82:9b:61:2d:90:
                    d7:26:1a:58:85:73:ad:ee:67:ce:3b:4a:00:da:7c:
                    14:b9:32:20:57:6c:f2:74:32:b9:59:cf:ed:94:d8:
                    9f:d1:4f:c6:18:99:08:cd:d1:74:14:d9:43:e2:cf:
                    18:d8:74:de:b2:a7:d9:73:d1:0d:11:6d:8e:4d:47:
                    33:51:73:88:77:77:e8:0e:84:b6:07:8f:56:c2:69:
                    09:d9:4a:68:1f:da:b6:9a:b5:4a:74:d2:3d:3c:70:
                    e7:1a:ac:6a:91:66:21:2f:0d:ec:af:a6:59:fe:62:
                    2d:8c:e7:bd:30:9f:b5:03:04:a6:4a:c7:6d:33:e0:
                    7f:20:54:c1:8d:d5:bc:f2:02:31:83:0e:31:60:37:
                    02:d7:d8:24:5b:e5:40:83:61:3b:25:cf:a0:b8:3e:
                    4f:fc:27:d8:ee:ee:c0:1b:27:c3:27:8f:f7:29:5b:
                    8f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:AB:5B:30:E2:D4:5C:C3:F3:B7:C1:D4:07:A5:EA:23:14:19:58:8B
            X509v3 Authority Key Identifier:
                keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS209630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.135.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:4b:cb:ea:2c:ad:fc:7b:70:37:b5:25:f7:7c:ec:c3:a1:f6:
         ca:e8:6e:54:0a:aa:7a:cc:1a:7c:2d:0f:59:b6:60:b4:2c:5a:
         74:72:8e:19:a8:86:3e:d0:8e:f2:6d:e7:a4:b6:62:1f:61:d5:
         0b:d9:27:eb:ee:eb:e8:78:12:cb:2b:97:65:48:6d:a8:11:e9:
         72:2c:c4:90:71:d5:ac:1f:12:16:18:44:c7:67:ff:b7:27:7b:
         25:4a:f8:f7:12:e8:c0:c6:a8:6c:58:c5:43:5e:f2:20:50:e1:
         0e:24:b0:e2:b5:c8:d8:4d:47:18:4c:8c:5f:71:4d:0c:5c:3b:
         78:e2:14:7c:8d:ce:a6:e9:50:46:af:24:03:34:e9:90:7f:22:
         11:e0:a8:67:bd:e6:db:a4:68:ed:38:60:20:10:2a:8e:42:8d:
         46:df:ab:fe:3b:fa:fc:d6:6d:50:c0:8c:50:1a:a8:25:72:47:
         8f:d3:24:49:2b:50:8f:5d:a8:0b:43:ac:4b:03:7f:85:f5:d2:
         b0:a3:f0:f7:b9:51:a6:ff:3f:6a:6e:c3:e1:cd:1d:6c:5a:66:
         6c:81:2d:d4:cd:c3:f9:ce:4e:de:43:93:ea:9d:e4:60:20:11:
         29:ba:6e:5b:90:9c:89:e2:de:b6:25:5a:72:0f:4a:83:f7:62:
         6c:ff:74:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:10:22 2026 by rpki-client