This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS401776.roa
File:                     AS401776.roa (raw, json)
Hash identifier:          xn/vMHBiigSm5dSvV+ZkRuwqUx0QSyZtze5+8Fex0yg=
Subject key identifier:   E1:CC:5B:2B:0E:71:0E:DE:B1:06:3C:38:2A:25:B9:48:83:6D:ED:1C
Certificate issuer:       /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial:       6025F513BD1A7DB50A5590C14109DECF0AF34284
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS401776.roa
Signing time:             Fri 23 Jan 2026 13:28:50 +0000
ROA not before:           Fri 23 Jan 2026 13:23:50 +0000
ROA not after:            Fri 22 Jan 2027 13:28:50 +0000
asID:                     401776
IP address blocks:        46.202.32.0/24 maxlen: 24
                          46.203.81.0/24 maxlen: 24
                          92.112.56.0/24 maxlen: 24
                          92.113.208.0/24 maxlen: 24
                          92.113.209.0/24 maxlen: 24
                          92.113.213.0/24 maxlen: 24
                          95.134.143.0/24 maxlen: 24
                          95.135.164.0/24 maxlen: 24
                          95.135.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 03:44:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:25:f5:13:bd:1a:7d:b5:0a:55:90:c1:41:09:de:cf:0a:f3:42:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
        Validity
            Not Before: Jan 23 13:23:50 2026 GMT
            Not After : Jan 22 13:28:50 2027 GMT
        Subject: CN=E1CC5B2B0E710EDEB1063C382A25B948836DED1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:6f:1b:c4:12:ac:cb:3c:94:b9:cd:9b:d1:03:
                    31:0a:d7:36:a2:a8:f4:31:7c:e2:93:a8:4d:90:d2:
                    ec:26:13:73:6b:d7:20:57:b9:d2:16:95:72:52:cd:
                    aa:e8:57:f1:c2:62:2e:c4:bc:d8:8a:9e:87:c8:ed:
                    f2:ec:a7:5f:53:09:59:85:a6:ae:89:37:69:46:f6:
                    5d:32:38:74:6e:0f:bf:21:1f:b8:01:62:02:54:0c:
                    35:11:61:56:f3:d8:31:62:4e:40:e4:ae:b3:cb:3c:
                    8f:5c:45:d0:91:c8:e2:7e:ea:63:45:aa:09:42:21:
                    d3:5d:44:3c:db:37:9e:3d:81:1e:bc:19:6a:d0:d1:
                    3d:03:4e:80:6e:06:f9:e0:9b:4c:b3:c6:df:3d:de:
                    28:7d:50:fb:57:31:f7:00:b3:eb:97:3a:f4:11:0e:
                    b0:ec:83:03:90:74:54:93:47:79:e3:23:4e:15:43:
                    5b:6b:38:da:47:2f:a0:7f:50:02:07:1b:95:ac:78:
                    99:9c:0f:83:5e:d0:23:a9:8d:89:0a:53:12:83:24:
                    b6:b0:52:7a:d8:eb:cc:86:e8:92:3c:a0:ea:9c:5f:
                    72:d2:01:d4:ff:8f:0c:8c:68:53:da:f2:fe:56:5d:
                    9f:ad:57:a0:37:63:6d:80:1e:05:71:3f:bc:a4:e6:
                    b9:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:CC:5B:2B:0E:71:0E:DE:B1:06:3C:38:2A:25:B9:48:83:6D:ED:1C
            X509v3 Authority Key Identifier:
                keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS401776.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.202.32.0/24
                  46.203.81.0/24
                  92.112.56.0/24
                  92.113.208.0/23
                  92.113.213.0/24
                  95.134.143.0/24
                  95.135.164.0/24
                  95.135.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:0b:48:19:78:4f:a1:97:24:3a:49:7a:07:9a:81:13:c3:ce:
         0d:52:f3:e0:32:6f:07:dd:71:70:df:d7:89:27:1b:11:bc:e4:
         c9:d3:8d:1d:fd:40:db:f2:ce:6b:54:a6:1c:f6:85:fd:22:01:
         96:98:03:dd:cc:e8:99:0e:dd:fd:5a:3a:83:e1:4b:c0:25:ea:
         22:c3:bb:ff:87:70:4d:43:b9:ef:95:29:31:40:26:b5:62:3b:
         85:f9:ec:61:cd:be:0c:7a:02:72:52:32:29:f6:b1:0a:7b:af:
         bd:54:73:0e:7b:c1:5d:f2:41:5b:d4:8e:1f:59:cf:6b:2e:4d:
         ed:3b:96:7d:52:67:ea:e2:5d:23:84:59:46:03:52:ce:f6:92:
         56:3f:90:bc:31:27:d2:8d:5d:a8:af:38:08:15:0c:a4:02:39:
         c0:a2:b9:44:11:17:97:0f:fd:cf:42:50:41:51:97:74:48:c3:
         d2:2a:52:22:de:c8:48:4c:1c:8f:41:f9:1a:69:85:8b:6e:76:
         65:7b:cc:cf:c9:cf:95:fd:a0:ba:4c:76:68:6f:75:a8:ba:47:
         76:42:42:75:de:32:b0:4f:ff:04:c4:a6:8c:eb:ae:1e:41:e6:
         fd:78:a4:e0:6f:3a:d5:91:3d:3c:58:0d:0d:c8:f2:a6:13:56:
         de:3b:08:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:43:31 2026 by rpki-client