This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS53755.roa
File:                     AS53755.roa (raw, json)
Hash identifier:          X19AZFoBebvJ1XI8/V33uLW0nrSsWZOexQOU15MeW50=
Subject key identifier:   11:6F:18:1B:3E:D1:25:17:28:DE:FB:AE:42:46:B4:F2:51:0A:42:37
Certificate issuer:       /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial:       41F788376F1B6078BCB4935109CE78CDF7135621
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS53755.roa
Signing time:             Fri 23 Jan 2026 02:56:40 +0000
ROA not before:           Fri 23 Jan 2026 02:51:40 +0000
ROA not after:            Fri 22 Jan 2027 02:56:40 +0000
asID:                     53755
IP address blocks:        178.94.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:f7:88:37:6f:1b:60:78:bc:b4:93:51:09:ce:78:cd:f7:13:56:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
        Validity
            Not Before: Jan 23 02:51:40 2026 GMT
            Not After : Jan 22 02:56:40 2027 GMT
        Subject: CN=116F181B3ED1251728DEFBAE4246B4F2510A4237
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:36:cf:0d:2a:81:46:58:cf:a2:83:7b:34:6f:
                    9f:a1:5b:89:52:dc:35:39:48:7b:d2:fe:e0:a1:10:
                    ad:2a:fa:96:da:de:e6:2e:1e:02:65:e1:d6:1c:ae:
                    de:02:22:8f:34:10:27:87:36:47:93:89:ed:da:9b:
                    6e:c7:af:16:ef:a9:8f:15:11:32:e1:96:35:55:b5:
                    a5:5e:68:42:a9:01:2d:eb:b8:c4:56:73:f4:a4:a4:
                    5d:b5:5f:ab:dc:2c:7a:5a:ea:46:4b:81:9b:8f:a4:
                    fc:81:83:71:4d:51:68:84:ff:87:8d:8d:f1:24:e3:
                    40:c8:ae:da:13:75:42:8a:04:75:92:1c:39:de:7e:
                    5a:59:55:fc:0d:33:4d:b8:83:dc:a2:5e:d4:e2:0a:
                    a0:b0:98:2c:3d:90:9a:df:9b:ad:c4:33:31:b7:31:
                    d0:42:6d:2a:5a:60:00:76:74:d0:97:8a:44:77:ef:
                    26:ab:71:ed:a4:da:43:37:df:6f:ea:5b:cc:80:cd:
                    12:cf:8b:34:bc:9e:d9:b3:66:62:33:ea:36:31:c7:
                    56:f8:e3:08:68:36:26:92:78:58:85:ab:78:9a:79:
                    8c:af:f4:51:1d:5f:2c:22:31:63:52:9b:3d:55:b8:
                    8d:b3:a2:a7:96:c3:83:3a:b2:82:a7:8c:c9:12:3d:
                    c4:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:6F:18:1B:3E:D1:25:17:28:DE:FB:AE:42:46:B4:F2:51:0A:42:37
            X509v3 Authority Key Identifier:
                keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS53755.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.94.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:80:11:00:26:8b:36:9a:e6:70:b3:61:e1:f4:69:07:a7:fa:
         d0:ed:9f:8d:74:ca:57:27:8c:df:dd:eb:83:8b:e4:b7:8d:e1:
         da:de:43:04:cc:b2:79:cf:ac:da:1c:63:e4:57:69:2d:56:c7:
         04:d4:3d:df:f8:2a:5a:04:04:02:22:26:25:82:b3:f4:6b:59:
         fb:fe:15:fe:34:8d:df:19:23:87:e1:21:1f:bd:a5:28:54:cc:
         d6:d1:af:58:5a:61:7b:78:1d:a5:2b:be:9b:96:18:ba:23:1f:
         d7:e0:97:53:dd:9c:cb:da:11:06:6a:c9:00:9e:69:12:ae:87:
         b9:69:33:97:72:f5:48:f3:1d:3f:6b:cc:19:1f:dc:f0:9d:59:
         7f:f1:71:5d:52:35:ec:98:77:4c:fb:92:eb:5b:57:69:39:6c:
         1f:56:81:87:00:f2:18:23:65:2b:6a:07:de:ff:58:e9:53:d7:
         64:58:df:ae:df:06:f4:8c:71:2d:ee:3a:c5:2c:01:2e:f5:a9:
         63:0b:2d:51:6c:15:57:db:0c:69:f3:f0:1a:33:46:09:4e:b8:
         f2:2c:65:1f:52:33:b5:e9:50:bd:bf:ba:4c:4c:1a:1d:a9:b8:
         3b:cc:09:60:9b:8d:e7:a2:bd:3f:18:23:00:65:a0:b6:2c:49:
         46:4b:70:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:28:42 2026 by rpki-client