This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3136322e302f32342d3234203d3e20383334.roa
File:                     3134372e3132352e3136322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          TEZsAVB/JIyVreQxhYw6Lt4LYdqcNjJ7GieEaO+BjYc=
Subject key identifier:   EA:D2:7B:FB:EE:7B:AC:D0:A0:45:58:8B:AF:2E:1F:1E:83:15:54:C5
Certificate issuer:       /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial:       7240A9974847EFCF685C70D9E263DA949B13BF61
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3136322e302f32342d3234203d3e20383334.roa
Signing time:             Thu 08 Jan 2026 06:49:01 +0000
ROA not before:           Thu 08 Jan 2026 06:44:01 +0000
ROA not after:            Thu 07 Jan 2027 06:49:01 +0000
asID:                     834
IP address blocks:        147.125.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 04:37:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:40:a9:97:48:47:ef:cf:68:5c:70:d9:e2:63:da:94:9b:13:bf:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
        Validity
            Not Before: Jan  8 06:44:01 2026 GMT
            Not After : Jan  7 06:49:01 2027 GMT
        Subject: CN=EAD27BFBEE7BACD0A045588BAF2E1F1E831554C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:fd:44:55:7c:01:68:c5:b8:d9:31:30:63:32:
                    4d:8d:48:f6:fe:af:c6:3e:27:20:81:92:33:3a:fa:
                    f0:e6:f0:c1:72:87:6d:ed:86:a3:9c:88:3e:1e:5f:
                    95:54:4e:9a:80:72:4c:f5:c8:14:13:96:3e:4e:59:
                    96:7e:f4:63:ab:8b:88:6a:ac:72:f3:9c:01:f9:d5:
                    df:32:1c:52:6d:8e:28:44:f8:fa:b2:0a:73:4e:0b:
                    ac:c7:ec:cf:7d:21:d8:09:a4:50:8e:11:87:f5:bb:
                    e6:e7:36:80:32:7e:e3:4d:ca:8e:8d:e2:2e:96:4b:
                    de:4f:50:1c:ad:fc:56:28:a1:30:a7:09:76:04:3a:
                    c6:36:2c:1b:30:f4:e4:f5:e7:05:81:01:f1:7b:66:
                    9b:c1:b7:3a:26:b2:41:c6:a9:1e:2f:60:86:31:b5:
                    58:4d:f0:82:19:09:43:78:97:8a:c6:6d:2f:99:35:
                    18:77:28:72:04:84:19:4d:d5:f5:00:4b:d8:20:51:
                    00:09:15:38:76:96:28:3c:b7:fe:14:04:31:51:82:
                    8c:7e:84:1b:10:b5:ca:b2:90:2d:bf:8f:56:e1:03:
                    de:a2:cb:e5:0b:5d:f3:c7:23:7f:1f:89:05:9c:6a:
                    49:11:b3:7e:19:40:be:bd:0c:83:c4:74:0d:72:58:
                    3d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:D2:7B:FB:EE:7B:AC:D0:A0:45:58:8B:AF:2E:1F:1E:83:15:54:C5
            X509v3 Authority Key Identifier:
                keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3136322e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.125.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:67:a9:8c:a8:a1:1b:2c:a7:15:08:99:46:03:da:4c:10:27:
         0a:37:d7:0b:94:57:e3:76:54:f1:0b:97:82:d8:66:9c:8b:07:
         81:e6:69:09:b5:f4:21:9a:26:c3:37:70:06:50:79:5b:90:a6:
         8a:b2:30:f9:52:bd:11:be:4a:b3:01:5b:a5:d4:bc:ce:d3:9c:
         58:73:46:5d:29:da:54:6c:90:bc:01:db:a2:72:9f:eb:b5:59:
         0d:0e:81:af:50:f7:12:9e:7a:25:17:30:9f:b9:bd:19:e3:0c:
         2c:ee:b4:e8:b0:52:b9:20:75:62:86:ae:0e:c8:85:5c:ab:53:
         8f:1a:30:93:27:eb:29:48:14:17:e1:36:21:2a:89:30:95:99:
         04:7a:7f:a1:d3:32:00:42:4f:50:32:02:e4:26:90:b9:7c:81:
         20:f1:4f:1d:b8:91:94:2e:e3:db:90:4d:74:55:ef:19:fc:2f:
         78:75:3d:38:42:d4:f7:83:5b:e8:7e:5d:82:6c:e8:69:97:cf:
         f2:b9:1a:17:5e:45:0d:bf:91:f8:d3:b7:20:a8:0f:cf:ff:48:
         cd:f9:6e:9c:f7:bd:cf:94:a8:73:5d:ef:e8:9b:e0:60:2b:58:
         c2:1e:76:e5:4c:d4:41:3c:ef:db:2c:11:7b:3e:9c:61:01:a7:
         fd:70:80:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:36:39 2026 by rpki-client