This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3133302e3138352e3131362e302f32342d3234203d3e203632323430.roa
File:                     3133302e3138352e3131362e302f32342d3234203d3e203632323430.roa (raw, json)
Hash identifier:          itP1yVj8xoMEMOR0+bmEltIvL8gBeVYEC44vVyEQJ38=
Subject key identifier:   06:74:82:D3:DE:88:3E:3C:C4:21:39:2A:E7:FD:31:AF:13:54:CE:18
Certificate issuer:       /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial:       6537CCC7CE34FB248AAD4C25D8CFE6224ED593CC
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3133302e3138352e3131362e302f32342d3234203d3e203632323430.roa
Signing time:             Fri 28 Nov 2025 11:49:54 +0000
ROA not before:           Fri 28 Nov 2025 11:44:54 +0000
ROA not after:            Fri 27 Nov 2026 11:49:54 +0000
asID:                     62240
IP address blocks:        130.185.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 08:24:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:37:cc:c7:ce:34:fb:24:8a:ad:4c:25:d8:cf:e6:22:4e:d5:93:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
        Validity
            Not Before: Nov 28 11:44:54 2025 GMT
            Not After : Nov 27 11:49:54 2026 GMT
        Subject: CN=067482D3DE883E3CC421392AE7FD31AF1354CE18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:81:37:03:c2:fa:8d:9a:ee:38:fa:88:fb:6f:
                    01:05:dd:25:45:ec:0c:30:bd:4a:cb:17:58:66:5e:
                    61:8a:ea:b7:08:ab:d2:4a:df:97:c2:c3:87:5c:67:
                    37:3b:9e:07:3e:7c:65:ee:ce:4d:0f:6a:f9:fa:58:
                    4f:90:84:6e:b2:29:b7:2b:a2:c1:e7:70:80:ca:6b:
                    9c:a4:54:4f:21:7a:e5:db:a0:44:42:ef:1e:9a:b2:
                    96:ea:28:67:36:89:5c:07:76:76:f0:3d:42:4e:fb:
                    0a:18:93:a4:94:c6:79:0f:d8:83:5c:0a:05:11:e0:
                    9d:f9:2c:44:13:cf:43:00:28:15:13:73:2a:83:68:
                    cb:38:79:e3:39:6d:a4:e2:8e:8f:fc:58:28:b1:fa:
                    15:4a:df:05:cc:d3:a4:26:17:81:b4:e7:2a:2d:eb:
                    d3:72:c0:52:b9:88:03:bb:ed:33:6a:b7:1d:d5:bc:
                    73:9c:c7:0d:b1:4c:e3:8e:19:ed:f8:bd:9b:4c:b4:
                    57:69:62:4e:c8:36:56:78:5e:07:f0:30:13:03:c9:
                    32:48:04:8b:20:9f:46:cf:5e:5e:e0:56:77:f9:7e:
                    56:99:e5:b4:ff:df:10:1f:84:38:c0:ea:bb:ee:54:
                    41:a4:86:3a:c0:43:d8:35:e6:cb:5d:ba:a6:e2:1b:
                    4e:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:74:82:D3:DE:88:3E:3C:C4:21:39:2A:E7:FD:31:AF:13:54:CE:18
            X509v3 Authority Key Identifier:
                keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3133302e3138352e3131362e302f32342d3234203d3e203632323430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.185.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:11:66:6b:11:4b:69:6c:bb:8a:5d:8a:61:df:41:87:a3:55:
         6a:3e:ca:e1:d7:15:42:48:80:b3:16:91:24:47:74:f0:7c:15:
         ff:f2:c9:f7:22:89:12:6d:24:a0:9a:90:7b:58:b9:b6:15:6b:
         e1:a3:56:65:6f:3d:96:9c:e6:89:b7:65:9d:cc:56:65:e9:b3:
         8f:73:be:f5:e5:4d:3d:00:0a:45:d0:10:2a:46:17:36:75:14:
         d9:b9:65:51:83:ad:32:88:af:fc:02:27:86:23:1b:53:48:ae:
         5b:fc:a2:4f:4b:fd:41:94:55:1c:51:0f:dd:34:ab:25:a9:8e:
         a7:09:6e:2d:d7:9f:64:9c:c9:9e:a8:81:1a:3f:77:11:a3:e5:
         b6:07:db:26:29:06:f9:38:f7:eb:2f:d6:9d:9b:d4:f5:4c:d0:
         2c:b3:ce:e1:d9:6c:45:40:56:82:c6:89:6d:87:69:b4:a3:5e:
         31:00:69:a0:dc:73:3b:5c:54:48:ef:d5:2b:e5:8d:9b:75:30:
         1f:a0:32:bd:60:a2:fd:d0:2b:4f:ac:b7:0b:70:c1:50:f2:c8:
         52:f5:90:bd:37:24:02:b4:f8:8a:6b:9c:a7:28:ee:60:54:39:
         1e:7f:6d:ca:3f:91:73:65:96:36:9e:94:9d:5b:67:f6:18:11:
         c1:5b:05:72
-----BEGIN CERTIFICATE-----
MIIFOjCCBCKgAwIBAgIUZTfMx840+ySKrUwl2M/mIk7Vk8wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNTExMjgxMTQ0NTRaFw0yNjExMjcxMTQ5NTRaMDMxMTAvBgNV
BAMTKDA2NzQ4MkQzREU4ODNFM0NDNDIxMzkyQUU3RkQzMUFGMTM1NENFMTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0gTcDwvqNmu44+oj7bwEF3SVF
7AwwvUrLF1hmXmGK6rcIq9JK35fCw4dcZzc7ngc+fGXuzk0Pavn6WE+QhG6yKbcr
osHncIDKa5ykVE8heuXboERC7x6aspbqKGc2iVwHdnbwPUJO+woYk6SUxnkP2INc
CgUR4J35LEQTz0MAKBUTcyqDaMs4eeM5baTijo/8WCix+hVK3wXM06QmF4G05yot
69NywFK5iAO77TNqtx3VvHOcxw2xTOOOGe34vZtMtFdpYk7INlZ4XgfwMBMDyTJI
BIsgn0bPXl7gVnf5flaZ5bT/3xAfhDjA6rvuVEGkhjrAQ9g15stduqbiG05LAgMB
AAGjggJEMIICQDAdBgNVHQ4EFgQUBnSC096IPjzEITkq5/0xrxNUzhgwHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTMzMzAyZTMxMzgz
NTJlMzEzMTM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMjMyMzQzMC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAIK5dDANBgkqhkiG9w0BAQsFAAOCAQEAkRFmaxFLaWy7il2KYd9Bh6NV
aj7K4dcVQkiAsxaRJEd08HwV//LJ9yKJEm0koJqQe1i5thVr4aNWZW89lpzmibdl
ncxWZemzj3O+9eVNPQAKRdAQKkYXNnUU2bllUYOtMoiv/AInhiMbU0iuW/yiT0v9
QZRVHFEP3TSrJamOpwluLdefZJzJnqiBGj93EaPltgfbJikG+Tj36y/WnZvU9UzQ
LLPO4dlsRUBWgsaJbYdptKNeMQBpoNxzO1xUSO/VK+WNm3UwH6AyvWCi/dArT6y3
C3DBUPLIUvWQvTckArT4imucpyjuYFQ5Hn9tyj+Rc2WWNp6UnVtn9hgRwVsFcg==
-----END CERTIFICATE-----
Generated at Sat Dec 6 21:00:05 2025 by rpki-client