This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3137362e39372e3230362e302f32342d3234203d3e20313336373837.roa
File:                     3137362e39372e3230362e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier:          4ji8CTV9CKStdY44wqypUT8W3zeDlAWjl070s9qCAK0=
Subject key identifier:   E0:D8:78:6D:CF:1A:EA:48:70:EF:B5:47:03:D3:5F:0B:52:A7:1B:01
Certificate issuer:       /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial:       49659DED38C84B22E1FDA38E72349F9EC691809A
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3137362e39372e3230362e302f32342d3234203d3e20313336373837.roa
Signing time:             Fri 28 Nov 2025 11:49:30 +0000
ROA not before:           Fri 28 Nov 2025 11:44:30 +0000
ROA not after:            Fri 27 Nov 2026 11:49:30 +0000
asID:                     136787
IP address blocks:        176.97.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:65:9d:ed:38:c8:4b:22:e1:fd:a3:8e:72:34:9f:9e:c6:91:80:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
        Validity
            Not Before: Nov 28 11:44:30 2025 GMT
            Not After : Nov 27 11:49:30 2026 GMT
        Subject: CN=E0D8786DCF1AEA4870EFB54703D35F0B52A71B01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:00:0c:fd:47:d1:f5:eb:7a:34:0e:07:6a:9a:
                    3c:ad:86:b5:a4:3b:23:a6:38:5e:8c:08:e6:74:54:
                    69:9d:ca:5c:96:0f:9c:4c:95:bb:3c:54:7b:5e:bc:
                    27:08:7e:36:de:72:05:2e:f8:ee:e9:6e:ce:9d:34:
                    5c:e5:35:07:2e:af:19:a9:a6:93:0c:b8:2d:2f:a5:
                    29:8f:db:5d:9b:fa:54:db:f0:24:b9:a8:48:ca:5a:
                    f7:78:9c:f1:75:50:66:50:66:76:74:90:3d:34:0e:
                    bb:bd:c4:2e:58:24:96:fd:23:c2:03:c3:34:5b:e0:
                    ed:e2:f8:0a:a2:0a:0d:c2:71:b0:96:42:b2:6b:d6:
                    5b:2f:63:81:88:35:11:0e:f7:22:94:a5:35:6b:1c:
                    dc:5d:dd:6e:82:d6:87:d3:96:7b:1a:8c:0b:f2:a8:
                    3a:fe:29:07:39:c2:2c:5d:0f:d2:38:3a:e3:80:3e:
                    98:ca:3c:3f:47:d1:b3:b9:09:fa:25:87:ba:d4:a0:
                    9b:b0:9c:ed:bd:30:9a:77:a1:01:64:30:4b:04:51:
                    f8:08:3d:cc:99:44:c6:37:c8:c4:6b:71:aa:cf:87:
                    37:72:cc:8a:cd:49:dd:6a:b2:c3:96:64:b9:c5:31:
                    0e:d8:bc:0f:8a:70:9f:a9:32:92:e6:4f:12:9c:4e:
                    c7:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:D8:78:6D:CF:1A:EA:48:70:EF:B5:47:03:D3:5F:0B:52:A7:1B:01
            X509v3 Authority Key Identifier:
                keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3137362e39372e3230362e302f32342d3234203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.97.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:0e:a4:20:57:de:27:6b:57:28:f6:7e:19:b0:73:82:3d:d0:
         eb:ad:87:d1:c3:2d:23:f2:6c:60:34:5e:33:15:a7:b9:ad:b9:
         fc:28:4d:78:e9:fa:30:44:c9:24:26:8c:1f:c2:18:bc:17:86:
         00:4c:ba:3d:c7:5f:37:21:41:08:2a:23:99:ff:95:30:90:2d:
         bd:a2:23:a9:ae:ee:fd:de:16:d9:9e:80:c6:9e:01:5f:a0:3d:
         77:0a:48:4b:91:bd:03:09:6e:c4:67:7e:ca:1a:ae:75:03:ba:
         e3:d0:4a:f1:de:c5:5c:9f:28:e3:e5:65:71:ed:13:f9:ed:94:
         03:10:c7:f9:c1:26:ae:e0:01:ff:c7:08:18:db:c7:92:aa:fb:
         9d:29:bf:ad:23:7c:10:a0:56:a4:8f:7f:40:bd:c0:4a:7b:ef:
         ea:22:72:56:e0:95:73:bd:37:7e:7c:fb:bd:c1:93:0c:c9:e4:
         7f:c0:fc:ae:c1:d5:48:c0:a7:52:4a:9d:d7:ce:ac:83:b9:57:
         8c:e2:d1:ad:fa:3b:a7:bb:91:67:e1:18:51:01:6c:12:eb:9f:
         7a:dc:c3:e4:4c:ad:21:76:de:3a:d0:38:22:b6:4f:80:19:a9:
         d0:81:33:b0:b1:e6:05:52:54:41:bf:ee:d1:62:45:0b:75:3c:
         56:4a:37:34
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Dec 6 11:33:09 2025 by rpki-client