This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3137382e3231322e33342e302f32342d3332203d3e203531313637.roa
File:                     3137382e3231322e33342e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier:          9x32XLFLbl1hu7MFwe0YBCXlN5HW79TCMOEGMAWHNP0=
Subject key identifier:   45:68:0E:FE:09:DA:42:D3:30:B3:79:2F:C6:99:90:C9:ED:3F:85:2D
Certificate issuer:       /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial:       23184A90355E9C1D40C6120B5A2AFB574FE9C6FE
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3137382e3231322e33342e302f32342d3332203d3e203531313637.roa
Signing time:             Fri 21 Nov 2025 15:48:59 +0000
ROA not before:           Fri 21 Nov 2025 15:43:59 +0000
ROA not after:            Fri 20 Nov 2026 15:48:59 +0000
asID:                     51167
IP address blocks:        178.212.34.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:18:4a:90:35:5e:9c:1d:40:c6:12:0b:5a:2a:fb:57:4f:e9:c6:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
        Validity
            Not Before: Nov 21 15:43:59 2025 GMT
            Not After : Nov 20 15:48:59 2026 GMT
        Subject: CN=45680EFE09DA42D330B3792FC69990C9ED3F852D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ce:23:f5:01:b4:37:58:a8:34:3a:c5:98:1c:
                    48:c2:09:5d:d1:5f:81:c6:99:94:41:ed:e2:a0:76:
                    98:f3:a0:bf:9e:23:df:56:33:25:5f:98:39:c8:63:
                    1a:4a:a3:6a:b0:84:ed:ae:0e:44:bf:9e:68:52:8d:
                    c3:96:92:c2:63:5b:7f:2d:4d:85:44:f5:d5:50:59:
                    b1:5a:3b:54:6e:33:dd:6e:2a:08:be:bc:79:3b:2e:
                    e9:ee:a2:45:6a:06:27:09:c6:c8:15:df:c1:15:10:
                    14:87:21:a8:9e:a1:3d:ba:d7:6a:34:6f:8b:eb:c6:
                    70:af:35:bf:4d:e4:59:07:5e:ee:84:e4:b6:9e:7b:
                    d9:2f:63:6b:98:36:3b:13:98:de:a7:14:e0:b0:91:
                    0c:bd:64:c3:43:f9:d0:4f:f9:92:10:7e:e6:d0:6d:
                    0e:ef:e0:e0:e1:b1:e7:d0:6d:58:e3:31:2c:c9:c5:
                    7e:be:a7:6f:a6:fe:9b:3b:09:bc:6b:59:5d:41:fa:
                    03:4f:9d:52:3d:6a:7d:bc:44:32:51:b3:09:98:d6:
                    37:8e:9a:f4:a2:33:cd:ec:77:7a:02:ac:94:53:db:
                    e6:e6:28:21:b6:71:dc:74:f6:4f:94:e8:09:eb:38:
                    3f:df:2c:e8:84:f4:9d:47:c6:3f:ec:bc:c9:4a:42:
                    44:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:68:0E:FE:09:DA:42:D3:30:B3:79:2F:C6:99:90:C9:ED:3F:85:2D
            X509v3 Authority Key Identifier:
                keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3137382e3231322e33342e302f32342d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.212.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:84:f9:7e:86:cd:ab:43:67:f1:db:21:b5:7c:c3:92:e1:4b:
         26:e2:b1:d7:e1:e8:cc:e9:ce:40:98:b5:e1:29:06:47:f2:df:
         8a:14:3b:e8:3d:e3:7a:a8:bc:02:9e:21:57:fb:a2:4c:0c:39:
         15:e1:c9:e7:2f:17:7c:98:88:d0:15:84:c2:43:2d:ad:41:e2:
         e2:18:74:43:ff:1e:af:c5:35:8c:c4:9f:de:02:a0:ac:64:4d:
         b4:1f:28:de:1b:aa:3f:bb:56:c8:51:2e:ef:a7:61:f3:a3:2c:
         1c:bd:75:ee:a2:de:a6:12:b4:bb:fb:37:c7:b9:af:96:5a:17:
         3a:ff:c2:3a:76:4a:aa:0d:b0:ea:95:a0:40:86:88:c3:1c:31:
         e2:e2:a3:66:ac:bd:5a:16:41:a6:f3:cd:10:58:8b:5c:64:08:
         b1:73:60:1a:f1:0d:0e:83:42:31:3a:ed:67:bd:d8:07:36:83:
         88:3d:16:55:0e:c4:e3:30:e3:27:37:5c:87:63:5b:b3:df:eb:
         ce:83:d6:28:35:02:fa:f7:a4:7a:f2:03:6c:89:86:e7:ae:50:
         67:47:37:27:54:75:84:58:f7:72:7c:9f:71:44:de:17:b9:51:
         98:b0:26:de:c9:4d:79:0d:03:48:9c:b7:7e:ad:07:49:ef:21:
         53:c4:55:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:52:03 2025 by rpki-client