This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e34362e3234302e302f32342d3234203d3e20313336373837.roa
File:                     3139332e34362e3234302e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier:          P/u8VQbLnRsIcWrpqSSEncqPE4c7uATrJMI79WYWmgc=
Subject key identifier:   66:CE:AE:0B:15:72:01:54:A3:F2:0F:3D:1D:40:6D:9E:80:E6:65:90
Certificate issuer:       /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial:       244610EF2EB21E708AB4C687EB6BA235A7E03CCC
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e34362e3234302e302f32342d3234203d3e20313336373837.roa
Signing time:             Fri 21 Nov 2025 15:48:58 +0000
ROA not before:           Fri 21 Nov 2025 15:43:58 +0000
ROA not after:            Fri 20 Nov 2026 15:48:58 +0000
asID:                     136787
IP address blocks:        193.46.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 08:24:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:46:10:ef:2e:b2:1e:70:8a:b4:c6:87:eb:6b:a2:35:a7:e0:3c:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
        Validity
            Not Before: Nov 21 15:43:58 2025 GMT
            Not After : Nov 20 15:48:58 2026 GMT
        Subject: CN=66CEAE0B15720154A3F20F3D1D406D9E80E66590
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:9a:52:79:6b:c6:b3:a8:f6:6e:4b:e3:f1:93:
                    27:7e:e1:97:63:c1:18:29:00:19:80:59:e2:53:95:
                    ec:b2:46:25:5f:e6:fd:b9:b5:c1:2f:ef:bc:c3:60:
                    ba:96:83:d4:57:6a:f6:9c:6c:80:16:98:40:56:7b:
                    90:9b:9e:cc:f7:10:0f:f9:66:08:81:f8:96:22:6a:
                    4b:78:4c:75:6c:83:74:0c:3d:e5:06:ee:55:44:78:
                    b4:5d:7d:24:1d:73:21:c8:79:fd:5d:d9:64:fe:83:
                    26:60:c5:43:e8:6f:cf:ba:4f:45:a8:cc:32:c1:9a:
                    70:4d:2e:0f:99:c7:5e:4e:ca:89:ff:37:10:3a:68:
                    ca:7a:e6:7e:34:82:fc:22:26:21:be:cd:3e:43:c0:
                    48:c6:45:d4:7b:53:de:d8:d5:90:a1:17:37:f6:0d:
                    e6:8d:92:99:68:89:30:da:74:76:7d:c9:3a:be:c8:
                    bc:27:3d:c7:08:1c:ee:73:62:ba:3d:67:97:ce:95:
                    f5:c7:8d:53:aa:67:b9:4e:d7:86:97:fc:70:21:f3:
                    c5:e3:ff:6d:cb:2e:28:a2:83:0b:1a:db:9c:2b:13:
                    08:8d:89:56:c2:dd:43:fb:14:ef:cb:d1:3c:c2:58:
                    96:61:52:5d:a2:b6:b8:80:14:fe:04:6a:1d:15:54:
                    4e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:CE:AE:0B:15:72:01:54:A3:F2:0F:3D:1D:40:6D:9E:80:E6:65:90
            X509v3 Authority Key Identifier:
                keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e34362e3234302e302f32342d3234203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.46.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:29:cc:28:4f:b5:56:d1:f8:1d:78:ee:4d:cc:07:8e:2c:66:
         f3:af:4e:40:f5:63:f7:87:c7:67:29:bd:23:41:ec:3d:8a:e1:
         9b:d8:eb:06:ef:5a:70:81:c8:ee:1f:dd:84:cc:1c:ba:5c:2d:
         2e:b0:f8:25:02:04:f3:61:09:e3:f5:01:c7:93:ee:77:b1:e6:
         45:83:03:a1:82:27:84:ac:82:5d:9a:f8:a5:8a:c9:06:f6:0b:
         f3:50:4b:72:d4:db:43:a6:30:52:ac:92:a5:6a:26:1c:9a:17:
         de:f5:a5:de:76:b9:65:2d:e2:4b:15:04:4c:3f:82:b9:61:8b:
         81:8b:cb:dd:df:2d:a5:32:f0:13:c2:d7:f1:e0:57:62:6e:20:
         78:2a:06:ba:62:ae:23:76:ef:5a:40:9a:dc:7b:ce:b4:87:37:
         89:2c:6b:e4:42:29:8a:e1:39:9e:82:70:f1:0d:bf:8d:17:88:
         ec:6f:59:dd:6a:b7:34:27:c2:6d:5e:81:4d:62:ce:f4:2b:bc:
         c0:ac:a9:60:88:ef:9f:80:37:08:2c:ad:73:ff:d8:b5:cd:99:
         6c:48:d6:24:00:75:d8:06:1d:d9:f7:11:2e:32:8d:e8:a8:c7:
         47:bf:7d:19:07:36:0e:24:bf:1e:d1:22:13:8c:01:d1:3e:18:
         22:a0:18:b2
-----BEGIN CERTIFICATE-----
MIIFOjCCBCKgAwIBAgIUJEYQ7y6yHnCKtMaH62uiNafgPMwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNTExMjExNTQzNThaFw0yNjExMjAxNTQ4NThaMDMxMTAvBgNV
BAMTKDY2Q0VBRTBCMTU3MjAxNTRBM0YyMEYzRDFENDA2RDlFODBFNjY1OTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKmlJ5a8azqPZuS+Pxkyd+4Zdj
wRgpABmAWeJTleyyRiVf5v25tcEv77zDYLqWg9RXavacbIAWmEBWe5Cbnsz3EA/5
ZgiB+JYiakt4THVsg3QMPeUG7lVEeLRdfSQdcyHIef1d2WT+gyZgxUPob8+6T0Wo
zDLBmnBNLg+Zx15Oyon/NxA6aMp65n40gvwiJiG+zT5DwEjGRdR7U97Y1ZChFzf2
DeaNkploiTDadHZ9yTq+yLwnPccIHO5zYro9Z5fOlfXHjVOqZ7lO14aX/HAh88Xj
/23LLiiigwsa25wrEwiNiVbC3UP7FO/L0TzCWJZhUl2itriAFP4Eah0VVE6zAgMB
AAGjggJEMIICQDAdBgNVHQ4EFgQUZs6uCxVyAVSj8g89HUBtnoDmZZAwHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzMyZTM0MzYy
ZTMyMzQzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAMEu8DANBgkqhkiG9w0BAQsFAAOCAQEARynMKE+1VtH4HXjuTcwHjixm
869OQPVj94fHZym9I0HsPYrhm9jrBu9acIHI7h/dhMwculwtLrD4JQIE82EJ4/UB
x5Pud7HmRYMDoYInhKyCXZr4pYrJBvYL81BLctTbQ6YwUqySpWomHJoX3vWl3na5
ZS3iSxUETD+CuWGLgYvL3d8tpTLwE8LX8eBXYm4geCoGumKuI3bvWkCa3HvOtIc3
iSxr5EIpiuE5noJw8Q2/jReI7G9Z3Wq3NCfCbV6BTWLO9Cu8wKypYIjvn4A3CCyt
c//Ytc2ZbEjWJAB12AYd2fcRLjKN6KjHR799GQc2DiS/HtEiE4wB0T4YIqAYsg==
-----END CERTIFICATE-----
Generated at Sat Dec 6 18:01:13 2025 by rpki-client