This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3131302e38342e302f32342d3234203d3e20323034313730.roa
File:                     3139342e3131302e38342e302f32342d3234203d3e20323034313730.roa (raw, json)
Hash identifier:          JRQj1ZuJVtUaogp+4+xZVW2g52OSpcIhYo7RAWmletU=
Subject key identifier:   AB:6F:6B:79:60:E6:CE:AF:1A:36:9D:66:D4:23:C8:A8:3E:17:22:42
Certificate issuer:       /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial:       0DB1255F2447DBDC0A1FF289305502DD3132FE7B
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3131302e38342e302f32342d3234203d3e20323034313730.roa
Signing time:             Fri 28 Nov 2025 11:49:22 +0000
ROA not before:           Fri 28 Nov 2025 11:44:22 +0000
ROA not after:            Fri 27 Nov 2026 11:49:22 +0000
asID:                     204170
IP address blocks:        194.110.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 08:24:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:b1:25:5f:24:47:db:dc:0a:1f:f2:89:30:55:02:dd:31:32:fe:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
        Validity
            Not Before: Nov 28 11:44:22 2025 GMT
            Not After : Nov 27 11:49:22 2026 GMT
        Subject: CN=AB6F6B7960E6CEAF1A369D66D423C8A83E172242
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:cf:4e:9a:03:ca:03:b5:dc:5f:54:db:ef:33:
                    8d:43:04:95:9c:b6:a9:f7:d7:9b:7d:b8:70:ce:76:
                    57:73:41:5e:6c:62:30:03:2b:b8:26:d5:e5:2a:67:
                    57:be:21:8c:8f:8a:d0:74:ab:2b:f9:34:14:db:32:
                    36:55:c8:6f:54:be:32:76:ce:d5:42:b7:35:05:76:
                    30:9d:5e:d9:9a:ef:c2:95:c2:c2:b1:a4:bf:00:0d:
                    93:65:49:44:d3:b0:04:a4:3d:da:fe:d0:bb:44:a8:
                    71:c3:f6:35:65:fb:2c:a8:c5:0e:2c:ac:5f:a7:8d:
                    cb:90:5b:87:32:17:65:c2:d1:42:9f:bf:be:af:d5:
                    9c:59:15:f7:eb:0f:30:18:e6:ef:86:c8:09:55:a3:
                    d7:b5:56:cf:c6:56:34:dd:48:72:24:95:4f:e9:1b:
                    b0:46:53:79:57:53:48:01:4d:14:0c:27:95:fa:e2:
                    58:22:7a:dd:7d:0f:fd:e9:bf:d2:70:5f:81:60:16:
                    ef:3b:5a:78:b5:11:07:44:e4:2f:b3:4a:a2:c1:04:
                    06:62:98:fb:5a:b0:a0:fb:6f:dc:57:c6:6f:fd:1b:
                    7e:66:9a:00:f7:f6:b6:93:e3:93:a8:27:ac:f6:34:
                    58:58:f0:43:1c:70:41:c8:8c:91:c8:f3:c6:40:30:
                    b8:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:6F:6B:79:60:E6:CE:AF:1A:36:9D:66:D4:23:C8:A8:3E:17:22:42
            X509v3 Authority Key Identifier:
                keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3131302e38342e302f32342d3234203d3e20323034313730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.110.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:e6:fb:f7:2f:67:00:5f:2b:a7:ed:77:7e:18:87:9e:cc:e7:
         ea:56:15:6b:fd:7d:41:3b:70:d6:8d:65:1f:e6:70:01:84:03:
         44:3d:f5:8e:b7:8a:a8:f7:64:88:44:be:29:87:42:d5:b5:96:
         59:84:f6:f3:6f:5b:0b:ee:d2:3d:87:bc:9e:13:37:da:17:35:
         04:7f:23:fd:bf:c3:16:06:f7:7a:ae:af:5b:dc:87:c8:e1:62:
         79:fe:d7:5a:7f:5b:48:2f:a0:5e:89:39:27:6a:78:26:91:b9:
         f4:48:c6:74:19:5c:9e:39:b0:70:00:06:c6:62:d7:d3:bf:ab:
         8e:76:81:fe:57:95:b7:cc:4a:73:63:14:eb:91:61:6c:26:86:
         48:6b:ff:01:72:fa:4a:f2:bc:6c:47:18:e9:5b:51:59:18:42:
         b4:7f:47:cb:45:24:e8:22:47:5f:e1:89:ff:4e:65:63:59:51:
         de:26:27:35:0a:3e:cd:d8:62:12:ce:33:71:4e:45:05:18:86:
         a2:f7:91:bf:73:e5:0a:96:e4:03:00:90:2c:46:41:ae:24:57:
         34:3d:8f:8d:9b:9d:8b:13:4b:e8:30:fc:d8:bc:c4:bc:37:ed:
         45:66:20:c7:0e:dd:ae:bf:ba:7a:7a:66:44:fe:a1:a9:d6:19:
         e7:23:19:2b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Dec 6 20:56:11 2025 by rpki-client