This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/33312e32342e38342e302f32342d3234203d3e20313336373837.roa
File:                     33312e32342e38342e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier:          VsXX2WImliM5cqTQKnV2jxq1aOvZcJshAV6uuMURVFM=
Subject key identifier:   FD:A8:22:25:4F:DC:98:98:C3:01:26:E4:D5:45:9A:0A:5F:20:6D:FB
Certificate issuer:       /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial:       36873A5C2415B3A491E916DC63F1052AB4034585
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/33312e32342e38342e302f32342d3234203d3e20313336373837.roa
Signing time:             Thu 20 Nov 2025 15:48:56 +0000
ROA not before:           Thu 20 Nov 2025 15:43:56 +0000
ROA not after:            Thu 19 Nov 2026 15:48:56 +0000
asID:                     136787
IP address blocks:        31.24.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 08:24:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:87:3a:5c:24:15:b3:a4:91:e9:16:dc:63:f1:05:2a:b4:03:45:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
        Validity
            Not Before: Nov 20 15:43:56 2025 GMT
            Not After : Nov 19 15:48:56 2026 GMT
        Subject: CN=FDA822254FDC9898C30126E4D5459A0A5F206DFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6f:6c:7c:33:65:64:68:24:d9:b6:71:4d:5e:
                    ba:d2:c6:3d:40:2e:44:f6:3a:4b:b4:83:a0:35:58:
                    32:de:57:87:ea:bf:b7:04:fe:06:af:90:59:b7:18:
                    fa:51:cd:47:50:b9:e2:ed:6a:cc:57:22:4b:8c:47:
                    c5:c7:29:6b:ef:c7:27:21:47:92:dd:a3:05:a0:96:
                    2e:bd:ad:5f:f8:e1:80:f0:af:38:13:19:f5:80:e9:
                    8b:38:d5:d8:6c:d1:59:c3:db:e5:87:8b:34:fa:47:
                    f0:8d:d1:ee:24:5c:80:8b:78:81:95:93:ec:f5:e2:
                    3e:1c:27:10:e6:14:e8:76:1f:2f:a3:c9:c4:1c:e4:
                    87:e2:3d:fa:9f:fd:a9:02:7f:32:96:2d:a9:5a:50:
                    67:4b:9c:96:f4:47:d6:3e:0e:50:7f:27:6d:17:60:
                    08:de:4d:bf:4b:ce:66:dd:33:83:05:93:7c:22:5a:
                    b3:db:14:e6:48:42:8a:28:e5:80:6b:0e:3c:a4:44:
                    d2:e1:31:54:2e:61:c7:98:62:cd:6c:f0:a3:f8:b4:
                    d6:b8:c0:f1:ab:55:7a:81:01:7d:d1:3f:ab:98:e5:
                    dd:c2:b1:a6:d7:41:d0:78:c0:85:e9:72:4d:78:43:
                    b8:5a:51:66:97:8f:a8:87:61:19:56:e5:d2:a6:7c:
                    c5:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:A8:22:25:4F:DC:98:98:C3:01:26:E4:D5:45:9A:0A:5F:20:6D:FB
            X509v3 Authority Key Identifier:
                keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/33312e32342e38342e302f32342d3234203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.24.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:10:63:d8:1c:4b:c7:cd:a4:10:c3:61:60:5f:c2:ea:ec:10:
         0e:ea:a5:b3:ee:5f:a0:43:e9:5e:e0:83:5d:2b:4b:3d:37:d0:
         db:c4:90:a1:d5:2b:29:bf:42:cf:2d:79:f1:b5:49:40:ca:87:
         3f:28:44:0c:43:82:96:36:b0:f1:ae:7a:ba:f0:94:4c:f9:b8:
         c3:98:68:b1:a3:22:7b:c7:3f:e6:f2:42:37:b4:d1:13:31:bc:
         57:dd:ff:39:2c:f0:27:7f:5e:07:c3:cf:92:85:8d:bd:7d:74:
         c3:c6:52:d7:40:25:fe:a7:da:d3:45:c2:14:49:1f:7e:79:24:
         f9:45:f3:89:97:b1:98:ee:af:93:6c:5d:21:c7:4e:96:45:b4:
         db:6c:f3:4f:7d:06:a5:8a:89:17:a0:7f:7c:29:14:e1:ea:08:
         aa:fd:a0:87:c2:2b:33:8a:e4:ea:d6:95:4d:b9:9e:58:5e:ef:
         c0:be:f5:89:b2:14:23:63:29:53:ed:08:cc:3c:55:61:0c:8d:
         b5:c9:94:8f:aa:22:97:57:56:af:c2:19:85:89:77:c2:2d:4f:
         92:a0:64:e5:ee:4d:4d:d4:2c:fa:3b:7e:ed:53:fc:3f:93:79:
         87:eb:25:20:82:eb:f6:2f:ec:8e:e2:78:11:38:30:0d:03:c2:
         34:d4:8e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:46:21 2025 by rpki-client