This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133322e3135382e302f32342d3332203d3e203531313637.roa
File:                     34352e3133322e3135382e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier:          CLF63zMxkxZuFjPZgx8lFb7peTC5qC7TduVqhbMYaQs=
Subject key identifier:   75:CB:F1:B1:96:93:2E:9E:86:80:EB:17:64:BF:06:B2:BE:D0:62:D9
Certificate issuer:       /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial:       15D72D04D88A354EE4184469459B8F4661C3F4FB
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133322e3135382e302f32342d3332203d3e203531313637.roa
Signing time:             Fri 28 Nov 2025 11:49:40 +0000
ROA not before:           Fri 28 Nov 2025 11:44:40 +0000
ROA not after:            Fri 27 Nov 2026 11:49:40 +0000
asID:                     51167
IP address blocks:        45.132.158.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:d7:2d:04:d8:8a:35:4e:e4:18:44:69:45:9b:8f:46:61:c3:f4:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
        Validity
            Not Before: Nov 28 11:44:40 2025 GMT
            Not After : Nov 27 11:49:40 2026 GMT
        Subject: CN=75CBF1B196932E9E8680EB1764BF06B2BED062D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:48:55:5e:ef:db:82:ca:9a:00:f8:66:70:c6:
                    39:86:76:09:5b:6a:0e:6a:0c:d3:43:2b:70:dc:c1:
                    1c:2c:86:d8:9f:2a:a1:8b:36:f4:89:ee:ad:21:5b:
                    5c:96:9a:57:7b:d7:b1:06:1e:8f:c0:1c:c6:25:1f:
                    b9:e5:5f:6a:67:44:56:f0:f7:77:ae:e2:a6:b4:ce:
                    f0:29:30:eb:27:fe:11:b2:a1:c1:73:27:6e:fb:3d:
                    49:1b:b0:9a:27:6b:0c:1c:8a:ef:8e:58:ff:3f:68:
                    bc:78:13:77:f7:28:b3:d3:a3:db:07:e6:5c:67:37:
                    73:74:16:ea:6e:94:a5:7b:d5:c2:ed:b3:a4:33:3e:
                    18:ec:42:fa:9f:e1:ca:c5:1a:83:fb:58:17:02:b0:
                    e9:48:64:a0:9e:cd:bb:85:e4:5e:c8:67:43:fa:bc:
                    a4:62:79:f9:c0:00:32:ed:d7:b8:08:4e:25:50:68:
                    aa:3e:fd:b5:47:7e:88:7a:7f:e3:aa:0f:86:18:5e:
                    bb:c0:4c:41:cf:ed:30:44:51:4a:24:c7:93:b7:e3:
                    a3:4c:de:c5:03:83:1f:5d:b6:d5:6f:5b:a4:ad:0e:
                    3f:88:da:87:5d:40:f4:cb:76:85:27:2e:07:87:dc:
                    d4:d7:d5:f3:93:8c:db:f0:f1:9c:91:0b:90:96:f6:
                    6e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:CB:F1:B1:96:93:2E:9E:86:80:EB:17:64:BF:06:B2:BE:D0:62:D9
            X509v3 Authority Key Identifier:
                keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133322e3135382e302f32342d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.132.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:58:75:49:40:0c:ba:c8:2b:26:d3:aa:19:04:14:58:4a:74:
         b5:89:7a:eb:f3:79:45:64:c8:7d:50:99:d0:5c:39:4e:31:c5:
         61:ff:7e:d3:a8:fc:63:67:ea:57:eb:19:09:3d:43:c4:02:17:
         ad:a1:36:fc:f8:55:a6:06:1d:ff:2d:8b:3c:59:de:44:db:81:
         df:da:a5:c7:df:fc:17:db:95:e7:5b:1a:36:97:00:b1:d6:59:
         bf:7c:92:f7:40:4d:ff:09:b1:ff:6a:0a:b4:ef:c1:ed:ee:62:
         5f:eb:d5:b4:d4:18:05:bf:55:9c:da:79:d2:e0:f0:60:4b:a9:
         4d:cf:9a:06:07:d0:b5:21:d3:61:bc:e8:f5:60:8d:52:59:73:
         dc:9c:02:0d:32:87:56:00:8b:88:10:fc:3c:35:d3:76:aa:32:
         56:38:a5:61:d6:79:e2:68:56:d3:62:0e:ee:67:89:6c:e7:a0:
         02:10:63:05:55:cb:36:98:b5:da:1d:ad:ea:23:4f:f5:87:65:
         f4:d5:ac:98:84:4e:e1:1b:b5:b7:0e:a8:83:3a:8d:6a:4b:89:
         0c:3b:6d:10:d4:2e:f9:b3:82:dc:73:1a:e5:4c:63:b4:e0:d1:
         04:6f:4c:69:1a:19:3d:8f:71:9b:de:f8:21:db:df:8e:ab:76:
         10:fb:a0:3a
-----BEGIN CERTIFICATE-----
MIIFODCCBCCgAwIBAgIUFdctBNiKNU7kGERpRZuPRmHD9PswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNTExMjgxMTQ0NDBaFw0yNjExMjcxMTQ5NDBaMDMxMTAvBgNV
BAMTKDc1Q0JGMUIxOTY5MzJFOUU4NjgwRUIxNzY0QkYwNkIyQkVEMDYyRDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWSFVe79uCypoA+GZwxjmGdglb
ag5qDNNDK3DcwRwshtifKqGLNvSJ7q0hW1yWmld717EGHo/AHMYlH7nlX2pnRFbw
93eu4qa0zvApMOsn/hGyocFzJ277PUkbsJonawwciu+OWP8/aLx4E3f3KLPTo9sH
5lxnN3N0FupulKV71cLts6QzPhjsQvqf4crFGoP7WBcCsOlIZKCezbuF5F7IZ0P6
vKRiefnAADLt17gITiVQaKo+/bVHfoh6f+OqD4YYXrvATEHP7TBEUUokx5O346NM
3sUDgx9dttVvW6StDj+I2oddQPTLdoUnLgeH3NTX1fOTjNvw8ZyRC5CW9m6jAgMB
AAGjggJCMIICPjAdBgNVHQ4EFgQUdcvxsZaTLp6GgOsXZL8Gsr7QYtkwHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzMTMzMzIy
ZTMxMzUzODJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDM1MzEzMTM2Mzcucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAthJ4wDQYJKoZIhvcNAQELBQADggEBAJNYdUlADLrIKybTqhkEFFhKdLWJ
euvzeUVkyH1QmdBcOU4xxWH/ftOo/GNn6lfrGQk9Q8QCF62hNvz4VaYGHf8tizxZ
3kTbgd/apcff/BfbledbGjaXALHWWb98kvdATf8Jsf9qCrTvwe3uYl/r1bTUGAW/
VZzaedLg8GBLqU3PmgYH0LUh02G86PVgjVJZc9ycAg0yh1YAi4gQ/Dw103aqMlY4
pWHWeeJoVtNiDu5niWznoAIQYwVVyzaYtdodreojT/WHZfTVrJiETuEbtbcOqIM6
jWpLiQw7bRDULvmzgtxzGuVMY7Tg0QRvTGkaGT2PcZve+CHb346rdhD7oDo=
-----END CERTIFICATE-----
Generated at Sat Dec 6 14:04:58 2025 by rpki-client