This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38312e362e302f32342d3234203d3e20313336373837.roa
File:                     34352e38312e362e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier:          23CV6qBLMPg6pRVoX6RIM3QEZvLesiSgQdoLfKneQvM=
Subject key identifier:   A2:39:81:7F:3F:1B:15:8D:26:14:0D:B3:1F:A0:52:D7:70:CF:E8:C8
Certificate issuer:       /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial:       6CD2166C09C819ABB7D5F59E1EE4CCD68350F0D1
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38312e362e302f32342d3234203d3e20313336373837.roa
Signing time:             Fri 28 Nov 2025 11:49:39 +0000
ROA not before:           Fri 28 Nov 2025 11:44:39 +0000
ROA not after:            Fri 27 Nov 2026 11:49:39 +0000
asID:                     136787
IP address blocks:        45.81.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 08:24:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:d2:16:6c:09:c8:19:ab:b7:d5:f5:9e:1e:e4:cc:d6:83:50:f0:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
        Validity
            Not Before: Nov 28 11:44:39 2025 GMT
            Not After : Nov 27 11:49:39 2026 GMT
        Subject: CN=A239817F3F1B158D26140DB31FA052D770CFE8C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:03:f0:e5:21:85:ee:6a:80:8b:97:76:03:c5:
                    a3:fc:cb:26:d9:cf:50:84:4a:0e:28:89:31:11:c4:
                    66:55:48:e9:d4:7f:a8:30:e2:b6:f2:ec:0b:da:19:
                    6f:a3:14:92:ef:af:68:6f:14:2b:ed:a6:fc:5f:c4:
                    51:00:1f:9e:1a:42:bd:4c:0d:60:45:55:b1:38:d9:
                    76:61:4e:8c:a7:81:82:45:39:2a:42:0c:f6:a8:1c:
                    ec:80:53:c6:56:2d:af:d8:fd:7a:e2:9e:40:17:45:
                    60:63:a8:44:42:41:df:ee:1f:ac:fb:eb:c1:d4:eb:
                    74:a3:91:39:23:db:6f:bd:5e:d2:65:2a:3b:a6:02:
                    16:3d:55:c0:b2:2e:76:59:ee:28:b4:24:63:49:a2:
                    f6:f0:ac:ef:13:3e:6d:d9:cb:b9:27:29:f6:f0:f0:
                    95:07:e3:c3:94:c9:43:ca:73:f1:65:9e:61:71:d3:
                    b5:21:c6:95:8f:9c:bc:f9:c1:a0:44:96:7a:37:91:
                    04:27:bb:5b:f3:e8:95:5e:e7:2e:c3:89:2f:38:df:
                    c8:28:f2:03:26:b8:59:ea:d5:b4:a0:de:5d:62:5b:
                    6e:d4:f2:5e:1b:9a:ec:4f:84:f8:78:a3:30:14:fd:
                    48:fc:50:f9:34:f8:e1:43:a2:03:5e:78:98:e8:e5:
                    f4:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:39:81:7F:3F:1B:15:8D:26:14:0D:B3:1F:A0:52:D7:70:CF:E8:C8
            X509v3 Authority Key Identifier:
                keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38312e362e302f32342d3234203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.81.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:31:4e:89:3a:84:97:b1:45:d0:f4:2d:7c:10:7d:72:5e:62:
         45:08:cb:aa:dc:45:7c:93:3b:6d:a7:79:2f:48:0d:c9:a3:1f:
         8c:7f:ee:c0:39:b5:52:e0:f9:cd:49:86:21:ff:92:0c:9e:0b:
         23:09:70:94:71:e5:9c:fd:a9:4f:60:18:d4:e9:74:95:ec:8e:
         6b:08:3a:b8:67:a3:df:89:14:ea:d5:24:e9:27:af:cd:70:b4:
         c8:76:c1:32:4b:3f:de:1b:30:53:0d:c2:e5:be:6e:9b:1e:0a:
         e0:b4:72:a0:3b:12:11:0f:bf:2d:61:de:2a:34:c1:d9:bd:b2:
         b8:2f:e1:38:86:26:85:3e:02:f0:ad:19:d9:ab:e8:a6:7f:f8:
         3c:46:c4:45:0a:4c:53:8c:44:66:44:df:d1:70:18:11:2f:46:
         c4:91:ff:52:c8:d2:26:b4:13:12:87:d4:f2:fa:c4:13:16:c4:
         37:be:e0:7c:4f:b4:86:17:be:a3:a9:18:2b:fe:21:48:11:9b:
         ed:e6:40:7b:c5:3e:78:ad:7c:9c:1c:43:86:45:1a:4e:64:a3:
         ec:ee:1c:96:81:7c:a6:fd:c0:78:47:63:f3:a6:aa:e6:b1:03:
         1a:0c:9b:53:f9:b3:05:a8:e9:12:90:8e:f8:21:03:26:fb:c1:
         39:04:4b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:38:34 2025 by rpki-client