This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3130342e37372e302f32342d3234203d3e20313336373837.roa
File:                     352e3130342e37372e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier:          sMYAIjMJNySm65MNECY5U69XgsgQ23v/JIGjyKwviMQ=
Subject key identifier:   5B:9F:F3:57:05:8F:4E:50:03:A6:9E:86:BF:43:89:59:9C:D4:17:1C
Certificate issuer:       /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial:       33CD1A8E8D608A63A8DD56ED3EA132C10BA25884
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3130342e37372e302f32342d3234203d3e20313336373837.roa
Signing time:             Fri 28 Nov 2025 11:49:53 +0000
ROA not before:           Fri 28 Nov 2025 11:44:53 +0000
ROA not after:            Fri 27 Nov 2026 11:49:53 +0000
asID:                     136787
IP address blocks:        5.104.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 08:24:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:cd:1a:8e:8d:60:8a:63:a8:dd:56:ed:3e:a1:32:c1:0b:a2:58:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
        Validity
            Not Before: Nov 28 11:44:53 2025 GMT
            Not After : Nov 27 11:49:53 2026 GMT
        Subject: CN=5B9FF357058F4E5003A69E86BF4389599CD4171C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a3:6a:9f:67:7a:d7:8a:0f:22:63:a7:26:b1:
                    40:cb:5d:2f:d1:fe:0b:21:51:17:46:a4:6b:c2:2e:
                    0d:05:d8:65:1e:74:5d:62:28:8c:bb:81:84:8a:41:
                    88:ea:a8:88:40:85:ae:38:eb:a5:4c:40:0a:f7:14:
                    7d:11:84:de:ef:8d:44:4c:22:2e:2b:5f:a2:74:44:
                    56:dc:83:88:05:e6:de:e9:70:97:1b:93:60:61:c4:
                    22:c5:54:cc:07:84:03:ad:8b:15:79:12:8d:c9:c1:
                    54:78:16:82:e5:07:9f:00:75:0f:0c:65:85:ce:d6:
                    94:84:56:80:94:70:61:db:80:77:ee:92:ff:be:8f:
                    1d:3d:ad:53:23:7d:73:ac:8d:f6:f5:9a:9c:aa:11:
                    eb:b5:a5:c7:35:44:e7:f2:ba:08:af:55:92:6c:a6:
                    3b:42:63:56:7b:9c:f9:0d:d7:38:49:ee:99:3d:ba:
                    19:09:f4:c6:da:d0:0e:9f:d5:41:06:b0:09:64:f1:
                    0d:ad:05:68:52:07:4f:e0:79:49:a8:25:53:ac:1a:
                    b7:16:c2:78:ff:f6:6d:d7:75:d7:ca:6a:0e:de:f5:
                    2c:83:8e:96:12:c7:f6:8b:a7:7c:54:92:b6:3b:e9:
                    db:45:a3:19:7c:36:c1:fa:73:98:71:84:82:4d:ef:
                    03:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:9F:F3:57:05:8F:4E:50:03:A6:9E:86:BF:43:89:59:9C:D4:17:1C
            X509v3 Authority Key Identifier:
                keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3130342e37372e302f32342d3234203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.104.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:f7:95:ab:9e:1e:f2:50:20:95:da:c4:93:50:5e:40:f9:ab:
         39:96:7e:c3:8f:5d:b2:a3:1e:28:0e:fb:68:ab:98:5a:d7:14:
         bd:00:fe:32:2f:ad:8e:6b:08:ac:79:85:de:cb:34:bb:12:02:
         a4:53:8e:6a:1b:42:2e:44:ad:09:e5:05:69:28:27:df:95:16:
         e6:db:7b:ff:ab:6c:d2:fd:56:72:8b:dc:1c:4b:77:6c:9d:0e:
         20:47:8a:2a:4c:de:48:9d:7b:d1:c0:6d:2f:2b:97:92:19:c1:
         14:55:74:8b:82:6e:b8:a2:77:60:89:a5:f0:23:86:76:cb:6e:
         ef:dd:da:49:c8:2f:fe:ac:be:35:2f:65:88:56:23:a5:aa:f0:
         11:cf:fb:d1:01:53:09:ac:de:d5:95:e2:9f:59:38:b9:8b:39:
         13:c9:2f:85:e0:0b:a9:47:13:86:59:d7:1f:55:40:0a:6c:63:
         f2:b8:1e:4f:72:9b:ee:ee:83:05:b6:84:3e:e2:96:1b:b7:6c:
         4c:e6:92:a7:33:f6:48:47:8a:5a:ea:44:17:14:75:91:70:36:
         c3:3d:e8:be:65:ea:1d:08:a1:10:7b:e6:4d:32:b8:dd:a0:7e:
         b5:5d:94:56:6a:8e:e8:0b:a3:16:d3:0c:a7:e7:87:ab:c2:ab:
         38:e4:20:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:34:32 2025 by rpki-client