This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3130342e37392e302f32342d3234203d3e20313336373837.roa
File:                     352e3130342e37392e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier:          Wfm8/JICVWMA0qgVJHzXpZdT0IfrrvSOVPSeeKwTVxU=
Subject key identifier:   8F:28:E7:65:92:F1:B8:0D:3E:FD:E9:02:43:3F:43:13:4C:56:63:18
Certificate issuer:       /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial:       6F99AFE20C96B768A57E961E9DA2900FCE0A4F91
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3130342e37392e302f32342d3234203d3e20313336373837.roa
Signing time:             Fri 28 Nov 2025 11:49:34 +0000
ROA not before:           Fri 28 Nov 2025 11:44:34 +0000
ROA not after:            Fri 27 Nov 2026 11:49:34 +0000
asID:                     136787
IP address blocks:        5.104.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 08:24:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:99:af:e2:0c:96:b7:68:a5:7e:96:1e:9d:a2:90:0f:ce:0a:4f:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
        Validity
            Not Before: Nov 28 11:44:34 2025 GMT
            Not After : Nov 27 11:49:34 2026 GMT
        Subject: CN=8F28E76592F1B80D3EFDE902433F43134C566318
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ae:9a:46:8e:3a:df:9c:09:9e:b2:6a:25:58:
                    9e:cd:61:fd:1a:41:3c:f6:02:25:f1:f8:4c:6e:64:
                    f1:80:79:03:1a:08:34:ba:c4:7a:fa:1b:ec:6b:f1:
                    18:ba:9c:44:9c:59:f5:d2:d0:8f:35:22:ef:99:ad:
                    4a:e0:c5:6c:c7:41:84:03:1a:31:95:31:cb:50:7f:
                    4d:da:47:41:53:56:ec:11:21:57:3f:9e:a1:87:c8:
                    f5:d6:f9:f8:ca:96:ee:b5:4d:45:d9:65:d3:3d:45:
                    df:fe:9f:5e:7b:c1:cb:76:8b:8b:0c:67:15:a5:ab:
                    e6:88:d9:05:8d:e4:14:c1:ef:1b:59:43:f1:aa:f4:
                    c5:e2:8a:a8:96:0a:09:bb:b7:5d:fd:58:cd:6a:3c:
                    e3:3d:18:55:b1:77:26:87:46:d7:df:fb:8e:71:4d:
                    dc:45:a8:92:c1:60:9c:2d:c0:37:09:dd:50:1c:d2:
                    fb:80:9f:90:c5:3d:e4:28:57:80:cf:50:de:96:5f:
                    8e:fe:28:88:3d:f5:35:2a:6f:0b:89:b3:3b:18:7e:
                    b8:98:af:42:81:43:e6:a4:30:79:fe:35:00:65:28:
                    7f:dc:a6:ac:8d:69:b0:de:48:2f:65:29:4a:4a:06:
                    03:ae:bd:5d:d9:46:ca:0d:83:20:22:02:50:a7:88:
                    86:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:28:E7:65:92:F1:B8:0D:3E:FD:E9:02:43:3F:43:13:4C:56:63:18
            X509v3 Authority Key Identifier:
                keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3130342e37392e302f32342d3234203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.104.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cc:02:98:a7:2f:07:84:f1:f7:e4:61:b4:7b:ce:b8:43:ea:4f:
         bd:60:c6:dc:e6:6b:cd:50:9b:e3:18:73:c9:c9:0c:67:61:4d:
         6c:44:79:4a:54:f4:21:1c:47:a9:71:16:15:9c:e9:43:3c:76:
         b9:ee:93:44:e8:4b:15:8b:fc:0b:8d:63:d4:f4:1d:5e:f8:d2:
         d9:ba:33:b8:58:ed:5a:2d:56:7b:db:5c:2a:5b:f5:65:dd:62:
         09:65:fe:fd:9b:4b:9e:db:25:a5:93:94:e3:e0:23:93:20:41:
         0a:62:6b:c4:9d:c8:ba:58:9a:ab:07:54:97:68:9e:b1:0c:d5:
         d1:10:85:cb:7e:9e:a8:8f:ec:82:5c:2f:08:62:16:4a:f6:4f:
         b6:30:60:f5:96:5f:d6:b2:e9:55:46:b7:50:a2:eb:fd:2d:9f:
         15:3b:2b:ea:35:9a:b3:4f:6f:b4:b4:66:24:ce:02:b5:29:13:
         41:77:e5:cc:49:9f:cd:66:a7:d9:e2:97:ef:6d:76:12:0b:82:
         6c:0e:71:2e:68:5a:ee:b1:c1:51:e6:6c:89:a0:2e:0d:9b:0d:
         0e:d1:6a:15:28:5d:eb:25:d2:ef:e9:5d:42:3e:5d:b5:94:60:
         11:bc:ff:88:e7:10:16:3d:06:98:1a:2c:c3:3b:3b:a4:56:41:
         44:6d:d4:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:33:47 2025 by rpki-client