This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/37372e3234332e38362e302f32342d3234203d3e20313336373837.roa
File:                     37372e3234332e38362e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier:          E6J0ptglFcCrJdpebkkdcvbnvlgCHg4OtHz37cPg29Q=
Subject key identifier:   BA:C6:A1:0A:33:23:EA:44:C0:07:E6:1E:75:7F:11:F0:46:B0:77:53
Certificate issuer:       /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial:       7A3318BB984186340C1AA378C77B38192E205F4A
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/37372e3234332e38362e302f32342d3234203d3e20313336373837.roa
Signing time:             Fri 28 Nov 2025 11:49:34 +0000
ROA not before:           Fri 28 Nov 2025 11:44:34 +0000
ROA not after:            Fri 27 Nov 2026 11:49:34 +0000
asID:                     136787
IP address blocks:        77.243.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 08:24:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:33:18:bb:98:41:86:34:0c:1a:a3:78:c7:7b:38:19:2e:20:5f:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
        Validity
            Not Before: Nov 28 11:44:34 2025 GMT
            Not After : Nov 27 11:49:34 2026 GMT
        Subject: CN=BAC6A10A3323EA44C007E61E757F11F046B07753
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:95:ef:40:68:3c:5b:91:2d:2a:b7:c5:8a:3b:
                    cc:32:ed:52:48:92:b0:6b:63:68:12:8e:54:c3:a4:
                    df:09:22:59:71:5e:e9:7a:99:60:7f:6c:fb:37:72:
                    9d:a7:d2:e3:2f:85:26:33:06:6d:54:26:36:1e:4f:
                    9f:8f:29:b2:bc:0a:c7:ac:a7:ac:b1:ac:03:2e:a3:
                    92:05:39:2d:f1:55:ab:e6:63:a9:45:62:ac:8e:08:
                    8d:ae:43:e4:e7:3f:8e:8c:57:d2:8e:06:51:21:43:
                    22:1e:90:8f:c2:92:d5:67:92:08:ac:c9:bd:2c:26:
                    c3:2d:1e:11:a0:7c:35:ff:ff:b3:51:41:50:dd:a0:
                    2f:d7:96:a3:70:59:0b:fe:ad:65:ed:ef:97:6c:13:
                    33:64:7b:9e:75:b2:7f:a6:c2:63:8a:74:dd:0c:e2:
                    87:f6:dc:61:92:08:b4:cc:52:61:b0:81:ca:0f:10:
                    7a:ac:0e:1f:b4:b7:e5:2e:83:c6:41:b6:c1:27:07:
                    3a:9e:56:fc:ad:38:76:be:72:7d:56:ab:f3:aa:b9:
                    ee:c4:da:e8:9c:5d:9c:b0:51:47:3c:0a:08:df:d0:
                    8d:3e:44:08:66:d7:e3:13:d4:f8:da:42:56:b1:15:
                    d6:fc:5e:f6:8f:04:a3:d1:6d:e0:5d:3d:3a:44:3b:
                    e2:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:C6:A1:0A:33:23:EA:44:C0:07:E6:1E:75:7F:11:F0:46:B0:77:53
            X509v3 Authority Key Identifier:
                keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/37372e3234332e38362e302f32342d3234203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.243.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:7b:41:46:4b:52:a4:58:f4:e1:fd:c3:dc:df:87:ac:9b:df:
         ae:5b:32:98:41:3a:b7:83:dc:97:37:4a:db:f8:46:c6:9d:66:
         9d:c4:dd:ef:a4:e7:48:88:2c:0a:6c:e7:71:4a:ee:9d:5f:63:
         29:9a:23:90:e2:e9:5e:db:0b:c0:6c:07:48:8a:0a:4f:b7:97:
         1c:45:48:a3:b6:17:88:75:d0:3e:ef:b4:da:f3:fe:90:96:99:
         08:cf:e1:2f:97:a6:9b:e5:24:d2:28:6f:1b:85:28:5a:20:04:
         60:49:28:ee:99:76:1f:6a:62:a8:93:5d:2d:38:ea:ea:29:40:
         ba:a3:bd:79:f5:31:89:aa:53:a1:b5:03:d4:81:c6:63:68:0b:
         4f:e9:ea:ad:e4:0a:d0:c0:4e:c8:bc:44:f1:36:66:37:65:1b:
         32:b5:28:ea:78:20:02:1e:77:e7:b0:8b:b0:93:e5:58:18:1b:
         45:0a:8f:82:26:63:14:34:68:18:55:da:07:cc:65:aa:69:43:
         5f:31:36:48:2c:f8:c4:3b:65:c9:93:49:19:1e:52:1d:f8:ed:
         6a:99:5f:d7:e7:8d:19:40:ca:8e:d7:14:ef:09:86:a2:14:c5:
         d0:8d:c5:ff:d9:15:87:ec:cc:c9:1f:4a:f1:10:dc:8d:9e:32:
         ef:d4:18:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:54:15 2025 by rpki-client