This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39312e3139362e36392e302f32342d3234203d3e20313336373837.roa
File:                     39312e3139362e36392e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier:          yGPZ9mACyrxqcoEW0/nSmReGgl0stmlBFxzrqdHg9Vw=
Subject key identifier:   B3:C3:16:A3:FB:4E:14:64:DC:04:C9:AA:77:0B:93:8E:3F:66:E5:6B
Certificate issuer:       /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial:       19F5E4F3F3E6D34DFD86741DECE34DC5D1C3B836
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39312e3139362e36392e302f32342d3234203d3e20313336373837.roa
Signing time:             Fri 21 Nov 2025 15:49:06 +0000
ROA not before:           Fri 21 Nov 2025 15:44:06 +0000
ROA not after:            Fri 20 Nov 2026 15:49:06 +0000
asID:                     136787
IP address blocks:        91.196.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 08:24:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:f5:e4:f3:f3:e6:d3:4d:fd:86:74:1d:ec:e3:4d:c5:d1:c3:b8:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
        Validity
            Not Before: Nov 21 15:44:06 2025 GMT
            Not After : Nov 20 15:49:06 2026 GMT
        Subject: CN=B3C316A3FB4E1464DC04C9AA770B938E3F66E56B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:0e:8e:a1:2b:53:71:13:34:c3:12:98:0f:a3:
                    7e:90:11:cd:65:5e:c7:82:a8:91:ed:f8:71:da:98:
                    6a:3d:cc:14:e0:45:ec:ee:4d:d2:2c:c1:27:61:62:
                    bb:45:13:f0:76:ff:04:3a:8e:ff:65:f8:f4:05:8a:
                    7b:c1:6b:24:11:54:0c:69:c4:7e:08:cc:9c:38:96:
                    e2:9f:ab:b3:d0:00:50:27:96:9c:7c:4a:d9:6a:28:
                    ee:f0:55:d3:41:98:cc:8b:d7:4e:0e:10:b1:05:f2:
                    d0:15:0f:61:5e:0d:6c:7c:cb:b5:eb:19:db:9f:b4:
                    84:8b:94:b1:c6:88:61:74:45:5a:e3:e0:44:c7:fd:
                    60:b2:ef:03:ca:b3:f9:d5:00:94:fb:d9:5e:6f:32:
                    14:02:1b:f4:56:63:92:0c:e8:85:4d:47:a3:79:92:
                    14:81:91:67:66:a7:f3:51:da:ae:24:bf:e7:fc:10:
                    9d:96:9d:a1:69:a8:69:95:2a:f4:e5:aa:fd:f8:66:
                    7e:4d:a1:7b:27:8e:a6:a1:03:7f:a5:c3:5d:d7:8e:
                    d4:0d:54:bc:08:69:9d:91:17:a4:7a:a2:3e:4d:92:
                    a6:06:56:a9:cd:a5:b0:35:77:40:67:18:75:1a:aa:
                    6e:66:23:9f:3f:f0:75:6a:8c:6f:07:1c:fc:c2:97:
                    43:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:C3:16:A3:FB:4E:14:64:DC:04:C9:AA:77:0B:93:8E:3F:66:E5:6B
            X509v3 Authority Key Identifier:
                keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39312e3139362e36392e302f32342d3234203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.196.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:ee:75:47:6d:46:4a:0a:f2:17:77:fa:4d:34:18:e4:08:82:
         44:a3:f3:b5:21:9d:a9:b7:89:84:d1:b7:65:27:bb:b9:97:12:
         19:37:9f:69:97:45:e1:84:5d:6d:25:d6:40:39:9e:d2:1f:c5:
         f2:64:b1:f9:dc:2b:ac:82:93:ae:9b:ae:c9:8d:fd:28:cc:f6:
         1f:e6:f6:3a:5d:8f:68:30:6c:5b:c9:7c:63:9f:16:42:a4:ba:
         43:29:db:10:e2:a2:8f:8c:01:24:57:79:f2:64:8e:33:0f:5a:
         77:92:d5:81:a4:49:a0:f4:a3:a0:30:f2:62:bf:de:80:50:4b:
         69:18:cc:ad:6a:3d:e5:b3:85:6c:48:07:01:a2:8d:74:5e:73:
         47:a8:d3:61:22:b8:a3:54:e8:c7:50:18:4a:59:8b:68:f0:22:
         f9:62:21:db:50:ec:1b:e5:93:47:b2:6a:ff:b5:61:cc:16:68:
         60:8f:d0:f6:0f:23:f6:3a:69:de:51:76:3b:6e:30:09:a7:53:
         fb:93:a7:22:8d:7d:28:15:fb:c3:fe:c0:63:cb:4e:b3:d9:d3:
         f9:97:0b:b7:f6:bd:62:93:30:28:54:c1:a1:68:94:3a:c2:10:
         44:87:0d:d7:aa:76:7d:2a:25:9f:67:4e:a2:7d:52:9e:ad:a2:
         cf:c8:07:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:54:53 2025 by rpki-client