This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39322e3131392e38322e302f32342d3234203d3e20313336373837.roa
File:                     39322e3131392e38322e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier:          crG2wV8cCLf4AbArbKtps09QFrCmrFgBIfY2BaHii9I=
Subject key identifier:   1F:9C:EF:DB:93:95:09:F2:C9:18:7E:A0:4E:61:4B:EC:DD:FF:67:BF
Certificate issuer:       /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial:       5ED4EE0EDAEFC90DD1334B0D5BAD2262BB67440C
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39322e3131392e38322e302f32342d3234203d3e20313336373837.roa
Signing time:             Fri 28 Nov 2025 11:49:24 +0000
ROA not before:           Fri 28 Nov 2025 11:44:24 +0000
ROA not after:            Fri 27 Nov 2026 11:49:24 +0000
asID:                     136787
IP address blocks:        92.119.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:d4:ee:0e:da:ef:c9:0d:d1:33:4b:0d:5b:ad:22:62:bb:67:44:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
        Validity
            Not Before: Nov 28 11:44:24 2025 GMT
            Not After : Nov 27 11:49:24 2026 GMT
        Subject: CN=1F9CEFDB939509F2C9187EA04E614BECDDFF67BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:99:e6:b9:90:02:fd:1e:8a:85:7b:72:c8:0a:
                    64:2f:06:19:31:82:97:53:86:a5:fa:7e:ca:62:7b:
                    b0:c4:42:96:e6:5c:86:0a:6a:f1:4b:06:44:84:dc:
                    96:84:fc:06:93:78:76:04:1d:5c:cd:d2:71:48:07:
                    79:c8:e4:e9:4b:0b:15:50:ae:52:7c:b9:e9:18:3e:
                    e3:a5:d6:a9:f8:bd:1f:89:17:ec:af:78:c8:cf:f0:
                    15:4a:63:81:fc:ee:6c:51:a6:89:0a:a5:77:d3:8c:
                    0d:3b:be:9c:e6:89:33:2e:36:e5:57:24:b5:f9:84:
                    88:85:4a:d2:d8:4e:09:2d:4a:3d:7c:bd:c5:f1:0f:
                    eb:32:05:55:59:d8:0e:1e:f1:15:14:57:9e:93:b9:
                    70:15:00:b0:d3:d4:d2:f7:47:45:79:9f:54:03:b9:
                    d7:9d:7a:ae:ff:5a:4c:2d:58:8c:03:47:be:ef:b5:
                    62:7a:9a:ec:7f:7e:ed:a6:48:ec:93:63:73:08:ed:
                    a7:2b:53:85:47:6a:d1:96:36:f3:f9:cc:48:6b:96:
                    16:e1:aa:87:40:e5:94:76:2c:f9:8a:91:41:71:cd:
                    89:a0:a4:72:a2:3c:ee:57:08:44:93:19:dd:93:14:
                    78:10:90:af:31:d4:cb:e7:93:e9:6a:1e:f6:a9:67:
                    c9:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:9C:EF:DB:93:95:09:F2:C9:18:7E:A0:4E:61:4B:EC:DD:FF:67:BF
            X509v3 Authority Key Identifier:
                keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39322e3131392e38322e302f32342d3234203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.119.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d4:6c:2d:0b:22:5a:bc:08:be:80:2b:1e:d4:14:45:d5:ea:5e:
         1f:fd:45:e6:b5:f6:46:4f:54:11:5e:09:5b:71:86:28:d4:23:
         2d:39:50:a6:26:4a:67:2b:47:ef:d9:a2:f0:77:39:f7:2a:d8:
         c7:7a:0f:98:05:2c:e2:fe:48:7c:0f:22:4a:a2:a3:e5:af:bf:
         49:35:0f:8f:6d:bd:06:1f:52:49:34:42:84:4d:bb:13:8f:92:
         fe:a6:8c:20:74:a8:6d:47:b6:a0:a7:3c:22:b1:6f:b1:6e:2c:
         5e:9b:cb:da:6f:50:31:d3:a3:07:3d:b1:26:3e:f5:2a:b8:87:
         a0:ee:26:54:94:18:f3:0e:9d:9f:1d:20:c3:41:50:fd:c8:b0:
         06:90:6e:25:ae:19:60:94:5a:7f:2c:37:2e:3f:18:a6:6d:ed:
         04:25:74:72:68:7a:78:92:aa:71:3b:5b:5e:7a:fa:39:3f:a7:
         0b:45:0b:2d:71:48:b6:a1:c6:3e:31:da:23:20:de:13:d2:68:
         1c:1c:6c:c9:ed:55:ed:2a:08:4b:76:46:09:a8:0d:1e:a1:b2:
         ce:17:78:cd:2c:c8:36:89:68:0a:96:73:b4:15:a8:fa:c8:52:
         87:03:1f:28:32:0b:83:83:c5:bc:5f:86:03:58:47:60:95:18:
         b1:1a:3d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:32:05 2025 by rpki-client