This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39322e3131392e38332e302f32342d3234203d3e20313336373837.roa
File:                     39322e3131392e38332e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier:          f0gYBWIKCH/T43aXNBxG8pYOk8eziy9iPJieE7l9quQ=
Subject key identifier:   C4:EE:30:07:16:DA:9F:BD:11:D5:7A:71:DD:97:6E:F6:FE:5C:B1:0B
Certificate issuer:       /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial:       35056EEF6AA4C201649CDC9D169E808CBCE5AD3E
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39322e3131392e38332e302f32342d3234203d3e20313336373837.roa
Signing time:             Fri 28 Nov 2025 11:49:45 +0000
ROA not before:           Fri 28 Nov 2025 11:44:45 +0000
ROA not after:            Fri 27 Nov 2026 11:49:45 +0000
asID:                     136787
IP address blocks:        92.119.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 08:24:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:05:6e:ef:6a:a4:c2:01:64:9c:dc:9d:16:9e:80:8c:bc:e5:ad:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
        Validity
            Not Before: Nov 28 11:44:45 2025 GMT
            Not After : Nov 27 11:49:45 2026 GMT
        Subject: CN=C4EE300716DA9FBD11D57A71DD976EF6FE5CB10B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:2d:ec:bc:f2:3d:ea:7b:73:f3:be:fe:c5:84:
                    ea:e3:6b:a6:26:0c:3a:d1:bb:27:88:b6:32:4b:df:
                    2e:d0:81:e0:a6:b2:fc:37:94:37:fc:18:30:d2:d3:
                    05:20:da:a0:d8:2f:ed:07:54:f3:0b:60:ad:53:3b:
                    41:65:a7:cb:79:53:5a:70:00:70:ca:53:39:82:4a:
                    c2:2d:0c:32:8a:a0:9a:03:5f:60:98:c3:e8:54:30:
                    86:b9:c2:14:88:73:7e:56:2a:9a:fd:b1:8e:59:52:
                    3d:96:74:2f:70:a9:7e:48:f6:0f:f1:e6:f1:ae:8a:
                    f4:df:38:72:12:3c:7e:ca:69:87:d1:2d:f2:59:44:
                    89:48:9a:e8:59:1d:82:dd:8e:07:dc:52:17:f9:83:
                    d6:79:f3:97:a7:cd:dd:02:b3:05:ff:40:cb:9d:c8:
                    31:93:d5:14:6d:71:eb:cc:d9:30:d0:90:4d:b5:1a:
                    f8:f4:01:18:67:cd:f8:6a:03:05:ac:26:2e:28:84:
                    20:12:9d:74:a8:3e:28:01:cd:7a:c3:5e:37:e0:b7:
                    35:72:50:92:3f:51:9f:09:a5:d4:42:29:21:6b:f4:
                    f6:4a:34:cd:7f:de:40:b6:d7:a6:ed:96:2c:23:4f:
                    fd:0b:7c:85:94:3c:02:5d:9b:2a:8f:13:28:2b:1f:
                    86:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:EE:30:07:16:DA:9F:BD:11:D5:7A:71:DD:97:6E:F6:FE:5C:B1:0B
            X509v3 Authority Key Identifier:
                keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39322e3131392e38332e302f32342d3234203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.119.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:95:7a:2a:23:e2:21:3d:2d:7a:28:05:03:c0:0a:c5:38:35:
         af:d5:1e:1e:97:9f:bb:20:6e:66:76:ce:48:33:d3:9e:e5:43:
         8c:57:f4:53:91:3d:c9:ee:64:8f:ab:21:ed:5c:df:2d:ec:8d:
         2e:a6:e0:b1:fc:3a:78:e9:0a:19:8f:7d:db:c1:35:77:f0:cd:
         0c:ec:06:32:4b:1f:c9:1e:f3:ab:8a:88:d5:21:46:6c:27:49:
         d8:99:3a:f2:a1:66:1d:81:0a:e9:6f:87:b5:d0:fb:cd:f8:e0:
         23:0f:72:fa:c5:dc:30:bf:03:a1:cc:0a:02:63:3e:3f:c9:a8:
         4c:e4:e4:81:43:0d:54:10:46:17:6b:ea:fe:33:c3:d2:43:f7:
         cc:82:4e:ee:b8:75:6a:11:f6:78:53:08:45:9c:91:fc:8e:91:
         16:b5:d2:64:a3:3c:7c:80:b4:97:78:1d:64:fb:3e:91:d8:85:
         bc:f8:85:96:0a:af:fe:09:bf:73:e1:61:4a:df:84:12:0b:37:
         c5:80:ac:b5:f3:82:ce:68:c6:51:1f:47:f3:15:4a:07:c4:8b:
         f1:98:a0:9d:38:ee:5f:2a:bf:99:b3:4d:a6:ca:cf:7d:19:ae:
         c8:75:84:29:8d:8c:bd:84:5a:dc:d2:e0:ac:9a:70:23:fd:17:
         a7:dc:e4:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:54:55 2025 by rpki-client