This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e372e302f32342d3332203d3e20313431393935.roa
File:                     3135352e3133332e372e302f32342d3332203d3e20313431393935.roa (raw, json)
Hash identifier:          o6NV1D2gppW2BauY85eRWyuhNFGRoDOz5e2pKiNZzsw=
Subject key identifier:   E4:CA:21:41:91:14:1D:88:E8:1D:2E:87:D3:ED:ED:CF:5B:F9:FF:27
Certificate issuer:       /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial:       667094E4BE755456E10165F6113252B80C3127AE
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e372e302f32342d3332203d3e20313431393935.roa
Signing time:             Mon 29 Dec 2025 09:51:07 +0000
ROA not before:           Mon 29 Dec 2025 09:46:07 +0000
ROA not after:            Mon 28 Dec 2026 09:51:07 +0000
asID:                     141995
IP address blocks:        155.133.7.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 15:51:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:70:94:e4:be:75:54:56:e1:01:65:f6:11:32:52:b8:0c:31:27:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
        Validity
            Not Before: Dec 29 09:46:07 2025 GMT
            Not After : Dec 28 09:51:07 2026 GMT
        Subject: CN=E4CA214191141D88E81D2E87D3EDEDCF5BF9FF27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b4:6d:8d:58:de:12:b7:19:14:96:48:2c:45:
                    1c:c8:73:df:6e:94:c4:02:13:5d:a1:f7:fb:bb:5d:
                    7f:bb:1a:47:13:cc:cb:9a:cd:08:da:02:c4:6e:d9:
                    12:f2:f6:b0:a9:49:73:3f:05:a1:0c:14:fe:3a:b6:
                    15:5a:d5:f4:1c:42:94:7c:50:7d:e3:0d:03:96:c6:
                    1a:ad:4f:12:9c:02:01:a3:14:30:6a:ec:46:13:14:
                    1e:9d:07:12:3a:ea:ef:4f:2b:78:d5:7b:1d:9f:81:
                    3e:14:c0:ea:60:79:70:54:11:d9:ac:b2:e8:0a:a0:
                    04:0e:7a:7e:cf:17:c7:9a:ab:04:fa:6c:c6:68:31:
                    b0:a4:a3:0d:82:fe:f1:c1:fa:76:6b:55:b1:f1:2f:
                    43:62:38:ff:c0:8c:fa:b7:19:0c:fc:b3:9c:81:e1:
                    f2:fb:5a:20:ee:d2:47:f4:aa:a6:f4:ba:38:b6:29:
                    f4:b1:af:7b:ec:56:36:79:3b:b2:b9:fe:bc:7a:37:
                    e3:07:91:8e:c5:79:f7:78:2b:5a:33:1b:6d:ca:b8:
                    bb:bb:af:b7:3d:23:06:3b:72:a9:fe:9d:1d:ea:24:
                    4b:9c:14:29:4e:55:c4:75:45:ff:c7:e0:30:52:2b:
                    45:ba:9d:b0:68:c5:6d:54:d0:3b:ee:85:5d:cc:df:
                    bc:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:CA:21:41:91:14:1D:88:E8:1D:2E:87:D3:ED:ED:CF:5B:F9:FF:27
            X509v3 Authority Key Identifier:
                keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e372e302f32342d3332203d3e20313431393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.133.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:91:cf:34:27:ab:37:51:db:64:f2:92:69:60:b8:d0:65:4d:
         e9:48:eb:a6:f6:47:f6:6f:49:e5:24:c4:02:e9:b0:2e:7e:70:
         4a:e1:f0:66:d3:9b:5c:69:d4:d1:f8:cf:c5:17:45:24:55:48:
         d3:4c:f7:80:23:ab:91:4d:d5:46:d5:f6:75:aa:4c:0a:a9:00:
         5c:14:6c:77:de:2e:3e:9c:4d:50:78:30:9d:84:9a:76:67:cf:
         f9:40:c7:fe:13:f9:1c:c5:33:2a:50:e4:32:2d:11:dd:c1:06:
         7e:f5:1b:28:3d:3d:e0:53:9f:99:6a:96:5e:ef:2a:f2:0e:78:
         22:16:32:2e:a6:41:ab:29:6e:13:b4:97:bc:f0:79:e6:a5:5f:
         ce:03:b1:c3:11:bd:a9:18:ef:74:70:34:95:90:b4:da:46:a8:
         6a:98:41:0b:3d:ed:cd:af:b9:d4:38:64:a7:36:b1:18:db:f2:
         ec:2c:df:8b:1d:a4:d9:03:08:a1:f5:bd:ae:f1:96:ad:f5:d2:
         d7:79:4f:ee:0c:a1:32:c3:f9:f5:2c:33:c7:e9:c7:7d:92:e1:
         43:57:f7:6e:6f:6f:d3:de:00:f2:ba:2d:3a:9b:fc:98:d5:f7:
         d3:47:32:dd:cb:50:6d:0b:a8:15:2b:75:ad:41:c4:e6:b8:38:
         58:e6:ec:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:59:59 2026 by rpki-client