This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS401776.roa
File:                     AS401776.roa (raw, json)
Hash identifier:          kAgGpITTAgvKyvGouIUOGF3n9aR+inZbwH1amGd2V/s=
Subject key identifier:   8B:9C:A3:44:E5:F9:A2:3E:1A:E9:9D:C1:EE:DA:18:42:C5:FD:98:E0
Certificate issuer:       /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial:       64256153191D1A0ECB59576F5A62C6E82838A0D6
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS401776.roa
Signing time:             Mon 15 Dec 2025 03:50:22 +0000
ROA not before:           Mon 15 Dec 2025 03:45:22 +0000
ROA not after:            Mon 14 Dec 2026 03:50:22 +0000
asID:                     401776
IP address blocks:        193.151.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Dec 2025 09:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:25:61:53:19:1d:1a:0e:cb:59:57:6f:5a:62:c6:e8:28:38:a0:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
        Validity
            Not Before: Dec 15 03:45:22 2025 GMT
            Not After : Dec 14 03:50:22 2026 GMT
        Subject: CN=8B9CA344E5F9A23E1AE99DC1EEDA1842C5FD98E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:4f:d9:af:7c:cc:f8:06:f4:df:0c:69:e6:91:
                    fd:20:72:0e:99:a9:94:6b:39:7b:87:70:44:7d:ff:
                    5d:c5:b7:9f:a1:5b:07:be:8d:5d:10:88:3a:7d:45:
                    42:d3:05:e6:7f:28:74:38:80:e4:16:9f:8d:48:e7:
                    09:f1:e4:09:8b:15:ba:e9:72:11:50:71:a9:81:2b:
                    4d:47:5c:0a:1d:a6:7a:d4:bd:ce:b8:ee:4b:75:8f:
                    a0:a2:9d:0d:b4:e8:c4:26:ac:f1:69:3f:5b:cc:de:
                    ef:a3:b5:18:2c:60:0b:c8:b0:63:df:a0:db:a2:f8:
                    0b:d0:32:3f:c9:80:ff:ab:da:54:04:d7:55:e3:9c:
                    ca:9c:14:7f:0f:07:0c:6c:ff:10:c8:0c:c5:14:88:
                    97:b4:66:3f:38:e7:9f:ae:6d:f9:d5:2a:8d:ac:1d:
                    77:16:08:fe:d5:4b:7a:30:e2:7e:b8:b8:66:80:73:
                    90:50:f5:0e:8f:72:81:3e:83:a7:ec:6f:94:4a:9d:
                    34:ac:f4:5d:d7:ef:98:e7:07:81:3e:ce:87:59:2a:
                    98:d7:e2:5b:29:19:0c:ff:85:1b:14:9a:da:6f:b4:
                    de:e9:9b:25:b6:6a:e7:d1:b2:59:9d:32:02:da:6e:
                    58:4c:09:7c:ad:cc:f1:9f:e7:05:70:df:03:e5:c0:
                    e7:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:9C:A3:44:E5:F9:A2:3E:1A:E9:9D:C1:EE:DA:18:42:C5:FD:98:E0
            X509v3 Authority Key Identifier:
                keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS401776.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.151.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:27:6e:92:31:63:7d:a6:a8:de:32:3f:99:a1:dd:a7:0b:69:
         d2:07:b8:0d:ef:3a:4a:5f:58:6f:75:26:d7:61:2a:86:59:48:
         fb:3f:06:c9:b3:d6:35:44:ed:d5:f3:53:8b:b7:bd:d5:b3:89:
         e4:bf:d2:fe:9a:3c:3e:97:56:a2:6d:b7:bb:55:24:3e:c5:06:
         5c:ec:fe:46:91:e6:5e:bf:fc:ea:05:5f:42:38:2c:47:9c:e0:
         d5:af:13:84:13:47:21:9b:f5:77:58:09:5f:25:64:92:56:a6:
         0e:fa:e6:3c:9b:41:43:b3:15:31:6f:8f:f0:8c:97:6f:3c:ed:
         5b:a0:c5:82:2b:04:6d:aa:1b:94:17:02:b2:e3:dd:cf:ef:2a:
         2e:d0:66:d2:41:b9:af:a5:1d:1d:e0:2c:13:c7:ac:e8:fa:64:
         10:0c:c9:e2:e0:21:74:7c:77:e8:75:e4:13:18:b4:92:f3:b7:
         4d:67:17:89:d7:61:af:ab:97:63:a8:17:1e:77:9b:80:78:31:
         f9:14:ee:74:79:60:94:7f:c3:02:a7:12:6b:ff:e4:36:91:7f:
         18:28:23:82:12:11:e1:e4:c7:93:85:62:eb:c7:c5:dc:fb:e8:
         39:fd:6c:40:b8:c6:cf:5d:72:fc:92:64:8e:3a:aa:18:21:cc:
         ef:8a:67:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 11:44:14 2025 by rpki-client