This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS46450.roa
File:                     AS46450.roa (raw, json)
Hash identifier:          XE6Edsccnu+siug95WLLFm16yTKxm+W2484cCHnl5AI=
Subject key identifier:   36:78:45:65:42:AE:DB:4A:6B:64:E2:5F:64:1E:61:2E:19:99:0F:15
Certificate issuer:       /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial:       308994C8FBD37A07354AACD8D7702D00534BCC49
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS46450.roa
Signing time:             Fri 14 Nov 2025 15:36:14 +0000
ROA not before:           Fri 14 Nov 2025 15:31:14 +0000
ROA not after:            Fri 13 Nov 2026 15:36:14 +0000
asID:                     46450
IP address blocks:        91.124.62.0/24 maxlen: 24
                          91.124.119.0/24 maxlen: 24
                          92.113.60.0/24 maxlen: 24
                          95.134.97.0/24 maxlen: 24
                          95.135.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Dec 2025 08:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:89:94:c8:fb:d3:7a:07:35:4a:ac:d8:d7:70:2d:00:53:4b:cc:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
        Validity
            Not Before: Nov 14 15:31:14 2025 GMT
            Not After : Nov 13 15:36:14 2026 GMT
        Subject: CN=3678456542AEDB4A6B64E25F641E612E19990F15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a8:cf:f8:de:3e:1f:bd:7f:8a:37:97:e4:c0:
                    15:3e:6b:80:27:35:6c:69:51:46:a0:12:45:66:0b:
                    9e:8f:b7:6c:aa:d3:10:b9:57:ae:63:97:5a:d1:4e:
                    4b:22:0b:17:a6:a6:ab:37:a5:6e:af:05:83:35:8d:
                    ba:cb:74:56:ed:bf:a4:f0:b8:53:e0:fb:2b:3b:af:
                    a9:02:39:84:d3:fb:c2:19:7c:ca:8d:a1:43:e2:2a:
                    56:84:86:90:ed:53:e7:4d:34:63:e9:4c:58:60:21:
                    f6:db:1a:11:a6:1c:4c:97:f3:e5:c6:cf:75:16:13:
                    6e:d8:17:f6:2c:b6:ef:59:40:bf:32:c6:f2:db:51:
                    8a:0d:02:4e:30:47:e5:63:b8:38:22:75:d0:ed:04:
                    d5:65:3a:e9:37:cf:1f:34:8b:d2:57:d2:13:12:ce:
                    d5:df:aa:fd:ac:26:18:b0:4b:66:50:b6:db:a8:ee:
                    b1:2c:5c:f6:75:c5:38:7d:cf:84:19:b8:51:e6:c3:
                    a2:74:c7:1f:78:d7:f3:df:46:6f:41:ff:8e:94:6d:
                    0e:f4:d6:9b:d4:2e:71:69:70:e7:a1:3f:ab:0c:3b:
                    b2:c1:c7:6c:19:d5:25:2a:36:e6:04:b7:e2:a8:fa:
                    1b:e3:d4:c6:e0:88:8a:dd:ed:83:4b:a0:80:95:78:
                    7e:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:78:45:65:42:AE:DB:4A:6B:64:E2:5F:64:1E:61:2E:19:99:0F:15
            X509v3 Authority Key Identifier:
                keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS46450.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.124.62.0/24
                  91.124.119.0/24
                  92.113.60.0/24
                  95.134.97.0/24
                  95.135.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:31:6a:79:09:a6:9b:48:8a:3b:3b:fb:fb:8e:b0:88:c8:23:
         78:d6:f0:7c:41:d7:e6:8a:cf:c1:af:4d:2d:fc:fa:ce:11:e1:
         cb:17:9d:96:da:16:cc:ff:04:fd:10:d5:ec:35:05:fa:1a:77:
         1e:39:cf:b3:34:db:72:99:61:2e:eb:97:12:ae:bc:e1:52:6b:
         a9:85:a5:a2:0c:bf:61:f5:31:96:3b:31:7e:d8:2a:db:5b:71:
         e8:62:c1:f2:e6:46:e2:19:cb:a3:8b:d2:97:62:f7:66:3d:8b:
         e4:b7:04:d0:b0:0b:58:9f:11:ee:2d:a6:4b:59:90:c7:ad:02:
         a3:dc:2c:40:de:58:b4:36:6e:b4:73:34:bd:cc:a5:d8:bc:ad:
         77:96:a8:f6:f9:a4:d8:7d:a5:bc:a9:74:72:26:5e:5b:fe:cd:
         07:41:06:f1:f8:e2:18:c5:ff:18:8a:f6:67:85:88:85:a1:f7:
         c4:ee:d2:e1:83:b1:38:35:a7:9c:08:93:fb:b1:ef:33:88:cb:
         b9:bc:45:10:2e:c6:c9:f3:5d:48:b1:fc:6c:20:a0:01:24:3c:
         d2:83:f7:e7:0d:e5:49:02:b0:ba:41:5f:79:26:af:3e:f8:9b:
         43:cf:b4:d1:8d:80:7e:50:c8:9b:61:d6:64:b2:38:a7:5a:f6:
         54:03:b3:c9
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgIUMImUyPvTegc1SqzY13AtAFNLzEkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNTExMTQxNTMxMTRaFw0yNjExMTMxNTM2MTRaMDMxMTAvBgNV
BAMTKDM2Nzg0NTY1NDJBRURCNEE2QjY0RTI1RjY0MUU2MTJFMTk5OTBGMTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClqM/43j4fvX+KN5fkwBU+a4An
NWxpUUagEkVmC56Pt2yq0xC5V65jl1rRTksiCxempqs3pW6vBYM1jbrLdFbtv6Tw
uFPg+ys7r6kCOYTT+8IZfMqNoUPiKlaEhpDtU+dNNGPpTFhgIfbbGhGmHEyX8+XG
z3UWE27YF/Ystu9ZQL8yxvLbUYoNAk4wR+VjuDgiddDtBNVlOuk3zx80i9JX0hMS
ztXfqv2sJhiwS2ZQttuo7rEsXPZ1xTh9z4QZuFHmw6J0xx941/PfRm9B/46UbQ70
1pvULnFpcOehP6sMO7LBx2wZ1SUqNuYEt+Ko+hvj1MbgiIrd7YNLoICVeH5xAgMB
AAGjggIhMIICHTAdBgNVHQ4EFgQUNnhFZUKu20prZOJfZB5hLhmZDxUwHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTNDY0NTAucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwNwYIKwYBBQUHAQcBAf8EKDAmMCQEAgABMB4DBABbfD4D
BABbfHcDBABccTwDBABfhmEDBABfh3QwDQYJKoZIhvcNAQELBQADggEBAHgxankJ
pptIijs7+/uOsIjII3jW8HxB1+aKz8GvTS38+s4R4csXnZbaFsz/BP0Q1ew1Bfoa
dx45z7M023KZYS7rlxKuvOFSa6mFpaIMv2H1MZY7MX7YKttbcehiwfLmRuIZy6OL
0pdi92Y9i+S3BNCwC1ifEe4tpktZkMetAqPcLEDeWLQ2brRzNL3Mpdi8rXeWqPb5
pNh9pbypdHImXlv+zQdBBvH44hjF/xiK9meFiIWh98Tu0uGDsTg1p5wIk/ux7zOI
y7m8RRAuxsnzXUix/GwgoAEkPNKD9+cN5UkCsLpBX3kmrz74m0PPtNGNgH5QyJth
1mSyOKda9lQDs8k=
-----END CERTIFICATE-----
Generated at Tue Dec 16 22:30:47 2025 by rpki-client