This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.rp.ki/repo/clonoth/1/326131333a376134323a3330303a3a2f34302d3438203d3e203134363138.roa
File:                     326131333a376134323a3330303a3a2f34302d3438203d3e203134363138.roa (raw, json)
Hash identifier:          OCminjwmZh7lq+WgeZFV1Nn5NIp84rJ8qzJwmmWMbd8=
Subject key identifier:   53:64:6E:43:34:89:C7:DD:C1:3B:B6:FE:C5:BD:9F:95:5B:C5:50:20
Certificate issuer:       /CN=c23a7169f6499dd2815c9178a890bc4c0514ddf9
Certificate serial:       4F8B0A6FD37607F60F11C08EDF082E60BCFFF9D3
Authority key identifier: C2:3A:71:69:F6:49:9D:D2:81:5C:91:78:A8:90:BC:4C:05:14:DD:F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wjpxafZJndKBXJF4qJC8TAUU3fk.cer
Subject info access:      rsync://rsync.rp.ki/repo/clonoth/1/326131333a376134323a3330303a3a2f34302d3438203d3e203134363138.roa
Signing time:             Fri 16 Jan 2026 20:19:54 +0000
ROA not before:           Fri 16 Jan 2026 20:14:54 +0000
ROA not after:            Fri 15 Jan 2027 20:19:54 +0000
asID:                     14618
IP address blocks:        2a13:7a42:300::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.crl
                          rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wjpxafZJndKBXJF4qJC8TAUU3fk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 17 Jan 2026 21:43:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:8b:0a:6f:d3:76:07:f6:0f:11:c0:8e:df:08:2e:60:bc:ff:f9:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c23a7169f6499dd2815c9178a890bc4c0514ddf9
        Validity
            Not Before: Jan 16 20:14:54 2026 GMT
            Not After : Jan 15 20:19:54 2027 GMT
        Subject: CN=53646E433489C7DDC13BB6FEC5BD9F955BC55020
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f8:fe:1c:77:06:2c:2c:b9:b3:c5:c5:b3:51:
                    d6:85:de:ed:04:f9:36:e6:26:95:4a:ef:e6:49:91:
                    a4:dc:3d:2f:f8:67:4f:1f:45:5b:1d:d0:12:ee:45:
                    4f:02:ae:b5:1b:c4:e1:08:b9:bc:ef:11:de:fe:dd:
                    64:4c:94:d6:fc:6b:3f:6c:37:48:25:b4:8c:c3:56:
                    5a:4c:c8:57:ad:da:57:f9:e7:fb:3e:f7:fe:2f:5f:
                    59:ba:14:b0:12:3c:51:98:42:47:65:39:a7:5d:79:
                    18:5d:f0:1b:1b:eb:72:81:88:cb:89:5e:ba:7d:ab:
                    91:1b:c8:38:98:73:2a:03:cb:73:4f:b3:3f:22:81:
                    88:f4:a5:a0:4b:e6:93:2c:08:66:d8:14:8b:57:81:
                    08:e5:2e:f6:0d:06:8c:46:3b:87:8b:9c:65:5d:56:
                    c1:97:c1:30:6b:d4:81:fb:7a:50:2a:b6:67:eb:88:
                    5e:0c:1d:14:6e:da:38:ab:43:96:c3:b8:d6:73:e9:
                    4f:5e:e0:30:cf:f0:0f:71:f7:27:86:0c:39:71:6b:
                    9f:d3:19:cf:09:0f:33:22:b7:0d:ee:5d:a9:73:e9:
                    5c:ec:fb:4b:d9:25:26:2c:2f:83:04:fd:1f:db:3f:
                    5e:12:50:fc:eb:a6:04:e2:d8:04:4e:97:1c:de:a7:
                    cd:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:64:6E:43:34:89:C7:DD:C1:3B:B6:FE:C5:BD:9F:95:5B:C5:50:20
            X509v3 Authority Key Identifier:
                keyid:C2:3A:71:69:F6:49:9D:D2:81:5C:91:78:A8:90:BC:4C:05:14:DD:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjpxafZJndKBXJF4qJC8TAUU3fk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/clonoth/1/326131333a376134323a3330303a3a2f34302d3438203d3e203134363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:7a42:300::/40

    Signature Algorithm: sha256WithRSAEncryption
         67:b4:84:4a:85:42:b8:cd:dc:3a:65:79:35:73:23:5a:aa:05:
         e6:83:72:fd:fa:99:dc:e5:f6:e0:d0:b0:d3:a7:4d:9a:56:78:
         80:e4:e4:bf:c3:9a:55:7b:41:f9:dc:1a:1f:c7:37:dd:77:87:
         87:78:d2:94:3f:e7:e4:44:02:d0:4a:11:cd:0a:d2:19:2d:b8:
         4a:0e:11:c4:7e:79:8e:ce:bd:50:86:ec:57:18:d9:61:29:5d:
         c7:c5:8e:04:f0:18:51:cb:1b:92:9a:6e:82:36:0d:34:45:e7:
         b6:e2:c3:1d:9a:65:60:1b:b2:77:35:50:99:35:6d:aa:b0:2e:
         e6:97:67:66:fd:1a:1a:96:7d:89:4b:a6:53:f5:84:38:84:4a:
         b8:5c:5d:8c:a9:a0:c6:2a:57:89:4f:11:51:5a:9a:d5:e1:c3:
         ca:a9:2e:9e:bf:e0:3e:31:36:7d:bb:c2:a8:ca:d5:f6:5a:1a:
         17:b6:b1:08:44:3e:9a:75:7e:30:fa:53:70:62:6b:dc:f7:26:
         10:dd:fb:b1:fb:31:80:6d:f7:4b:bc:64:80:1f:32:7c:dc:ae:
         47:13:57:ff:81:2a:e7:04:23:eb:89:dc:ab:f6:53:a0:78:6c:
         98:17:05:9b:86:6e:5b:d1:e3:d3:98:81:3f:26:94:5c:a3:b7:
         d6:83:b6:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 17 11:50:34 2026 by rpki-client