This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.rp.ki/repo/clonoth/1/326131333a376134323a3330303a3a2f34302d3438203d3e203136353039.roa
File:                     326131333a376134323a3330303a3a2f34302d3438203d3e203136353039.roa (raw, json)
Hash identifier:          OUajEHBBbRsewL9OwS+Pvj/T9rrSLXcsIY9ay83jvJk=
Subject key identifier:   66:9F:C3:89:28:6A:C8:B2:BA:12:F5:45:B5:FF:C6:11:A3:2F:03:F1
Certificate issuer:       /CN=c23a7169f6499dd2815c9178a890bc4c0514ddf9
Certificate serial:       7417FE876B746DDD1239FCC960BEDDCDF5D8514B
Authority key identifier: C2:3A:71:69:F6:49:9D:D2:81:5C:91:78:A8:90:BC:4C:05:14:DD:F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wjpxafZJndKBXJF4qJC8TAUU3fk.cer
Subject info access:      rsync://rsync.rp.ki/repo/clonoth/1/326131333a376134323a3330303a3a2f34302d3438203d3e203136353039.roa
Signing time:             Fri 16 Jan 2026 20:19:37 +0000
ROA not before:           Fri 16 Jan 2026 20:14:37 +0000
ROA not after:            Fri 15 Jan 2027 20:19:37 +0000
asID:                     16509
IP address blocks:        2a13:7a42:300::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.crl
                          rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wjpxafZJndKBXJF4qJC8TAUU3fk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 17 Jan 2026 21:43:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:17:fe:87:6b:74:6d:dd:12:39:fc:c9:60:be:dd:cd:f5:d8:51:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c23a7169f6499dd2815c9178a890bc4c0514ddf9
        Validity
            Not Before: Jan 16 20:14:37 2026 GMT
            Not After : Jan 15 20:19:37 2027 GMT
        Subject: CN=669FC389286AC8B2BA12F545B5FFC611A32F03F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:66:47:cd:45:00:43:a0:1e:1f:8f:23:eb:3c:
                    d1:01:19:67:31:4a:a2:f1:f4:33:8c:a8:45:31:35:
                    7a:b8:17:c3:4a:3a:88:cd:1e:55:ee:b7:80:34:0d:
                    39:90:0d:49:f5:66:b0:7d:c9:6a:d9:4e:90:3f:18:
                    bd:0a:33:62:63:f9:0f:a0:30:49:67:51:1f:28:e1:
                    55:26:40:41:b1:5c:6d:65:7e:ab:0f:12:2a:5a:34:
                    64:84:01:06:1f:4f:d0:f6:f9:e3:f6:3a:12:92:95:
                    6d:6c:ab:78:07:2d:20:58:0e:78:d4:6e:da:f9:8c:
                    b0:e9:cc:47:cc:cb:48:24:e0:9b:12:f0:8d:58:07:
                    46:a5:40:c7:db:aa:35:12:a5:e5:b0:9b:28:ba:10:
                    6d:c9:9e:65:39:73:08:39:10:bd:fa:3e:fe:e3:b7:
                    8a:8a:dd:8e:e4:bc:21:56:10:75:a4:85:4d:e1:36:
                    06:1a:e7:f9:ed:e6:44:04:b0:e4:99:ef:0c:49:8c:
                    8d:76:48:ce:20:8c:91:f1:cd:c1:56:39:63:48:ef:
                    e4:38:15:44:25:63:09:7e:ff:67:ae:c8:cd:f4:2d:
                    47:2a:e7:49:7a:c4:5e:4f:6e:ee:be:f9:99:34:fd:
                    e4:31:87:1f:32:a1:fc:e1:d6:cc:18:33:98:a6:12:
                    64:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:9F:C3:89:28:6A:C8:B2:BA:12:F5:45:B5:FF:C6:11:A3:2F:03:F1
            X509v3 Authority Key Identifier:
                keyid:C2:3A:71:69:F6:49:9D:D2:81:5C:91:78:A8:90:BC:4C:05:14:DD:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjpxafZJndKBXJF4qJC8TAUU3fk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/clonoth/1/326131333a376134323a3330303a3a2f34302d3438203d3e203136353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:7a42:300::/40

    Signature Algorithm: sha256WithRSAEncryption
         d0:82:16:f4:f5:9a:6b:dc:c2:d1:1e:e0:e1:fc:08:77:44:01:
         c1:f6:f3:4a:f7:a6:cc:86:dc:e7:a2:65:a1:28:b6:ae:e3:4a:
         e1:20:d3:7c:6f:e6:08:44:19:32:f7:ae:35:33:7a:76:5c:a5:
         d4:2d:00:5f:a3:b9:56:0e:64:7b:13:73:e9:40:ce:0a:b2:5d:
         9f:1f:c5:7e:00:fe:d4:14:5b:a7:3c:33:71:4c:9a:84:ac:1d:
         38:3a:6e:cc:16:b5:4d:49:94:88:89:d0:2a:f1:cf:58:63:9b:
         40:88:b3:64:a4:ff:5e:1e:8c:4a:22:93:fe:d0:a0:58:cf:2d:
         a0:19:b0:74:05:35:41:7f:8b:c9:8e:a5:4d:fe:ab:d6:a0:f6:
         82:10:18:86:be:37:41:bd:a7:1a:55:23:f5:50:8b:33:e9:5d:
         8a:b4:0e:b8:02:1c:fa:af:f1:b6:57:5b:60:49:a5:e5:bb:05:
         b5:8b:a7:17:03:3e:18:36:29:aa:e1:2f:f4:8d:8b:7d:4e:9c:
         a3:b8:f5:74:5c:dc:8e:6f:e9:6c:4e:2a:0b:85:3f:95:15:26:
         5d:94:f2:70:3e:34:36:77:f0:ff:b6:34:1c:dc:a3:a6:97:a7:
         a3:65:67:27:a5:7d:98:35:0c:2a:e5:52:66:e7:70:67:9e:82:
         02:15:a2:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 17 08:23:02 2026 by rpki-client