This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf akane.maru.co.jp/repo/1073c6/8/326130363a34303a3a2f32392d3438203d3e2039363633.roa
File:                     326130363a34303a3a2f32392d3438203d3e2039363633.roa (raw, json)
Hash identifier:          AN707tvAapePx0y+hdXODpW2Qk/lxngri9dodU0HE50=
Subject key identifier:   8B:E4:AB:42:60:F4:63:88:1B:74:60:16:0A:FF:2C:EE:C7:14:14:E3
Certificate issuer:       /CN=bb6ecaf29f33d987ebaddceb29eda7691aa6709f
Certificate serial:       E0B495D7E9CE1C003137A92B10ABF86CE8BE35
Authority key identifier: BB:6E:CA:F2:9F:33:D9:87:EB:AD:DC:EB:29:ED:A7:69:1A:A6:70:9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u27K8p8z2YfrrdzrKe2naRqmcJ8.cer
Subject info access:      rsync://akane.maru.co.jp/repo/1073c6/8/326130363a34303a3a2f32392d3438203d3e2039363633.roa
Signing time:             Fri 14 Nov 2025 18:42:44 +0000
ROA not before:           Fri 14 Nov 2025 18:37:44 +0000
ROA not after:            Fri 13 Nov 2026 18:42:44 +0000
asID:                     9663
IP address blocks:        2a06:40::/29 maxlen: 48
Validation:               OK
Signature path:           rsync://akane.maru.co.jp/repo/1073c6/8/BB6ECAF29F33D987EBADDCEB29EDA7691AA6709F.crl
                          rsync://akane.maru.co.jp/repo/1073c6/8/BB6ECAF29F33D987EBADDCEB29EDA7691AA6709F.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u27K8p8z2YfrrdzrKe2naRqmcJ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 26 Nov 2025 00:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            e0:b4:95:d7:e9:ce:1c:00:31:37:a9:2b:10:ab:f8:6c:e8:be:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb6ecaf29f33d987ebaddceb29eda7691aa6709f
        Validity
            Not Before: Nov 14 18:37:44 2025 GMT
            Not After : Nov 13 18:42:44 2026 GMT
        Subject: CN=8BE4AB4260F463881B7460160AFF2CEEC71414E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:50:87:7a:e5:d7:81:ee:49:53:e8:7b:47:c8:
                    8d:af:77:b5:e5:4a:28:bb:1c:cf:a7:96:42:cd:8f:
                    e6:06:ae:04:99:b2:b0:a8:ab:ab:72:29:d5:15:47:
                    39:a3:7f:32:ef:00:5c:d3:69:ee:e1:be:e9:8b:57:
                    12:a8:b9:76:04:af:ca:58:a5:79:bf:79:10:28:aa:
                    40:8c:bc:77:dd:f5:df:bb:2d:f6:5a:98:14:b0:6e:
                    26:a6:2d:59:6b:c3:5b:7a:06:29:ab:db:77:aa:4d:
                    15:85:cf:69:61:43:a5:bf:7f:13:24:7f:bc:e3:a0:
                    ba:0c:5c:18:35:ba:d1:63:73:b7:8a:b6:14:0e:fc:
                    f4:60:48:0f:31:ba:65:d0:6d:d8:00:af:38:55:6a:
                    7e:77:21:4f:a8:1b:35:42:43:dd:b0:43:bb:c5:f1:
                    48:03:90:3e:6a:69:41:c9:d3:4a:49:e0:50:e7:d8:
                    f2:69:56:a1:01:bd:43:91:32:6a:64:de:66:c9:96:
                    f0:7b:39:6a:f8:d0:16:32:d2:f9:7f:bd:21:75:6d:
                    6d:dc:db:7c:2d:43:af:c7:29:1b:b6:3d:37:44:48:
                    0e:bb:1d:f4:50:06:74:00:5e:37:f3:2d:1c:39:f8:
                    33:4a:2a:34:c4:82:f7:a0:c8:86:fa:01:41:37:b8:
                    2a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:E4:AB:42:60:F4:63:88:1B:74:60:16:0A:FF:2C:EE:C7:14:14:E3
            X509v3 Authority Key Identifier:
                keyid:BB:6E:CA:F2:9F:33:D9:87:EB:AD:DC:EB:29:ED:A7:69:1A:A6:70:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://akane.maru.co.jp/repo/1073c6/8/BB6ECAF29F33D987EBADDCEB29EDA7691AA6709F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u27K8p8z2YfrrdzrKe2naRqmcJ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://akane.maru.co.jp/repo/1073c6/8/326130363a34303a3a2f32392d3438203d3e2039363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:40::/29

    Signature Algorithm: sha256WithRSAEncryption
         30:08:10:45:73:78:ee:72:18:f1:08:b4:f5:29:f5:48:d8:67:
         af:74:02:1e:2b:65:9d:74:4f:85:52:77:46:66:14:16:39:ae:
         d4:fa:d7:0c:11:2b:0c:b2:63:46:77:59:0c:cb:81:8c:66:75:
         c6:11:7e:b0:aa:14:b3:31:1e:d6:24:a5:ee:14:f6:37:cc:a1:
         4c:07:ca:4e:92:d3:e6:e8:70:6c:95:40:6b:41:7a:af:de:ec:
         f3:39:8e:b0:08:d5:76:81:a4:4b:b3:48:b0:e7:e6:15:52:8d:
         85:ec:cc:80:cc:74:f7:1d:40:2f:35:87:06:cc:85:a7:d7:90:
         46:2d:4c:72:8c:0c:37:a4:cc:ff:af:c2:d1:53:d6:c6:8d:a1:
         78:f7:3e:05:49:e7:c1:a5:0c:ca:c6:1f:43:be:fd:5b:60:38:
         1f:0f:89:04:57:fd:18:1e:8b:6f:e8:01:28:7d:df:b1:ed:3b:
         4c:a1:ca:ca:59:6a:30:ed:f2:a1:3d:fc:51:79:c2:db:16:cb:
         70:11:8a:96:7d:20:a1:96:30:68:ca:a9:f6:9c:41:0a:bf:da:
         bf:c8:df:b0:63:e9:6b:09:ef:1c:11:16:93:01:5a:96:2a:06:
         1d:a3:80:04:8a:37:27:84:13:6e:6a:c3:a0:39:03:61:5e:eb:
         79:43:37:c3
-----BEGIN CERTIFICATE-----
MIIEyTCCA7GgAwIBAgIUAOC0ldfpzhwAMTepKxCr+GzovjUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYmI2ZWNhZjI5ZjMzZDk4N2ViYWRkY2ViMjllZGE3Njkx
YWE2NzA5ZjAeFw0yNTExMTQxODM3NDRaFw0yNjExMTMxODQyNDRaMDMxMTAvBgNV
BAMTKDhCRTRBQjQyNjBGNDYzODgxQjc0NjAxNjBBRkYyQ0VFQzcxNDE0RTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRUId65deB7klT6HtHyI2vd7Xl
Sii7HM+nlkLNj+YGrgSZsrCoq6tyKdUVRzmjfzLvAFzTae7hvumLVxKouXYEr8pY
pXm/eRAoqkCMvHfd9d+7LfZamBSwbiamLVlrw1t6Bimr23eqTRWFz2lhQ6W/fxMk
f7zjoLoMXBg1utFjc7eKthQO/PRgSA8xumXQbdgArzhVan53IU+oGzVCQ92wQ7vF
8UgDkD5qaUHJ00pJ4FDn2PJpVqEBvUORMmpk3mbJlvB7OWr40BYy0vl/vSF1bW3c
23wtQ6/HKRu2PTdESA67HfRQBnQAXjfzLRw5+DNKKjTEgvegyIb6AUE3uCqlAgMB
AAGjggHTMIIBzzAdBgNVHQ4EFgQUi+SrQmD0Y4gbdGAWCv8s7scUFOMwHwYDVR0j
BBgwFoAUu27K8p8z2YfrrdzrKe2naRqmcJ8wDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8vYWthbmUubWFydS5jby5qcC9yZXBvLzEwNzNj
Ni84L0JCNkVDQUYyOUYzM0Q5ODdFQkFERENFQjI5RURBNzY5MUFBNjcwOUYuY3Js
MGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC91MjdLOHA4ejJZZnJyZHpyS2UybmFScW1j
SjguY2VyMHUGCCsGAQUFBwELBGkwZzBlBggrBgEFBQcwC4ZZcnN5bmM6Ly9ha2Fu
ZS5tYXJ1LmNvLmpwL3JlcG8vMTA3M2M2LzgvMzI2MTMwMzYzYTM0MzAzYTNhMmYz
MjM5MmQzNDM4MjAzZDNlMjAzOTM2MzYzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFAyoGAEAwDQYJKoZI
hvcNAQELBQADggEBADAIEEVzeO5yGPEItPUp9UjYZ690Ah4rZZ10T4VSd0ZmFBY5
rtT61wwRKwyyY0Z3WQzLgYxmdcYRfrCqFLMxHtYkpe4U9jfMoUwHyk6S0+bocGyV
QGtBeq/e7PM5jrAI1XaBpEuzSLDn5hVSjYXszIDMdPcdQC81hwbMhafXkEYtTHKM
DDekzP+vwtFT1saNoXj3PgVJ58GlDMrGH0O+/VtgOB8PiQRX/Rgei2/oASh937Ht
O0yhyspZajDt8qE9/FF5wtsWy3ARipZ9IKGWMGjKqfacQQq/2r/I37Bj6WsJ7xwR
FpMBWpYqBh2jgASKNyeEE25qw6A5A2Fe63lDN8M=
-----END CERTIFICATE-----
Generated at Tue Nov 25 15:40:01 2025 by rpki-client