This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo.rpki.space/repo/pfcloud-hostarray/1/326131343a3763303a373030303a3a2f33362d3336203d3e20323134393135.roa
File:                     326131343a3763303a373030303a3a2f33362d3336203d3e20323134393135.roa (raw, json)
Hash identifier:          I+lwtvXdNzefCDnyaEEsl14OvcvE6SoWq5u6jb+Yks8=
Subject key identifier:   28:7F:8C:DF:EE:CF:20:83:3B:16:3F:73:41:A4:34:3C:79:AD:89:98
Certificate issuer:       /CN=03652B3C78925180B74895BD527DF7C661F7318A
Certificate serial:       0931188F874AAB31446F422925FC6EB00DED56A8
Authority key identifier: 03:65:2B:3C:78:92:51:80:B7:48:95:BD:52:7D:F7:C6:61:F7:31:8A
Authority info access:    rsync://repo.rpki.space/repo/Infiniroute/1/03652B3C78925180B74895BD527DF7C661F7318A.cer
Subject info access:      rsync://repo.rpki.space/repo/pfcloud-hostarray/1/326131343a3763303a373030303a3a2f33362d3336203d3e20323134393135.roa
Signing time:             Sun 18 Jan 2026 01:06:54 +0000
ROA not before:           Sun 18 Jan 2026 01:01:54 +0000
ROA not after:            Sun 17 Jan 2027 01:06:54 +0000
asID:                     214915
IP address blocks:        2a14:7c0:7000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://repo.rpki.space/repo/pfcloud-hostarray/1/03652B3C78925180B74895BD527DF7C661F7318A.crl
                          rsync://repo.rpki.space/repo/pfcloud-hostarray/1/03652B3C78925180B74895BD527DF7C661F7318A.mft
                          rsync://repo.rpki.space/repo/Infiniroute/1/03652B3C78925180B74895BD527DF7C661F7318A.cer
                          rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
                          rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 02:52:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:31:18:8f:87:4a:ab:31:44:6f:42:29:25:fc:6e:b0:0d:ed:56:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03652B3C78925180B74895BD527DF7C661F7318A
        Validity
            Not Before: Jan 18 01:01:54 2026 GMT
            Not After : Jan 17 01:06:54 2027 GMT
        Subject: CN=287F8CDFEECF20833B163F7341A4343C79AD8998
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:bb:cd:aa:ed:2d:38:ea:e0:d0:98:bc:6c:5d:
                    da:62:a1:73:1d:04:8d:e4:75:fa:ef:95:59:fb:e8:
                    f0:c8:13:fa:fd:4b:ca:1d:18:d3:80:6f:b4:16:17:
                    01:ba:a4:bc:33:7f:ae:f2:83:f3:a5:ab:66:66:2e:
                    8b:17:12:53:d6:57:00:66:f8:f7:cf:fd:0b:1d:61:
                    9e:b6:f8:dc:62:c2:5a:2b:e7:a3:4b:1c:d5:43:6e:
                    ae:d7:51:c4:df:50:97:72:6e:24:46:23:6b:2a:8d:
                    81:19:99:b7:fc:17:ec:77:d2:da:6a:bf:a9:c2:e9:
                    06:11:19:9b:c8:8b:15:fe:37:30:07:4b:09:60:1c:
                    ed:9d:5f:17:0e:2b:01:14:4b:bb:65:67:26:86:ee:
                    19:fa:ce:fc:40:96:df:74:e8:fd:ae:a8:82:3e:a2:
                    8a:dd:0a:5f:20:b3:ab:da:28:d4:02:f3:0f:f0:cd:
                    88:78:36:60:64:b8:9f:9a:01:3e:e4:6c:96:41:df:
                    31:89:4b:94:cc:22:29:7c:b9:70:c9:3b:8a:87:83:
                    a6:88:b8:49:4f:fc:11:f7:45:20:d3:9a:db:fa:ff:
                    46:10:3d:e0:6a:56:f8:8e:19:e7:52:55:58:11:0a:
                    29:17:e0:8e:ae:7e:1c:30:57:0c:07:27:9e:e3:ee:
                    59:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:7F:8C:DF:EE:CF:20:83:3B:16:3F:73:41:A4:34:3C:79:AD:89:98
            X509v3 Authority Key Identifier:
                keyid:03:65:2B:3C:78:92:51:80:B7:48:95:BD:52:7D:F7:C6:61:F7:31:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo.rpki.space/repo/pfcloud-hostarray/1/03652B3C78925180B74895BD527DF7C661F7318A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo.rpki.space/repo/Infiniroute/1/03652B3C78925180B74895BD527DF7C661F7318A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo.rpki.space/repo/pfcloud-hostarray/1/326131343a3763303a373030303a3a2f33362d3336203d3e20323134393135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7c0:7000::/36

    Signature Algorithm: sha256WithRSAEncryption
         1b:c7:f8:9c:4c:49:46:13:9d:a7:25:a9:57:7b:b9:ad:26:5d:
         57:4a:38:c2:b0:d5:c6:4b:c2:36:cd:62:9c:6e:43:0a:7b:5f:
         1e:f2:5b:1d:f0:14:2b:a2:ea:9d:b0:8a:80:69:a4:f1:ed:e0:
         a7:39:af:4f:78:f4:b5:19:ea:dc:ee:38:32:27:e7:6d:50:20:
         51:b9:bc:f7:a8:45:ac:56:5e:e5:64:61:ca:e3:81:ac:24:f2:
         fa:71:88:cc:e7:6d:39:98:25:55:fe:5f:1e:90:1a:74:28:64:
         39:08:7b:a7:c1:34:88:e7:aa:af:28:68:ee:89:1c:13:7b:cc:
         25:70:54:9d:29:28:75:4e:ce:fa:5b:51:d7:b5:1f:5c:b0:61:
         96:5a:ae:ae:5a:78:ed:5e:2d:c2:30:43:4f:17:9e:3c:0c:9b:
         ac:77:87:73:1e:96:54:32:97:b9:e3:d6:0b:3c:67:95:e8:18:
         7b:ce:8a:02:cd:71:f7:e7:ad:57:d9:e8:8f:5c:88:9e:d3:fc:
         14:c3:f1:55:9e:5e:90:c1:3c:f5:5a:9f:bd:dd:00:19:7e:0c:
         39:5c:9a:a1:d5:76:34:dd:70:a7:aa:75:f9:f3:45:57:90:df:
         6f:86:7e:f3:ac:a6:a5:f3:51:0a:8a:fe:58:0f:53:bd:6b:bc:
         8b:71:4c:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 16:56:17 2026 by rpki-client