This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a31303a3a2f34342d3434203d3e20323135313130.roa
File:                     326130623a346530373a31303a3a2f34342d3434203d3e20323135313130.roa (raw, json)
Hash identifier:          nn3ZeTdksQcF8U8laV2pS3TAb9kHh56GBcU+B3c3JAU=
Subject key identifier:   E6:8B:13:06:1A:B2:93:6E:45:60:E4:64:C9:2C:C4:31:FE:D3:79:19
Certificate issuer:       /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
Certificate serial:       48B814F46F14BA4E3B0DBDBF68BB0FA47C518CDF
Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a31303a3a2f34342d3434203d3e20323135313130.roa
Signing time:             Wed 07 Jan 2026 09:30:24 +0000
ROA not before:           Wed 07 Jan 2026 09:25:24 +0000
ROA not after:            Wed 06 Jan 2027 09:30:24 +0000
asID:                     215110
IP address blocks:        2a0b:4e07:10::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 21 Jan 2026 22:22:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:b8:14:f4:6f:14:ba:4e:3b:0d:bd:bf:68:bb:0f:a4:7c:51:8c:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
        Validity
            Not Before: Jan  7 09:25:24 2026 GMT
            Not After : Jan  6 09:30:24 2027 GMT
        Subject: CN=E68B13061AB2936E4560E464C92CC431FED37919
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:be:bc:56:77:b3:e4:e6:fc:a1:b4:21:0c:62:
                    04:e1:2b:ee:db:3a:05:a3:ce:cf:82:9d:3a:24:1f:
                    8e:b2:68:ca:ff:34:5c:a1:cf:5a:a1:b9:73:3d:7d:
                    d0:cd:71:69:f0:2f:49:48:b4:99:9c:38:20:fe:92:
                    1e:c7:9f:a5:48:40:67:35:58:5b:cd:6a:1f:e5:31:
                    c3:43:5e:88:81:b2:d1:17:69:8e:ec:55:23:57:d5:
                    4b:33:6f:c5:c4:2e:11:ff:98:df:f0:3b:dd:55:8a:
                    a9:da:f3:d3:09:4e:f7:40:40:ad:1a:9b:53:65:b3:
                    42:92:82:8a:f4:b4:05:a5:fd:b0:8e:28:e8:8a:ec:
                    bb:59:d3:f6:3f:2a:48:8b:c0:c6:0c:8a:20:fa:df:
                    4a:97:b1:80:e5:64:26:db:57:94:b1:c3:de:4d:e1:
                    5f:a5:a0:92:db:f2:56:d8:aa:38:a3:e6:20:56:8e:
                    3b:8f:99:84:b3:73:c7:27:36:75:58:38:69:43:03:
                    be:74:96:65:ef:c2:1e:37:f3:81:b6:25:de:8d:6f:
                    19:52:69:1b:51:90:90:fb:92:1e:09:7d:42:e1:b1:
                    e0:f5:be:a7:b2:5f:76:e4:84:05:bf:c7:4b:04:0e:
                    49:52:48:04:9a:6e:5e:3d:81:d5:1d:ed:9f:6c:33:
                    8b:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:8B:13:06:1A:B2:93:6E:45:60:E4:64:C9:2C:C4:31:FE:D3:79:19
            X509v3 Authority Key Identifier:
                keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a31303a3a2f34342d3434203d3e20323135313130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4e07:10::/44

    Signature Algorithm: sha256WithRSAEncryption
         13:73:41:6b:bd:00:6f:e4:02:58:a7:71:2b:07:cb:9a:b1:e6:
         af:5f:1d:ca:d6:7e:44:7a:fa:83:25:06:0e:03:28:e1:5c:ec:
         0d:99:fb:71:d1:dd:89:1a:02:e7:ad:68:ad:00:59:01:d8:a1:
         34:ba:d0:f7:11:45:cd:7c:36:10:79:33:23:87:da:7e:d4:15:
         0f:4d:39:d2:8c:c8:92:5e:90:6c:7d:c7:e8:45:2a:5b:13:f5:
         94:92:e8:c1:4b:6e:fb:de:1e:ab:a6:5d:2f:1b:6f:e7:68:97:
         c2:45:74:8c:0d:25:f8:e1:3a:8b:65:10:b3:1f:83:9d:61:6b:
         0d:9d:9d:5e:52:b1:4d:e4:e5:99:77:de:e1:7b:56:e3:97:c0:
         e2:f6:22:b9:cb:b1:2d:c4:c9:7f:ad:27:8e:1a:04:a9:6c:4c:
         f5:0e:c9:6a:ba:7d:85:61:4e:e3:e4:10:35:36:03:2d:24:5c:
         40:3c:b6:26:7c:d3:8b:7f:38:b3:64:bb:17:c8:00:0b:9f:23:
         83:85:ea:a5:6e:3e:66:dc:6d:b3:1e:3d:48:d1:dc:bc:0b:38:
         d1:75:d1:d4:6a:61:53:66:9b:03:47:d2:cf:23:1a:eb:6f:de:
         dd:22:ea:66:55:b6:c1:0f:0f:ba:62:7b:4b:ba:15:89:13:3b:
         6f:3e:08:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 04:59:45 2026 by rpki-client