This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a32303a3a2f34362d3438203d3e20323135373630.roa
File:                     326130623a346530373a32303a3a2f34362d3438203d3e20323135373630.roa (raw, json)
Hash identifier:          wr3+uigFxK7nx4BsSwlXI5xY+cJd8PsO2s4ij2P0HSU=
Subject key identifier:   C2:75:5A:7A:0C:CC:1E:51:71:C1:F8:B1:13:1F:09:7E:F6:27:14:D6
Certificate issuer:       /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
Certificate serial:       6C313F2833BA8F6F463DF51750C45D0659F86E0C
Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a32303a3a2f34362d3438203d3e20323135373630.roa
Signing time:             Thu 08 Jan 2026 14:29:05 +0000
ROA not before:           Thu 08 Jan 2026 14:24:05 +0000
ROA not after:            Thu 07 Jan 2027 14:29:05 +0000
asID:                     215760
IP address blocks:        2a0b:4e07:20::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 21 Jan 2026 22:22:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:31:3f:28:33:ba:8f:6f:46:3d:f5:17:50:c4:5d:06:59:f8:6e:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
        Validity
            Not Before: Jan  8 14:24:05 2026 GMT
            Not After : Jan  7 14:29:05 2027 GMT
        Subject: CN=C2755A7A0CCC1E5171C1F8B1131F097EF62714D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:13:66:eb:3b:22:ad:94:91:ee:6d:7a:72:a7:
                    70:73:75:2f:56:4e:66:d7:75:44:b3:de:eb:25:95:
                    4f:3c:23:d2:9d:d9:df:1b:f8:65:c0:40:4e:17:7c:
                    05:6a:8d:2f:25:16:bf:14:48:f8:fc:e6:32:27:f1:
                    f9:4e:41:da:cd:a0:aa:ee:4d:dd:f9:87:df:fa:ae:
                    04:2d:e8:2a:fa:a8:2c:2c:c2:c9:7c:2f:ff:bf:0e:
                    2f:a8:8c:e9:a6:38:12:7e:a0:5a:14:1f:59:77:2f:
                    e4:49:49:3f:97:6a:93:94:2b:54:8e:fb:66:d2:5f:
                    51:17:f8:f4:f3:45:f4:7d:27:55:ba:28:c6:c7:ef:
                    bb:75:1a:4a:75:a6:8f:69:b2:6e:b9:1f:4b:a2:fa:
                    99:56:1f:d4:59:1c:b8:dd:a4:31:f7:72:47:70:6c:
                    2a:ec:4e:b4:bf:15:88:f0:5f:2d:20:4c:c4:14:89:
                    31:0f:13:00:af:bb:11:9f:70:58:76:7c:a2:95:ee:
                    32:a8:f6:b2:3a:65:ee:b1:1c:0f:db:c0:02:96:f2:
                    d3:95:44:9d:55:24:f7:32:60:1a:0f:b2:07:03:11:
                    5b:8c:e8:00:18:b2:49:34:db:5e:d5:51:69:0a:7f:
                    f7:ef:99:65:8e:6b:cb:e6:e7:61:53:40:44:7c:72:
                    8f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:75:5A:7A:0C:CC:1E:51:71:C1:F8:B1:13:1F:09:7E:F6:27:14:D6
            X509v3 Authority Key Identifier:
                keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a32303a3a2f34362d3438203d3e20323135373630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4e07:20::/46

    Signature Algorithm: sha256WithRSAEncryption
         08:7c:10:57:d4:2d:26:94:9e:24:0c:21:4a:06:a3:7e:e2:0c:
         09:3f:2f:0b:89:68:c4:57:c9:d4:94:37:21:95:69:d1:5a:6f:
         03:cd:10:ca:f6:45:9d:9f:24:05:c5:b0:c4:89:cc:6a:e8:fc:
         e5:22:74:d2:5b:42:02:44:aa:eb:b5:6e:35:65:bb:19:6e:e2:
         b0:65:c5:89:78:1f:1f:79:f2:db:96:44:85:d6:05:c9:27:a1:
         86:e5:7a:63:bd:d2:ca:27:b8:1e:cc:1f:09:46:9d:70:bb:00:
         4e:dd:38:30:0b:2a:24:f1:db:92:11:f9:73:d1:93:00:52:26:
         ff:ab:37:0c:1e:6d:b0:e6:4a:90:3e:da:67:f3:1e:62:e4:4a:
         47:14:b9:a6:b1:0a:3f:4f:e1:0b:a2:91:36:39:be:c6:c2:01:
         4f:2e:8b:ac:2a:00:b1:6e:6a:33:78:82:b0:62:61:61:5f:48:
         84:7f:f8:35:73:05:9f:a2:13:e2:61:e3:ee:69:09:70:6c:9f:
         eb:a1:18:fa:b3:c8:99:7e:71:a5:51:59:e2:a1:57:33:fc:08:
         9b:06:9f:98:98:a1:15:d5:6c:b1:e3:10:f7:06:2e:69:bd:bf:
         5d:e2:96:7b:08:2a:5c:58:01:6d:b8:22:e0:3f:f3:4f:4e:cd:
         60:a4:ee:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 04:59:47 2026 by rpki-client