This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a32633a3a2f34382d3438203d3e20323135313130.roa
File:                     326130623a346530373a32633a3a2f34382d3438203d3e20323135313130.roa (raw, json)
Hash identifier:          7chHNoSqjlpM7kUuvjcd5eCL/YBsZoGkMUiRhpgTOBE=
Subject key identifier:   14:13:24:14:86:A8:D1:D9:DE:50:CA:7F:88:14:37:8B:3A:3E:2B:3D
Certificate issuer:       /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
Certificate serial:       6204D65629C6FDB4DFB1F6BD9BA018A827198EA3
Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a32633a3a2f34382d3438203d3e20323135313130.roa
Signing time:             Wed 07 Jan 2026 09:30:56 +0000
ROA not before:           Wed 07 Jan 2026 09:25:56 +0000
ROA not after:            Wed 06 Jan 2027 09:30:56 +0000
asID:                     215110
IP address blocks:        2a0b:4e07:2c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 21 Jan 2026 22:22:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:04:d6:56:29:c6:fd:b4:df:b1:f6:bd:9b:a0:18:a8:27:19:8e:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
        Validity
            Not Before: Jan  7 09:25:56 2026 GMT
            Not After : Jan  6 09:30:56 2027 GMT
        Subject: CN=1413241486A8D1D9DE50CA7F8814378B3A3E2B3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:38:e2:4a:ce:2a:74:c4:8c:c3:5d:1b:d5:da:
                    fd:eb:ed:e8:e1:58:02:c5:5b:ef:53:84:a2:00:c4:
                    29:fa:a5:c3:15:18:00:51:17:ce:c0:04:85:7e:6e:
                    fc:15:62:24:39:5e:1e:8c:56:0b:b6:66:74:a4:a4:
                    56:33:8f:67:42:e0:2c:fe:9a:9c:42:cb:06:ed:f4:
                    0d:7d:94:72:01:e6:14:4c:ea:a1:e0:66:1a:8c:ac:
                    e5:8c:40:33:88:d7:c3:ea:36:02:49:10:cb:03:c2:
                    4c:69:ee:27:73:73:23:8c:df:e0:8a:8d:e6:a1:b6:
                    9d:5f:a9:f6:17:1b:8c:51:aa:65:f4:c2:e7:63:14:
                    71:1f:27:98:bb:98:d8:65:3a:40:30:6f:d4:70:d0:
                    26:66:28:42:1c:c1:70:ec:d0:e1:98:72:b1:0d:96:
                    e8:42:94:bf:18:18:a3:ed:61:9d:87:b1:56:aa:19:
                    86:d0:1d:af:2d:4a:db:db:b1:41:d5:31:c0:14:1b:
                    04:7f:77:f0:71:92:51:d6:92:82:78:45:8f:b8:7e:
                    c2:db:c8:c7:72:3f:5b:7e:c6:56:de:72:7d:1c:51:
                    01:db:d2:4d:cb:da:31:a6:51:05:f0:b8:7e:8b:8a:
                    aa:d6:66:5a:19:ac:56:28:85:c8:4b:89:fb:21:22:
                    8d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:13:24:14:86:A8:D1:D9:DE:50:CA:7F:88:14:37:8B:3A:3E:2B:3D
            X509v3 Authority Key Identifier:
                keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a32633a3a2f34382d3438203d3e20323135313130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4e07:2c::/48

    Signature Algorithm: sha256WithRSAEncryption
         43:e7:b9:b0:31:27:26:70:7e:a6:d2:08:b5:9b:57:a5:93:84:
         87:ad:74:8e:23:cb:45:e8:d6:bc:c2:f6:20:b5:c6:90:6e:87:
         ed:48:1e:a2:1e:29:e9:9c:3b:db:1c:19:b3:b9:a3:66:7f:da:
         a8:6e:3c:21:70:85:1b:88:ce:b4:15:16:a7:78:90:3e:ba:b3:
         aa:f8:7a:93:40:0b:53:f0:74:f6:dd:08:86:d8:98:f9:55:90:
         b7:ec:fe:4e:dd:36:a0:e1:82:33:c8:a4:cb:9e:9b:34:73:d6:
         78:10:8e:a2:7f:52:64:dc:9b:d1:68:43:68:96:1f:ad:f9:a8:
         b8:29:c9:f6:a0:61:b7:3a:57:60:e9:73:85:70:fe:36:45:72:
         e2:3e:c0:01:48:f7:5d:1e:07:d7:71:b9:f0:c6:6f:0a:ae:fc:
         10:1a:21:10:3c:14:1a:bc:d9:22:9b:0e:5a:d3:36:ee:f1:2a:
         c6:7e:e1:cf:d7:b5:4f:89:dc:45:d9:88:b0:09:77:dc:f9:09:
         67:31:a1:50:54:7f:3e:44:37:74:5a:3f:0c:23:2b:fb:53:76:
         2b:1c:f4:ca:b9:70:17:12:5a:41:b1:32:b4:9e:8d:94:0f:64:
         5d:01:3a:de:5c:e8:f2:09:36:9e:ff:56:c7:29:10:be:53:e3:
         19:30:80:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 05:00:27 2026 by rpki-client