This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a64303a3a2f34382d3438203d3e20323130383831.roa
File:                     326130623a346530373a64303a3a2f34382d3438203d3e20323130383831.roa (raw, json)
Hash identifier:          nKupsE8WPN3Rx8V5FbZRs26nNHVq/k8KlcmYhWCEUOk=
Subject key identifier:   75:F4:35:8D:A6:13:FD:C3:5F:6A:16:D9:33:10:7E:D9:DB:D1:2A:76
Certificate issuer:       /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
Certificate serial:       68DC3BD56C4F04698409EE2D866CF1763D33C511
Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a64303a3a2f34382d3438203d3e20323130383831.roa
Signing time:             Thu 08 Jan 2026 14:44:32 +0000
ROA not before:           Thu 08 Jan 2026 14:39:32 +0000
ROA not after:            Thu 07 Jan 2027 14:44:32 +0000
asID:                     210881
IP address blocks:        2a0b:4e07:d0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 21 Jan 2026 22:22:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:dc:3b:d5:6c:4f:04:69:84:09:ee:2d:86:6c:f1:76:3d:33:c5:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
        Validity
            Not Before: Jan  8 14:39:32 2026 GMT
            Not After : Jan  7 14:44:32 2027 GMT
        Subject: CN=75F4358DA613FDC35F6A16D933107ED9DBD12A76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:78:63:a4:59:04:82:c8:1b:69:8f:b0:52:62:
                    4b:01:2b:e3:eb:5e:3a:9e:26:c9:51:4b:92:65:1e:
                    00:59:a7:47:d4:a9:39:aa:0a:9c:d4:0e:0d:13:dd:
                    e9:b1:77:b9:2e:20:e8:2b:03:18:12:3a:7d:f2:1d:
                    4f:54:5a:99:15:8b:ca:42:c9:f5:9b:ef:09:20:3a:
                    0a:0e:6d:2f:59:a4:ea:3d:c9:1a:fc:dd:b9:34:23:
                    70:16:4b:a6:eb:d3:ba:e8:fb:16:60:09:3f:11:7c:
                    44:89:0e:56:80:07:61:2d:05:4a:35:2b:ba:63:7c:
                    df:92:d4:9b:8a:ce:15:bd:e7:6e:5c:23:90:9e:50:
                    60:87:34:81:e2:4e:c2:69:40:b3:bd:84:9d:3e:3d:
                    bc:1f:28:75:f7:6f:d0:d9:fa:ae:dc:8d:cf:c9:0b:
                    dd:05:82:87:bc:23:4d:44:0a:60:1d:82:85:21:f1:
                    56:a3:2d:16:04:c6:b2:52:65:60:3b:28:ee:41:c9:
                    06:b9:f8:ee:2f:4e:6d:4d:3f:f9:98:93:79:90:ef:
                    8c:30:4e:a1:65:dc:ba:56:65:89:6d:03:80:ca:08:
                    3f:22:81:7b:43:d0:f2:14:bc:63:06:ec:1a:46:fc:
                    54:3f:cd:01:f1:ce:cf:f5:cd:02:e1:2c:09:a4:bc:
                    09:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:F4:35:8D:A6:13:FD:C3:5F:6A:16:D9:33:10:7E:D9:DB:D1:2A:76
            X509v3 Authority Key Identifier:
                keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a64303a3a2f34382d3438203d3e20323130383831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4e07:d0::/48

    Signature Algorithm: sha256WithRSAEncryption
         9c:5d:56:0d:47:e6:d1:9c:78:31:73:9e:90:bf:8b:96:05:03:
         07:3d:42:e4:e4:2e:bb:f0:b5:b7:a6:5b:9a:67:46:69:95:0b:
         34:f1:21:98:1a:05:dd:47:1f:1c:74:7f:83:f9:4d:0b:90:41:
         6f:f6:e9:03:06:2e:d6:53:f4:48:d3:a6:10:a7:d3:e4:62:f0:
         7a:86:c6:c5:66:91:c2:61:4d:f5:2b:06:bd:25:30:e1:17:01:
         c7:20:fa:34:52:05:31:63:96:e2:bf:08:86:88:5d:57:2a:c3:
         db:f6:db:7b:00:ec:1b:0a:ab:89:06:f9:55:f6:f2:7e:12:53:
         38:58:16:ac:19:58:81:13:9b:48:ad:3f:e2:4e:6a:65:17:ac:
         c8:7f:29:31:5e:64:5b:62:7a:74:53:c8:5e:af:0b:b7:c9:50:
         57:31:09:eb:b0:f5:25:fa:85:02:42:09:a4:82:ae:9b:4e:79:
         80:4b:8a:b6:f3:f7:fb:fd:91:c7:3c:d6:9d:33:ab:02:47:af:
         9e:ab:20:6c:bb:32:be:bd:77:77:8a:d0:e6:74:67:04:5e:68:
         87:08:ba:35:b1:f6:20:48:f3:aa:4f:49:b9:25:b6:a0:1e:2e:
         ed:15:39:82:cd:a3:0e:0a:8b:fd:a1:80:c3:5c:16:50:ea:74:
         c3:d3:2b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 05:00:28 2026 by rpki-client