This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/cea5b3484c2b450fb2773b1b981f5087/1/326130373a353463313a633030303a3a2f34342d3434203d3e20323134373632.roa
File:                     326130373a353463313a633030303a3a2f34342d3434203d3e20323134373632.roa (raw, json)
Hash identifier:          Ehn6pGTxKobCbcqHXhYXu7JSWP4YzSgJi4eDlDBkLxc=
Subject key identifier:   9B:0B:3A:1F:3E:AB:38:BD:27:18:96:C7:B7:6C:E1:A5:96:AC:10:A1
Certificate issuer:       /CN=ED454B99C2B0E472A9542F909449EBE8F31FFAD9
Certificate serial:       4106BB1C8DC71AD6AF6A22FF75FAEFCB9BC0C344
Authority key identifier: ED:45:4B:99:C2:B0:E4:72:A9:54:2F:90:94:49:EB:E8:F3:1F:FA:D9
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/ED454B99C2B0E472A9542F909449EBE8F31FFAD9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/cea5b3484c2b450fb2773b1b981f5087/1/326130373a353463313a633030303a3a2f34342d3434203d3e20323134373632.roa
Signing time:             Mon 01 Dec 2025 13:46:05 +0000
ROA not before:           Mon 01 Dec 2025 13:41:05 +0000
ROA not after:            Mon 30 Nov 2026 13:46:05 +0000
asID:                     214762
IP address blocks:        2a07:54c1:c000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/cea5b3484c2b450fb2773b1b981f5087/1/ED454B99C2B0E472A9542F909449EBE8F31FFAD9.crl
                          rsync://rpki-rps.arin.net/repository/cea5b3484c2b450fb2773b1b981f5087/1/ED454B99C2B0E472A9542F909449EBE8F31FFAD9.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/ED454B99C2B0E472A9542F909449EBE8F31FFAD9.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 04 Dec 2025 20:10:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:06:bb:1c:8d:c7:1a:d6:af:6a:22:ff:75:fa:ef:cb:9b:c0:c3:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED454B99C2B0E472A9542F909449EBE8F31FFAD9
        Validity
            Not Before: Dec  1 13:41:05 2025 GMT
            Not After : Nov 30 13:46:05 2026 GMT
        Subject: CN=9B0B3A1F3EAB38BD271896C7B76CE1A596AC10A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:96:7e:75:a2:9e:56:0d:95:b6:29:ce:7e:22:
                    b1:4f:3e:ad:5a:ef:21:af:7d:dd:b3:60:d1:fc:6c:
                    04:3a:89:4d:9d:b4:3b:cf:44:1d:fc:df:e6:64:7f:
                    03:af:c8:b5:8e:36:a9:00:81:eb:63:6e:b9:ad:1d:
                    75:bb:87:3d:61:1e:d5:f3:f4:29:e6:a0:6e:55:ec:
                    1e:7d:39:7a:b1:69:b3:20:b8:e0:6c:a6:77:4c:11:
                    09:65:e8:b8:38:77:9e:04:12:82:a8:55:3f:b6:04:
                    2b:b5:3e:16:43:a1:4d:51:5a:13:89:13:97:c2:88:
                    b6:17:d0:5c:b5:aa:8b:5c:70:8b:c5:6c:f3:47:a3:
                    e3:c8:44:82:e0:58:70:57:c6:8f:00:68:f3:10:78:
                    f5:0b:81:eb:5e:e9:ef:bd:f2:79:4c:c4:29:f1:f7:
                    44:e8:f5:44:e3:69:98:e0:08:93:80:e9:9a:ca:a6:
                    e0:97:aa:65:71:48:11:5a:5a:c7:60:d8:89:c6:dd:
                    78:d3:66:6f:52:25:36:63:41:87:7c:1c:58:9a:a9:
                    01:9e:f7:29:4a:71:d6:57:eb:7d:e3:e9:9f:47:01:
                    07:3a:82:f4:23:80:66:dc:c3:0d:75:24:d1:8a:32:
                    85:b6:b2:90:9a:1d:09:86:67:23:85:15:af:45:45:
                    4d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:0B:3A:1F:3E:AB:38:BD:27:18:96:C7:B7:6C:E1:A5:96:AC:10:A1
            X509v3 Authority Key Identifier:
                keyid:ED:45:4B:99:C2:B0:E4:72:A9:54:2F:90:94:49:EB:E8:F3:1F:FA:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/cea5b3484c2b450fb2773b1b981f5087/1/ED454B99C2B0E472A9542F909449EBE8F31FFAD9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/ED454B99C2B0E472A9542F909449EBE8F31FFAD9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/cea5b3484c2b450fb2773b1b981f5087/1/326130373a353463313a633030303a3a2f34342d3434203d3e20323134373632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1:c000::/44

    Signature Algorithm: sha256WithRSAEncryption
         82:77:dc:94:5b:79:3b:67:14:f6:27:b8:36:e4:ec:62:8a:22:
         4b:8a:ad:f0:6a:41:7c:74:04:e8:b9:97:ba:41:8d:bd:2b:6f:
         a3:81:ca:71:77:80:fd:43:ba:9d:ea:3f:da:bd:c2:9b:9d:72:
         e9:0a:a4:cc:bf:16:75:3d:fa:0d:e8:74:87:26:c0:69:85:79:
         b1:f9:d4:49:ad:ab:57:45:04:33:37:fd:4b:90:e0:2d:fe:7b:
         d8:f3:ec:6a:81:00:ac:d6:7a:55:33:b6:79:6d:e1:94:67:d6:
         94:6f:73:8a:e9:64:71:aa:d1:9c:0a:70:39:f1:09:26:8e:9a:
         92:18:35:23:b4:47:cf:28:59:0e:03:87:ab:b3:58:1c:f1:59:
         b9:d4:da:2e:5b:0c:08:84:b4:45:74:e4:05:0e:e5:73:26:3c:
         00:51:82:1e:a9:d6:57:e7:5e:6f:b0:9d:9b:d7:37:6b:13:6e:
         39:08:06:23:dc:35:48:71:79:df:6e:b9:6f:0f:01:95:1e:a0:
         23:40:e3:43:77:bd:c1:f8:c4:84:31:b9:e8:9a:5d:ab:96:dd:
         52:9b:6d:4f:62:12:45:e9:38:cc:3d:fa:e8:e8:78:19:33:b2:
         05:a9:9c:98:bf:49:16:53:3b:de:62:97:c5:78:6f:df:67:72:
         37:43:f6:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 4 07:32:12 2025 by rpki-client