This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/326130363a396634313a3230303a3a2f34302d3438203d3e20323134393239.roa
File:                     326130363a396634313a3230303a3a2f34302d3438203d3e20323134393239.roa (raw, json)
Hash identifier:          QtN9SLO6BSjzyIiwoZRqiVH48LS9HyuRs3lqnsdDiKs=
Subject key identifier:   24:27:24:1A:87:DE:0B:0C:F9:18:F5:86:41:A5:F9:F7:89:1A:00:A9
Certificate issuer:       /CN=06DB699D191D4B0289910C88E99CF94A671142F5
Certificate serial:       5D84D94428BDFA84E7E52532BBB952EAB67E072E
Authority key identifier: 06:DB:69:9D:19:1D:4B:02:89:91:0C:88:E9:9C:F9:4A:67:11:42:F5
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/326130363a396634313a3230303a3a2f34302d3438203d3e20323134393239.roa
Signing time:             Sun 28 Dec 2025 19:41:04 +0000
ROA not before:           Sun 28 Dec 2025 19:36:04 +0000
ROA not after:            Sun 27 Dec 2026 19:41:04 +0000
asID:                     214929
IP address blocks:        2a06:9f41:200::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Jan 2026 06:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:84:d9:44:28:bd:fa:84:e7:e5:25:32:bb:b9:52:ea:b6:7e:07:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06DB699D191D4B0289910C88E99CF94A671142F5
        Validity
            Not Before: Dec 28 19:36:04 2025 GMT
            Not After : Dec 27 19:41:04 2026 GMT
        Subject: CN=2427241A87DE0B0CF918F58641A5F9F7891A00A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:f9:50:6b:25:d8:35:4e:30:63:c7:f5:12:8a:
                    4d:d0:7d:7e:02:29:ac:5c:91:d9:86:32:dd:5a:fb:
                    78:ee:e3:b6:ac:0a:48:91:96:3f:cc:f3:6e:ea:3a:
                    7f:fa:6d:0f:b5:1c:b8:48:f8:76:70:59:5b:60:e3:
                    07:ff:ba:b4:e2:1a:8d:5e:02:c1:13:f2:34:b3:09:
                    5a:8f:4a:ab:94:28:67:52:54:82:1b:8b:86:a7:42:
                    1c:70:bd:b2:3f:28:fc:ae:bd:73:4e:4c:af:66:c3:
                    40:38:44:80:0c:00:03:35:a8:00:2e:aa:ca:9f:56:
                    0b:3a:e6:00:9a:11:8b:4e:23:af:c3:4d:4d:ee:bc:
                    ff:16:3f:b4:43:08:7c:36:db:1f:37:89:d3:51:bb:
                    73:03:e1:2b:19:2f:c8:cc:37:eb:04:99:5d:a5:05:
                    bb:e1:1b:c1:42:7d:fa:ba:60:6b:cd:bc:25:3f:a7:
                    44:a3:80:a2:4e:67:65:59:4a:33:e2:be:30:77:f2:
                    15:98:a5:80:3e:18:2b:ea:75:1c:3f:3d:23:38:70:
                    3b:0e:c9:b1:1e:a0:4f:b3:e2:8e:cc:16:43:ce:a0:
                    0a:18:4a:54:91:a6:e1:29:d3:a7:71:e2:a4:f2:20:
                    34:2f:6b:3f:b1:73:8f:8c:07:2b:1e:52:d8:5c:41:
                    2c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:27:24:1A:87:DE:0B:0C:F9:18:F5:86:41:A5:F9:F7:89:1A:00:A9
            X509v3 Authority Key Identifier:
                keyid:06:DB:69:9D:19:1D:4B:02:89:91:0C:88:E9:9C:F9:4A:67:11:42:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/326130363a396634313a3230303a3a2f34302d3438203d3e20323134393239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:9f41:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         49:4d:a0:02:66:8a:53:8d:8f:ed:07:b2:47:b5:2f:88:03:0a:
         7c:fe:87:80:d0:cd:97:23:9f:9f:d9:36:f9:2f:39:e5:14:27:
         a2:e6:19:40:ef:3a:21:81:a1:e3:60:53:8f:60:b6:d3:e4:65:
         c7:bd:b0:d6:26:91:ad:20:c6:31:bd:62:4f:6c:09:ec:95:72:
         26:5f:73:fc:cf:e1:6f:4b:0e:84:b3:4e:5f:f9:f9:c3:a8:3d:
         3f:e1:bb:6a:3a:19:60:ec:dd:80:c8:af:46:95:db:a8:05:30:
         17:69:e9:88:87:b8:4d:7b:55:18:97:a1:84:c5:91:46:39:13:
         cc:16:a0:08:cf:9d:18:56:b0:88:09:7b:39:0a:7d:eb:c4:3d:
         07:76:6a:35:13:82:d2:13:74:84:8f:d3:37:6c:e2:61:28:3f:
         9d:cb:c4:4f:0f:24:4d:db:c2:06:05:f4:98:b4:b8:19:cc:28:
         8c:6c:bd:cc:9c:a7:4e:a5:a3:ea:6f:0f:fa:9d:db:8e:2d:eb:
         59:39:ae:a0:d1:01:70:2c:3c:eb:51:93:f9:b7:b1:45:c0:36:
         c3:ec:d8:5e:21:5f:a1:5d:9e:7a:3d:f7:0c:9a:d8:8e:41:7f:
         5e:15:c8:40:8f:2c:92:16:5f:50:c8:5b:01:46:66:9b:7f:27:
         fb:db:c7:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 13:58:39 2026 by rpki-client