This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/326130393a353463333a393030303a3a2f33362d3336203d3e20323131303636.roa
File:                     326130393a353463333a393030303a3a2f33362d3336203d3e20323131303636.roa (raw, json)
Hash identifier:          /KjIFlpbNb1VbdyEsAMlwZ6y7EnP5aEMV+JQt9I/CYU=
Subject key identifier:   E3:87:81:1D:39:51:60:E8:98:2F:18:2E:78:C2:92:84:85:2D:D7:CA
Certificate issuer:       /CN=A912092CFA11F378852F52266C793AB678233205
Certificate serial:       2BFBD6147CE60792F998F31F3E577B6925460543
Authority key identifier: A9:12:09:2C:FA:11:F3:78:85:2F:52:26:6C:79:3A:B6:78:23:32:05
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/A912092CFA11F378852F52266C793AB678233205.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/326130393a353463333a393030303a3a2f33362d3336203d3e20323131303636.roa
Signing time:             Tue 06 Jan 2026 06:43:44 +0000
ROA not before:           Tue 06 Jan 2026 06:38:44 +0000
ROA not after:            Tue 05 Jan 2027 06:43:44 +0000
asID:                     211066
IP address blocks:        2a09:54c3:9000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/A912092CFA11F378852F52266C793AB678233205.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Jan 2026 11:30:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:fb:d6:14:7c:e6:07:92:f9:98:f3:1f:3e:57:7b:69:25:46:05:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912092CFA11F378852F52266C793AB678233205
        Validity
            Not Before: Jan  6 06:38:44 2026 GMT
            Not After : Jan  5 06:43:44 2027 GMT
        Subject: CN=E387811D395160E8982F182E78C29284852DD7CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:24:10:0f:d5:b1:94:84:3c:b4:37:06:89:8e:
                    32:f1:9b:24:f7:df:ae:f3:73:de:b0:b0:0a:ab:53:
                    5c:df:94:66:0f:14:1d:ea:9d:25:5c:55:24:94:53:
                    96:07:da:74:7d:44:e5:14:60:e7:96:8f:2b:71:69:
                    98:48:df:67:d6:fa:02:da:1e:d9:d9:85:6b:23:ea:
                    2f:93:63:8b:b8:5c:d3:8d:dc:fb:09:9d:8b:2b:e5:
                    fb:a6:a4:d7:8e:1d:8f:bf:58:72:01:4e:cb:78:ce:
                    5d:dc:e7:8d:c0:92:bb:6d:79:76:12:81:c6:b6:74:
                    d2:28:d5:98:65:77:35:48:8d:64:4e:9d:92:c4:ae:
                    eb:d7:1c:ef:9d:19:4e:da:b3:0b:f3:0d:b2:88:38:
                    d2:6c:be:63:51:c0:a5:3b:d0:dd:7d:2e:ef:33:d2:
                    d4:15:6d:4a:c3:9c:a9:71:3c:40:d8:10:11:f2:b9:
                    0f:ff:00:09:72:2d:fc:76:a0:1c:5b:c6:9e:45:3a:
                    a4:d2:9a:e3:00:98:c9:ec:04:83:90:bb:e5:38:97:
                    e2:da:cc:85:57:e3:6d:ee:ed:98:70:49:e2:a0:69:
                    14:63:b5:f4:7a:a6:5d:20:71:6f:1d:03:00:2b:aa:
                    19:e7:72:68:d4:bd:51:2e:e6:66:f8:10:89:7c:36:
                    36:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:87:81:1D:39:51:60:E8:98:2F:18:2E:78:C2:92:84:85:2D:D7:CA
            X509v3 Authority Key Identifier:
                keyid:A9:12:09:2C:FA:11:F3:78:85:2F:52:26:6C:79:3A:B6:78:23:32:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/A912092CFA11F378852F52266C793AB678233205.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/326130393a353463333a393030303a3a2f33362d3336203d3e20323131303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a09:54c3:9000::/36

    Signature Algorithm: sha256WithRSAEncryption
         08:5a:ff:1b:87:b5:8a:78:22:ae:69:4b:28:4b:e3:8b:18:6e:
         73:43:bc:a4:fa:76:cb:dd:d3:2c:40:56:63:c5:fa:6e:49:f2:
         1d:2a:75:55:13:e0:5e:ea:96:5b:43:c7:ff:5e:cd:3f:7c:af:
         91:60:d2:4a:0c:cc:b0:ba:b1:ae:89:d3:16:72:10:8f:15:99:
         4a:b9:52:a2:20:1a:bf:93:a5:d0:ab:f8:a3:12:b8:f8:11:09:
         7e:fe:9b:eb:b6:53:2e:bc:98:15:ef:e2:cb:a6:f3:80:19:0c:
         52:24:a1:ea:ea:2d:3a:86:d7:6b:23:57:3a:4e:2b:12:76:5d:
         13:a1:eb:86:40:0e:f1:1b:dd:f1:da:c8:2a:ab:3d:8f:ca:f7:
         4d:a3:76:03:42:b7:e2:02:8a:89:3c:3f:9f:ee:aa:9a:c3:6a:
         38:bf:a7:39:af:93:61:67:fb:64:81:ec:f3:2f:29:a3:33:b0:
         4f:87:00:ef:31:f5:75:ee:ed:02:31:56:79:17:cf:6e:3c:62:
         25:a0:31:f9:ae:13:69:1f:d9:03:ac:bb:72:03:cd:f8:87:f7:
         15:9c:95:4b:9f:84:7c:cf:4f:95:d9:f0:87:c9:e2:68:ef:c6:
         5c:3d:91:14:1a:e3:ee:e8:19:22:99:ab:3e:07:7f:f9:8a:4c:
         da:3a:a8:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 18:18:35 2026 by rpki-client