This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/2/32332e3133332e3230352e302f32342d3234203d3e203233353036.roa
File:                     32332e3133332e3230352e302f32342d3234203d3e203233353036.roa (raw, json)
Hash identifier:          XdMcTGnzjuF/TnKu1faa3U3+KL5P/sj4q9nBJvAdx6M=
Subject key identifier:   54:39:5E:7A:FE:86:10:34:59:99:44:AB:F0:AE:B5:F9:E4:35:9B:9F
Certificate issuer:       /CN=22b1391a00e2d8e952faa4dd780de9176d65f932cbd86a69ca
Certificate serial:       4CBA3D03D43D4D0836CA1565D4E74EF769A909C2
Authority key identifier: C5:4C:55:4D:4B:0B:04:61:D9:A0:1E:2A:06:E5:5F:C0:EC:4E:D8:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87/22b1391a00e2d8e952faa4dd780de9176d65f932cbd86a69ca.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/2/32332e3133332e3230352e302f32342d3234203d3e203233353036.roa
Signing time:             Fri 02 Jan 2026 23:43:42 +0000
ROA not before:           Fri 02 Jan 2026 23:38:42 +0000
ROA not after:            Fri 01 Jan 2027 23:43:42 +0000
asID:                     23506
IP address blocks:        23.133.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/2/C54C554D4B0B0461D9A01E2A06E55FC0EC4ED83D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/2/C54C554D4B0B0461D9A01E2A06E55FC0EC4ED83D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87/22b1391a00e2d8e952faa4dd780de9176d65f932cbd86a69ca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87/74c5eaa7-78bb-4cca-835a-0df812ff7d87.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87/74c5eaa7-78bb-4cca-835a-0df812ff7d87.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Jan 2026 04:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:ba:3d:03:d4:3d:4d:08:36:ca:15:65:d4:e7:4e:f7:69:a9:09:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22b1391a00e2d8e952faa4dd780de9176d65f932cbd86a69ca
        Validity
            Not Before: Jan  2 23:38:42 2026 GMT
            Not After : Jan  1 23:43:42 2027 GMT
        Subject: CN=54395E7AFE861034599944ABF0AEB5F9E4359B9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:79:f1:5a:10:9c:40:09:77:c1:5c:b5:a6:45:
                    20:9b:96:09:c2:21:96:78:2b:80:01:d7:b4:d4:a2:
                    2f:cc:3a:c5:41:40:dc:ed:4a:42:0d:c6:2a:20:3e:
                    49:70:67:69:aa:83:30:ac:31:ae:df:77:ea:a3:d4:
                    1d:f3:4e:46:31:08:2d:2f:60:09:01:74:cf:d8:76:
                    c9:f6:cc:9e:8f:e2:38:eb:0e:06:82:4f:8e:73:ee:
                    ab:3e:6a:9b:c1:bb:f5:4b:8b:f0:f0:01:3f:b4:e7:
                    1b:65:8e:86:7b:1d:9a:67:bc:69:80:93:5c:25:86:
                    46:79:ef:26:c8:3c:72:e8:48:b9:6b:f1:a3:e9:a5:
                    0c:e4:cb:ef:05:10:ca:43:a0:f2:ef:92:c4:e6:80:
                    96:a5:57:79:1c:30:b3:e5:b8:b9:96:2b:bc:cf:74:
                    fa:dc:b9:d5:7f:f8:71:b9:4e:a1:85:07:b6:3b:b4:
                    76:c1:60:93:87:34:f7:f8:da:10:90:38:0f:74:75:
                    3e:10:fc:ec:62:69:79:27:0e:df:88:2d:0b:f8:51:
                    1d:4e:fb:81:1d:61:12:1d:d6:63:fb:ad:cc:d6:10:
                    1f:f8:06:97:89:34:54:bd:ea:33:9b:38:54:e3:64:
                    2f:45:74:5a:83:f7:f7:b3:e7:e1:ba:af:8f:95:6f:
                    fc:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:39:5E:7A:FE:86:10:34:59:99:44:AB:F0:AE:B5:F9:E4:35:9B:9F
            X509v3 Authority Key Identifier:
                keyid:C5:4C:55:4D:4B:0B:04:61:D9:A0:1E:2A:06:E5:5F:C0:EC:4E:D8:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/2/C54C554D4B0B0461D9A01E2A06E55FC0EC4ED83D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87/22b1391a00e2d8e952faa4dd780de9176d65f932cbd86a69ca.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/2/32332e3133332e3230352e302f32342d3234203d3e203233353036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.133.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:6b:5d:98:e6:23:3b:b3:2a:27:2a:ab:47:da:50:79:68:3e:
         ac:cf:7b:50:14:d7:3e:6d:1e:fc:07:37:fd:2a:6b:63:76:74:
         ab:24:84:48:93:ae:a2:9f:f2:a9:a4:5e:36:05:0d:8d:c1:fd:
         e7:97:d7:af:60:cc:30:3c:25:2d:6e:78:41:1c:f2:99:29:77:
         57:46:02:c9:58:a0:fe:72:1d:a6:2b:81:4e:0c:c1:92:b5:8e:
         9e:f7:42:e0:56:04:75:fc:eb:0b:8b:2c:c2:49:5e:b6:06:b9:
         92:7e:50:84:a1:2b:8f:92:af:f0:13:90:cd:97:39:0b:9d:23:
         63:7e:f9:7d:ce:d4:dd:5c:6a:d8:4c:3e:56:a3:73:c9:95:ed:
         b2:37:2d:38:db:ea:09:a1:9a:6c:0c:9f:32:5e:1c:37:c9:1b:
         43:91:71:99:08:33:85:c8:b0:72:ae:5b:65:ca:73:47:89:27:
         e0:b9:f5:67:ee:fd:2e:e3:10:14:a7:e4:c1:e6:e0:a0:e0:64:
         ac:fe:0d:f6:9f:1b:0e:7f:d4:24:49:c4:18:3b:7e:e3:de:de:
         52:aa:5f:d9:4d:1d:54:24:83:14:9d:10:b4:e6:79:40:05:e0:
         d7:f4:aa:1c:48:f1:56:cf:97:0a:d1:45:e4:c2:cc:34:06:91:
         fa:6a:60:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 10 04:36:32 2026 by rpki-client