This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/2/323630323a663730343a3a2f33382d3338203d3e2030.roa
File:                     323630323a663730343a3a2f33382d3338203d3e2030.roa (raw, json)
Hash identifier:          MX9jf4GXqO17otuH0C/uZwF7S6RA6XINVR8eNup20dY=
Subject key identifier:   2A:54:72:5B:2C:38:75:F5:9F:E5:5C:F4:E0:A7:31:95:C7:85:47:8B
Certificate issuer:       /CN=22b1391a00e2d8e952faa4dd780de9176d65f932cbd86a69ca
Certificate serial:       6864AE5911FB883B35334BBDCD99F118E57E3978
Authority key identifier: C5:4C:55:4D:4B:0B:04:61:D9:A0:1E:2A:06:E5:5F:C0:EC:4E:D8:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87/22b1391a00e2d8e952faa4dd780de9176d65f932cbd86a69ca.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/2/323630323a663730343a3a2f33382d3338203d3e2030.roa
Signing time:             Fri 02 Jan 2026 23:45:25 +0000
ROA not before:           Fri 02 Jan 2026 23:40:25 +0000
ROA not after:            Fri 01 Jan 2027 23:45:25 +0000
asID:                     0
IP address blocks:        2602:f704::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/2/C54C554D4B0B0461D9A01E2A06E55FC0EC4ED83D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/2/C54C554D4B0B0461D9A01E2A06E55FC0EC4ED83D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87/22b1391a00e2d8e952faa4dd780de9176d65f932cbd86a69ca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87/74c5eaa7-78bb-4cca-835a-0df812ff7d87.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87/74c5eaa7-78bb-4cca-835a-0df812ff7d87.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Jan 2026 09:33:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:64:ae:59:11:fb:88:3b:35:33:4b:bd:cd:99:f1:18:e5:7e:39:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22b1391a00e2d8e952faa4dd780de9176d65f932cbd86a69ca
        Validity
            Not Before: Jan  2 23:40:25 2026 GMT
            Not After : Jan  1 23:45:25 2027 GMT
        Subject: CN=2A54725B2C3875F59FE55CF4E0A73195C785478B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:79:fb:e8:0d:52:45:57:1b:94:95:46:cc:6c:
                    c6:d7:60:8b:a8:02:4b:06:a1:1a:91:2e:22:bb:1a:
                    23:ab:ec:54:88:d9:7e:fc:55:17:97:0f:9c:4f:b6:
                    b9:db:01:bb:a0:24:d5:76:5c:df:20:6b:16:fb:62:
                    05:20:8c:f0:7f:4b:c2:67:f5:c4:f9:20:8e:19:7c:
                    19:d0:2c:54:23:26:8c:96:66:bb:55:6b:a3:77:71:
                    d5:5b:dd:7b:44:e0:04:75:ae:29:c3:3d:76:5c:c8:
                    e1:c9:3c:35:a1:fc:6f:41:ce:1f:d3:27:42:64:73:
                    81:65:bb:d9:0d:b7:51:a4:4a:b8:9b:fb:29:d1:98:
                    1c:02:5b:8e:30:d5:64:b1:7b:2d:5c:79:2f:00:30:
                    34:38:be:d2:ae:25:75:ff:c7:21:2f:67:32:9d:af:
                    df:0d:52:92:1c:73:3f:92:dd:21:37:ec:66:fa:70:
                    bb:90:f9:b1:11:54:0c:60:fc:6b:e2:55:bf:2a:4b:
                    9a:a7:6b:55:71:b3:e4:4e:8f:75:1b:83:32:8e:28:
                    04:40:9f:58:f9:06:a3:13:d7:9f:df:5d:5f:8c:c4:
                    7e:2d:8d:d7:ba:80:4c:9f:c7:7b:18:49:df:37:fd:
                    3f:16:d4:cf:5f:a0:03:99:44:80:e0:b4:de:bd:2b:
                    42:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:54:72:5B:2C:38:75:F5:9F:E5:5C:F4:E0:A7:31:95:C7:85:47:8B
            X509v3 Authority Key Identifier:
                keyid:C5:4C:55:4D:4B:0B:04:61:D9:A0:1E:2A:06:E5:5F:C0:EC:4E:D8:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/2/C54C554D4B0B0461D9A01E2A06E55FC0EC4ED83D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87/22b1391a00e2d8e952faa4dd780de9176d65f932cbd86a69ca.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/2/323630323a663730343a3a2f33382d3338203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f704::/38

    Signature Algorithm: sha256WithRSAEncryption
         8c:89:d8:2c:6f:69:df:f9:52:5d:fa:b0:b5:b2:a4:23:14:c5:
         2b:09:c7:3a:7b:af:49:84:7e:c9:9e:a8:d8:d3:63:22:18:ef:
         ac:77:38:f6:dc:9b:70:92:b8:f9:c0:c3:07:6a:9d:91:64:b9:
         70:c2:ea:7a:55:7d:06:eb:9d:cc:e8:1e:a1:06:49:24:17:50:
         77:8d:57:9f:57:70:05:09:55:3a:28:15:5e:31:0e:9d:7c:82:
         36:88:7d:72:be:e3:87:be:b8:2c:d4:d5:e8:09:fc:79:47:e6:
         6c:db:fd:cf:e9:60:51:56:ec:9e:f1:88:d5:ff:c2:cf:54:e5:
         00:3d:a7:05:3e:cc:a2:25:c7:b6:2f:10:98:82:92:8e:ba:f7:
         d6:9e:a2:5b:af:f3:38:d3:e6:d4:c9:74:32:8f:e9:22:5c:ad:
         35:a3:67:d6:b3:f1:5e:14:c6:7e:5d:d2:ec:ce:56:68:78:81:
         65:78:97:08:78:6a:dc:a9:24:1f:72:10:0f:33:bc:82:eb:a1:
         7f:05:55:b7:05:03:60:36:84:7a:0d:23:0c:3e:f9:73:1b:aa:
         fb:d9:60:35:24:84:2b:7f:0d:7d:a2:e5:74:aa:33:cb:f6:59:
         9a:77:d7:10:d3:e6:0d:8f:e0:d0:64:00:28:77:5f:b6:c4:d7:
         b9:b9:4d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 17:05:27 2026 by rpki-client