This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/326131343a373538333a6630303a3a2f34302d3430203d3e20323130343634.roa
File:                     326131343a373538333a6630303a3a2f34302d3430203d3e20323130343634.roa (raw, json)
Hash identifier:          mmfp1swzQs8+dv25AiJSqWincq1kV1e/VcrkZp1tcVY=
Subject key identifier:   4B:19:4D:32:18:86:F8:9E:08:02:B5:1F:E5:EF:81:FF:5B:14:74:15
Certificate issuer:       /CN=9B848163C7049122702E8D37941241ED5ADD94D9
Certificate serial:       2EB17AF790272836F36867B27EDBBC0AD58CA062
Authority key identifier: 9B:84:81:63:C7:04:91:22:70:2E:8D:37:94:12:41:ED:5A:DD:94:D9
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9B848163C7049122702E8D37941241ED5ADD94D9.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/326131343a373538333a6630303a3a2f34302d3430203d3e20323130343634.roa
Signing time:             Sat 03 Jan 2026 07:53:13 +0000
ROA not before:           Sat 03 Jan 2026 07:48:13 +0000
ROA not after:            Sat 02 Jan 2027 07:53:13 +0000
asID:                     210464
IP address blocks:        2a14:7583:f00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/9B848163C7049122702E8D37941241ED5ADD94D9.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/9B848163C7049122702E8D37941241ED5ADD94D9.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9B848163C7049122702E8D37941241ED5ADD94D9.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 21 Jan 2026 15:30:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:b1:7a:f7:90:27:28:36:f3:68:67:b2:7e:db:bc:0a:d5:8c:a0:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B848163C7049122702E8D37941241ED5ADD94D9
        Validity
            Not Before: Jan  3 07:48:13 2026 GMT
            Not After : Jan  2 07:53:13 2027 GMT
        Subject: CN=4B194D321886F89E0802B51FE5EF81FF5B147415
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fd:ad:76:ab:67:ac:78:b6:80:ec:7b:4e:27:
                    7e:ba:9b:89:c0:71:d9:5b:b5:dd:05:47:91:71:fb:
                    35:31:ee:3b:e0:e7:49:1d:7a:af:8c:e6:79:30:0a:
                    3b:30:cd:05:4c:96:57:0f:d1:a1:02:10:b6:39:18:
                    e4:f1:70:b4:59:bd:3a:d1:91:0a:0e:af:85:a3:50:
                    3a:a0:2d:16:f5:6b:db:3f:84:06:f6:77:77:7d:b6:
                    ee:4b:72:24:59:61:3e:09:b4:aa:e7:07:9e:c1:cf:
                    bd:a1:b2:74:04:29:b8:50:23:2c:1e:a3:2c:0e:03:
                    cd:50:e2:c1:80:0b:57:59:a7:c6:f4:b6:e7:41:bb:
                    24:cf:10:36:50:0b:22:9b:2e:07:11:73:9a:ee:c3:
                    62:fd:72:d6:e2:9f:48:c8:52:57:f1:0e:f0:03:c9:
                    03:ba:78:e7:69:65:ed:1a:6c:34:3a:eb:cc:1f:64:
                    52:28:16:e7:b1:37:14:9a:f5:6e:cc:1a:c3:0b:28:
                    ed:75:f9:a8:1e:d1:9b:41:eb:ce:73:fc:e0:05:e3:
                    98:49:bf:9b:30:8c:eb:83:9b:58:3e:8e:f3:e4:85:
                    d7:d6:bf:7a:5f:6f:52:5a:8f:c0:88:cb:42:22:ea:
                    ee:78:93:4f:48:a7:5b:23:f7:9e:99:94:34:38:57:
                    3d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:19:4D:32:18:86:F8:9E:08:02:B5:1F:E5:EF:81:FF:5B:14:74:15
            X509v3 Authority Key Identifier:
                keyid:9B:84:81:63:C7:04:91:22:70:2E:8D:37:94:12:41:ED:5A:DD:94:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/9B848163C7049122702E8D37941241ED5ADD94D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9B848163C7049122702E8D37941241ED5ADD94D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/326131343a373538333a6630303a3a2f34302d3430203d3e20323130343634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7583:f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         51:98:98:1f:46:c0:76:e5:39:11:ff:b7:45:de:19:ca:73:4a:
         d7:fb:00:90:90:d3:be:34:55:3f:78:a2:d5:ab:df:be:22:c1:
         5e:5a:7c:7c:d2:52:3c:1d:93:b6:39:4f:17:e2:c5:d4:5c:b8:
         ed:16:5e:8b:49:2c:73:95:8c:ea:92:54:e9:61:26:c8:91:db:
         0b:c2:b4:41:e1:a1:75:9c:58:b0:b0:f0:f0:b9:d6:7f:ea:5e:
         99:3d:b8:86:a7:12:e6:7d:53:d7:af:0a:2c:c6:2b:d8:4a:07:
         ea:c2:72:a5:f3:d6:93:61:7e:c5:ab:fc:81:34:85:b9:d0:67:
         ed:f4:ac:6e:1d:63:bb:46:d6:23:34:8b:ad:4c:33:83:0d:ee:
         ac:f2:6f:ec:7f:61:b0:28:b7:e2:7b:48:12:5e:38:5b:8e:d2:
         2c:3d:70:8a:d8:83:0e:61:5a:9f:f4:de:91:a3:26:fa:92:79:
         be:14:8c:c9:f5:a3:9f:3d:6e:96:32:10:f5:99:fc:36:5a:93:
         9e:b3:91:5b:ea:22:15:e6:07:cd:61:52:93:03:5b:c9:a8:03:
         34:d8:42:a0:da:b6:6a:c7:13:08:a1:7e:84:61:50:39:47:4b:
         75:8a:14:86:49:c4:be:a2:54:fb:ff:c8:33:3e:f0:24:18:b7:
         26:1c:24:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 01:17:12 2026 by rpki-client