This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/326131343a373538313a366662303a3a2f34342d3438203d3e20323136343332.roa
File:                     326131343a373538313a366662303a3a2f34342d3438203d3e20323136343332.roa (raw, json)
Hash identifier:          zJsseoUx2WfsGKQLt6/5bb4va41JRgL/bMceecvpwjU=
Subject key identifier:   90:A7:C2:01:BE:CA:1E:93:A3:92:88:3E:15:CE:EF:05:EC:E3:43:AE
Certificate issuer:       /CN=892C2C5990DF4D7045BB55A011F473261F0643F6
Certificate serial:       026947CCF229720A11BA1E86B897DD1BDCF49A03
Authority key identifier: 89:2C:2C:59:90:DF:4D:70:45:BB:55:A0:11:F4:73:26:1F:06:43:F6
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/892C2C5990DF4D7045BB55A011F473261F0643F6.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/326131343a373538313a366662303a3a2f34342d3438203d3e20323136343332.roa
Signing time:             Sat 31 Jan 2026 06:44:06 +0000
ROA not before:           Sat 31 Jan 2026 06:39:06 +0000
ROA not after:            Sat 30 Jan 2027 06:44:06 +0000
asID:                     216432
IP address blocks:        2a14:7581:6fb0::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/892C2C5990DF4D7045BB55A011F473261F0643F6.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 05:54:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:69:47:cc:f2:29:72:0a:11:ba:1e:86:b8:97:dd:1b:dc:f4:9a:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=892C2C5990DF4D7045BB55A011F473261F0643F6
        Validity
            Not Before: Jan 31 06:39:06 2026 GMT
            Not After : Jan 30 06:44:06 2027 GMT
        Subject: CN=90A7C201BECA1E93A392883E15CEEF05ECE343AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a7:1b:23:40:b9:a0:0b:b2:f8:df:29:3d:ca:
                    e9:2a:50:3d:d5:f4:8f:da:c7:d7:3e:06:b0:f8:20:
                    b0:c9:74:0c:5f:93:b6:86:66:3b:a2:6c:d0:23:48:
                    43:8d:c7:d1:c3:37:ed:4e:77:fd:20:5e:82:ee:b1:
                    97:ec:e0:05:35:f2:f2:fc:c2:97:9a:1a:b8:8b:12:
                    30:4d:2f:ca:ad:bd:93:8a:e8:ba:40:ce:54:5e:48:
                    e2:6c:d3:2e:38:dc:28:22:65:11:0f:f3:4a:b0:a3:
                    d5:84:87:6c:92:a4:b0:29:62:52:a8:16:43:24:85:
                    04:bc:f3:8c:d8:60:0e:ad:49:b4:42:64:cb:03:e2:
                    15:c5:dc:c5:64:41:50:c1:ad:d9:5d:3f:9e:64:a8:
                    1c:61:77:87:a6:9b:d7:37:fe:cb:6a:4e:d6:45:81:
                    45:1b:8f:fc:25:1c:e9:a5:43:fe:de:54:c0:78:ed:
                    41:49:a8:d8:97:a0:a1:69:2c:aa:6d:35:4b:f4:86:
                    4c:2b:6e:9d:77:72:96:3f:92:64:b7:55:0f:d1:b3:
                    4c:d1:59:ca:52:e5:79:2f:46:62:18:38:ec:f0:0a:
                    d4:b1:fa:6f:71:e1:c7:14:2d:b1:70:e3:a5:d5:38:
                    2c:08:8a:3f:6e:ad:c1:08:cf:fe:f2:ab:50:e7:92:
                    38:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:A7:C2:01:BE:CA:1E:93:A3:92:88:3E:15:CE:EF:05:EC:E3:43:AE
            X509v3 Authority Key Identifier:
                keyid:89:2C:2C:59:90:DF:4D:70:45:BB:55:A0:11:F4:73:26:1F:06:43:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/892C2C5990DF4D7045BB55A011F473261F0643F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/326131343a373538313a366662303a3a2f34342d3438203d3e20323136343332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:6fb0::/44

    Signature Algorithm: sha256WithRSAEncryption
         a3:af:43:08:2f:56:22:48:5c:81:ea:5c:39:8d:3c:14:e3:6b:
         f4:8b:a0:ef:d6:63:ae:fb:cf:c6:0d:3c:6c:96:57:89:23:42:
         bd:9b:86:e3:ff:08:55:68:60:68:cb:7f:10:d7:9f:64:60:dd:
         67:15:b7:3e:10:61:1c:8b:47:d0:28:75:24:e3:9d:04:86:4e:
         b7:eb:6d:b2:17:7c:8b:e2:77:4f:2d:91:c0:b3:fc:cc:88:49:
         52:1f:be:5a:82:90:e1:15:69:3a:ad:02:ec:b4:88:a2:d1:a5:
         90:60:bc:ca:55:4e:4f:17:a5:ac:47:17:a6:94:78:eb:e4:3c:
         cd:7d:c0:bc:ec:05:a4:1b:66:85:91:b2:58:89:73:67:2c:5d:
         95:dd:02:5e:d9:71:b5:b1:bc:48:96:be:c5:ef:4a:b6:7c:3d:
         41:6c:72:d7:94:3e:23:6e:3c:ba:d0:46:07:e5:4c:21:ee:b7:
         0f:c9:a9:94:d9:8d:c4:03:7a:b0:54:1e:08:1f:a2:c2:e2:3e:
         f1:18:e3:53:31:cb:f7:bb:7d:4f:a7:c4:5c:6f:a5:96:60:3d:
         76:73:3b:dc:88:41:e2:a6:16:b6:c6:bb:8b:61:d3:34:b3:91:
         1f:4d:6b:f5:a6:f9:34:3e:1a:39:d6:6e:26:a7:16:a6:1b:f5:
         d9:05:97:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:41:29 2026 by rpki-client