This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/2/326130363a313238333a386130303a3a2f34302d313238203d3e20323131303636.roa
File:                     326130363a313238333a386130303a3a2f34302d313238203d3e20323131303636.roa (raw, json)
Hash identifier:          vndd0KGTiH9fH/CBomMfV9uAFtyFdoQpFIHzYupiN3I=
Subject key identifier:   15:C1:78:CD:E8:E2:76:92:CE:8D:27:0D:1A:70:63:12:0D:31:1D:DC
Certificate issuer:       /CN=B113B31E9F01A2F41870E8C77492B18EBA830E07
Certificate serial:       10CB5D5A160A078D57EA1B640761FB9008D5AEC0
Authority key identifier: B1:13:B3:1E:9F:01:A2:F4:18:70:E8:C7:74:92:B1:8E:BA:83:0E:07
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/B113B31E9F01A2F41870E8C77492B18EBA830E07.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/2/326130363a313238333a386130303a3a2f34302d313238203d3e20323131303636.roa
Signing time:             Sat 03 Jan 2026 21:39:28 +0000
ROA not before:           Sat 03 Jan 2026 21:34:28 +0000
ROA not after:            Sat 02 Jan 2027 21:39:28 +0000
asID:                     211066
IP address blocks:        2a06:1283:8a00::/40 maxlen: 128
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/2/B113B31E9F01A2F41870E8C77492B18EBA830E07.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/2/B113B31E9F01A2F41870E8C77492B18EBA830E07.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/B113B31E9F01A2F41870E8C77492B18EBA830E07.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Jan 2026 06:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:cb:5d:5a:16:0a:07:8d:57:ea:1b:64:07:61:fb:90:08:d5:ae:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B113B31E9F01A2F41870E8C77492B18EBA830E07
        Validity
            Not Before: Jan  3 21:34:28 2026 GMT
            Not After : Jan  2 21:39:28 2027 GMT
        Subject: CN=15C178CDE8E27692CE8D270D1A7063120D311DDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:13:42:9d:23:c0:81:ae:02:69:b6:1d:ff:66:
                    f1:8f:ab:c2:0d:84:f8:16:2f:73:a7:84:cd:34:21:
                    58:ae:4c:51:28:c9:5c:22:6f:8f:d5:9a:98:e5:ea:
                    39:c9:9f:1d:50:d3:b4:26:71:13:19:1e:09:8f:0b:
                    96:17:b5:87:fa:bd:81:93:63:05:59:87:2b:a5:ee:
                    f3:c2:b2:80:7a:83:db:5d:47:0b:fd:cc:5a:db:d2:
                    94:a7:14:d9:ac:0d:9b:1c:f0:fd:b2:00:30:b1:ba:
                    0c:b9:63:02:4f:82:6d:e8:a0:5a:b3:ca:62:9f:d0:
                    4b:7a:3e:c3:77:0f:9c:80:e4:de:af:4b:47:47:70:
                    66:87:25:cf:d9:e2:64:21:58:fb:f5:3c:79:39:30:
                    41:1f:25:f0:8d:79:1a:16:22:54:6b:3e:86:49:67:
                    19:da:a6:f8:75:22:d6:a7:99:27:4d:79:41:6c:1e:
                    f2:44:62:b0:22:97:9d:0b:51:b2:a5:c5:e2:37:f2:
                    ab:9a:d1:6f:72:84:68:ff:38:22:a5:85:85:d6:e2:
                    b4:92:f1:56:17:e8:98:d1:c3:f4:ca:24:3b:79:1d:
                    89:51:82:17:73:2b:dd:02:70:91:a7:06:c9:43:20:
                    31:8f:bc:25:53:48:35:c3:cb:f9:89:2b:54:b9:af:
                    0c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:C1:78:CD:E8:E2:76:92:CE:8D:27:0D:1A:70:63:12:0D:31:1D:DC
            X509v3 Authority Key Identifier:
                keyid:B1:13:B3:1E:9F:01:A2:F4:18:70:E8:C7:74:92:B1:8E:BA:83:0E:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/2/B113B31E9F01A2F41870E8C77492B18EBA830E07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/B113B31E9F01A2F41870E8C77492B18EBA830E07.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/2/326130363a313238333a386130303a3a2f34302d313238203d3e20323131303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1283:8a00::/40

    Signature Algorithm: sha256WithRSAEncryption
         42:30:d9:bc:17:a9:0c:25:42:64:26:99:c5:53:02:9d:4a:12:
         9b:15:e0:2d:da:59:80:1f:53:cd:3a:ee:0a:67:df:40:99:44:
         71:25:27:86:dc:09:55:2e:a5:c8:85:73:ab:82:e1:8e:53:a6:
         a2:53:e3:61:c7:71:24:e1:be:cc:94:b5:dc:cc:71:39:04:f8:
         e2:b1:da:0a:ba:bc:8d:7f:45:6b:b3:bd:46:74:87:aa:2e:71:
         3d:d9:d9:91:16:1d:92:44:6d:ec:7e:81:32:7a:f6:eb:b5:89:
         f0:29:9f:0b:2b:aa:a5:ec:4a:82:00:0a:39:52:12:02:b7:34:
         5e:69:09:40:a1:d8:9c:18:9f:83:e2:05:cf:4f:eb:c3:81:16:
         2c:4f:d9:be:a0:a2:3d:17:4d:1f:23:7d:3d:b2:22:e5:5c:e6:
         9e:0a:75:3b:99:99:4e:77:ab:3d:02:20:af:55:42:31:74:15:
         ce:76:5e:16:8e:e0:2b:95:64:ca:3d:6c:ab:98:35:c0:6d:ae:
         b3:c8:51:63:d7:c1:87:0a:92:f4:ae:9d:fa:79:f1:df:52:b8:
         92:ac:98:c5:60:5a:1f:33:6a:3a:bf:66:ec:fc:3b:e6:8e:58:
         7a:56:1c:4c:0e:1e:8d:3e:ca:83:ba:d4:6c:ea:88:8e:79:fe:
         f6:bc:31:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 15:29:25 2026 by rpki-client