This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/2/326130363a313238333a386230353a3a2f34382d313238203d3e20323133343133.roa
File:                     326130363a313238333a386230353a3a2f34382d313238203d3e20323133343133.roa (raw, json)
Hash identifier:          Wt4+SHGel50fivTQIJe+tjpPeJOC1stVwneM507pM6g=
Subject key identifier:   01:AB:88:6D:6F:00:25:94:1D:FB:A0:91:17:55:CE:DA:4C:18:E6:11
Certificate issuer:       /CN=B113B31E9F01A2F41870E8C77492B18EBA830E07
Certificate serial:       3CCCA255D65A22BFF4E584C84767591A9616831D
Authority key identifier: B1:13:B3:1E:9F:01:A2:F4:18:70:E8:C7:74:92:B1:8E:BA:83:0E:07
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/B113B31E9F01A2F41870E8C77492B18EBA830E07.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/2/326130363a313238333a386230353a3a2f34382d313238203d3e20323133343133.roa
Signing time:             Sat 03 Jan 2026 21:44:30 +0000
ROA not before:           Sat 03 Jan 2026 21:39:30 +0000
ROA not after:            Sat 02 Jan 2027 21:44:30 +0000
asID:                     213413
IP address blocks:        2a06:1283:8b05::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/2/B113B31E9F01A2F41870E8C77492B18EBA830E07.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/2/B113B31E9F01A2F41870E8C77492B18EBA830E07.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/B113B31E9F01A2F41870E8C77492B18EBA830E07.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Jan 2026 06:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:cc:a2:55:d6:5a:22:bf:f4:e5:84:c8:47:67:59:1a:96:16:83:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B113B31E9F01A2F41870E8C77492B18EBA830E07
        Validity
            Not Before: Jan  3 21:39:30 2026 GMT
            Not After : Jan  2 21:44:30 2027 GMT
        Subject: CN=01AB886D6F0025941DFBA0911755CEDA4C18E611
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b6:12:f8:41:de:36:cc:06:2a:af:80:ae:5e:
                    89:b6:c0:d6:70:5c:99:25:b7:fd:86:10:12:18:15:
                    82:76:72:3c:9d:1e:a3:34:cd:db:4f:0a:6a:b9:63:
                    4a:f7:ed:8b:de:6a:43:25:87:2d:58:cb:23:78:64:
                    90:a2:7a:04:7c:62:f3:9d:c7:24:b8:8e:43:02:a0:
                    38:a1:c2:f2:ff:fe:fe:7f:ca:1f:a6:fb:45:37:47:
                    28:34:bf:5a:f0:01:fb:b9:30:68:15:c8:d3:2e:76:
                    dc:9f:80:41:5a:fb:a9:77:40:96:cb:a1:46:fe:73:
                    b3:18:77:5b:1f:56:a3:4e:8f:17:8c:67:bd:b2:98:
                    f2:80:f1:e1:86:15:2c:15:28:d6:f3:39:8a:be:41:
                    49:be:2a:5a:9a:92:6d:94:ea:95:0a:99:74:c7:77:
                    4e:b4:bd:15:9d:d5:54:16:a4:ec:ef:ab:a2:89:c7:
                    ba:85:51:ed:56:ac:3b:52:78:b8:a1:8e:2b:d4:d6:
                    0a:f5:5e:51:70:5c:79:84:28:7e:aa:19:19:ea:e6:
                    3a:b3:d4:db:72:3e:be:35:f6:bb:df:bb:65:2f:c5:
                    c1:89:14:bd:c2:ae:0d:82:2f:fa:98:1e:75:2d:e2:
                    17:16:1a:d3:c1:ad:b0:88:cb:dc:e1:93:f3:df:c0:
                    52:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:AB:88:6D:6F:00:25:94:1D:FB:A0:91:17:55:CE:DA:4C:18:E6:11
            X509v3 Authority Key Identifier:
                keyid:B1:13:B3:1E:9F:01:A2:F4:18:70:E8:C7:74:92:B1:8E:BA:83:0E:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/2/B113B31E9F01A2F41870E8C77492B18EBA830E07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/B113B31E9F01A2F41870E8C77492B18EBA830E07.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/2/326130363a313238333a386230353a3a2f34382d313238203d3e20323133343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1283:8b05::/48

    Signature Algorithm: sha256WithRSAEncryption
         19:c7:0c:0b:67:ba:24:5d:60:79:00:9e:76:29:57:e2:56:3c:
         ee:02:fa:55:84:ba:b9:60:6e:dd:33:63:17:9f:8e:6e:53:a3:
         a1:6e:5a:2c:17:04:4d:43:98:1d:38:aa:b8:05:53:51:84:f7:
         3a:8a:f9:2c:90:78:ef:88:d7:19:47:ff:a2:31:34:d9:cf:fd:
         b2:6c:88:6f:df:6f:d3:cb:7c:b2:58:7d:71:d9:44:2e:42:42:
         a0:58:ac:74:2c:53:cf:8a:54:9c:98:72:64:f7:04:25:da:9b:
         d2:a6:8e:65:de:7a:33:a7:0b:25:34:69:b9:b5:83:ff:88:09:
         f4:57:0f:a4:a1:2c:45:85:ec:e6:35:fc:52:2c:2a:de:bf:2e:
         87:59:6c:f1:fd:65:1a:90:69:f0:cf:48:14:d7:bd:95:cc:e3:
         bf:2b:c8:86:29:58:66:31:de:d9:2c:43:94:89:4c:c2:f0:df:
         c4:06:c9:fa:09:37:75:9c:d2:09:a8:04:bd:cd:31:2c:da:46:
         94:cf:f4:d9:37:dc:38:57:c2:66:7c:57:c4:03:d5:93:9f:b2:
         0c:98:2d:ec:94:76:1f:94:5b:80:1c:04:13:98:69:8b:91:8f:
         52:d8:b0:4c:1d:ca:50:6c:83:ae:92:fc:85:af:aa:9a:0f:90:
         4a:d5:31:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 15:29:23 2026 by rpki-client