This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/2/326130363a313238333a386233303a3a2f34342d313238203d3e20323036363034.roa
File:                     326130363a313238333a386233303a3a2f34342d313238203d3e20323036363034.roa (raw, json)
Hash identifier:          M/SQEEsPSJ7sSYSht5AIvT1euf4dtT9kGvx4dHdKEGM=
Subject key identifier:   AF:90:57:D8:C9:D8:80:E8:E7:47:96:4D:75:95:82:3E:11:F4:0D:A5
Certificate issuer:       /CN=B113B31E9F01A2F41870E8C77492B18EBA830E07
Certificate serial:       4FB704707E5ED343A6EB995A16907335D1F2ACA5
Authority key identifier: B1:13:B3:1E:9F:01:A2:F4:18:70:E8:C7:74:92:B1:8E:BA:83:0E:07
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/B113B31E9F01A2F41870E8C77492B18EBA830E07.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/2/326130363a313238333a386233303a3a2f34342d313238203d3e20323036363034.roa
Signing time:             Sat 03 Jan 2026 21:39:03 +0000
ROA not before:           Sat 03 Jan 2026 21:34:03 +0000
ROA not after:            Sat 02 Jan 2027 21:39:03 +0000
asID:                     206604
IP address blocks:        2a06:1283:8b30::/44 maxlen: 128
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/2/B113B31E9F01A2F41870E8C77492B18EBA830E07.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/2/B113B31E9F01A2F41870E8C77492B18EBA830E07.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/B113B31E9F01A2F41870E8C77492B18EBA830E07.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Jan 2026 06:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:b7:04:70:7e:5e:d3:43:a6:eb:99:5a:16:90:73:35:d1:f2:ac:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B113B31E9F01A2F41870E8C77492B18EBA830E07
        Validity
            Not Before: Jan  3 21:34:03 2026 GMT
            Not After : Jan  2 21:39:03 2027 GMT
        Subject: CN=AF9057D8C9D880E8E747964D7595823E11F40DA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:cb:ca:81:8e:34:78:04:ca:3d:99:73:ab:8c:
                    5c:a5:79:6c:f2:b6:66:9f:75:3d:f5:95:d6:5f:9a:
                    a1:ab:24:84:a1:c6:c9:cf:28:1a:fd:2c:6b:29:c1:
                    7d:59:ab:e8:9c:da:a6:bc:2a:80:9e:2a:78:f7:2f:
                    b6:46:57:ae:17:d0:2e:70:71:bb:45:cc:98:f7:35:
                    97:5b:97:e1:73:b0:d9:85:eb:83:ca:8f:a1:c3:27:
                    a9:49:73:23:61:83:e7:bd:a1:b1:b0:03:ab:5d:3f:
                    e0:e8:a9:ce:cb:db:d2:30:ee:5a:dc:a7:1b:35:59:
                    2f:aa:cb:c9:e8:d6:f7:f8:ce:9f:dd:ec:ad:34:5e:
                    2b:42:52:ed:fc:b5:e3:6a:ca:d0:2d:bb:ad:2f:7e:
                    9a:52:7d:23:ca:4e:98:2c:48:c9:08:af:5a:b3:7e:
                    ba:67:31:6a:fb:1b:f8:c9:ec:8e:f3:7e:2a:d6:9c:
                    89:1a:c3:f4:cb:45:6c:c2:f9:5f:4a:85:75:6c:e3:
                    d2:9d:5f:75:16:1e:11:ae:7a:e0:88:9a:a6:54:4f:
                    02:e5:2e:c4:01:a1:db:9c:8f:6c:b9:e0:d8:bd:24:
                    05:0d:ed:5e:1b:29:1c:7a:78:5e:c4:05:9c:89:02:
                    44:03:f6:73:41:4e:b1:04:0c:a7:33:e0:4d:5b:72:
                    d1:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:90:57:D8:C9:D8:80:E8:E7:47:96:4D:75:95:82:3E:11:F4:0D:A5
            X509v3 Authority Key Identifier:
                keyid:B1:13:B3:1E:9F:01:A2:F4:18:70:E8:C7:74:92:B1:8E:BA:83:0E:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/2/B113B31E9F01A2F41870E8C77492B18EBA830E07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/B113B31E9F01A2F41870E8C77492B18EBA830E07.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/2/326130363a313238333a386233303a3a2f34342d313238203d3e20323036363034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1283:8b30::/44

    Signature Algorithm: sha256WithRSAEncryption
         98:99:0c:02:2e:38:24:5a:13:77:05:e8:56:e5:92:01:56:00:
         f7:97:55:36:ce:af:d8:fc:3e:d0:57:0f:1e:1d:db:01:02:f5:
         e0:77:51:4d:3e:08:2c:ff:ec:a1:e4:ce:6e:80:74:2c:c1:c4:
         2a:47:4e:1f:ac:1a:93:d4:bb:92:1b:98:c0:b2:4e:98:d3:0e:
         04:38:35:52:b5:5e:47:fb:d4:c5:c9:b2:85:21:7b:a1:34:bd:
         b1:4b:2c:a1:de:e8:e5:57:73:d8:5a:f3:a6:bc:ae:70:0f:f3:
         16:5c:25:a2:12:70:95:ff:36:48:cf:41:88:9d:80:5e:4b:7a:
         02:61:2a:a7:b4:9d:f6:76:cd:16:ae:7a:c9:f7:a1:00:6e:ba:
         69:38:3b:98:01:4e:0c:0f:f7:5f:c4:ff:d3:22:d4:51:b3:74:
         96:b6:27:f7:a6:05:26:c7:3e:02:37:28:a7:d0:8c:f1:80:6e:
         64:23:a8:34:8b:7a:d6:65:8e:c1:0a:f7:8a:b5:db:9d:88:ff:
         02:5c:4a:60:f8:83:b8:d5:a0:0b:06:c7:60:c1:ef:70:b4:da:
         22:cf:8b:9f:29:09:a3:ac:d5:04:45:d6:ba:9d:54:9a:af:15:
         3e:49:77:6a:ab:9f:7f:f1:eb:78:e2:6c:f6:15:88:fb:a7:ec:
         69:41:66:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 15:29:28 2026 by rpki-client