This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/2/326130363a313238333a386235303a3a2f34342d313238203d3e20323135383238.roa
File:                     326130363a313238333a386235303a3a2f34342d313238203d3e20323135383238.roa (raw, json)
Hash identifier:          NkIHr5m7R+YWRxdAVNoXloGFkanF8yYXzQIAONC6t9Y=
Subject key identifier:   8B:C0:7C:9C:50:8E:87:2D:98:97:17:20:FC:F8:20:30:5B:7E:F9:85
Certificate issuer:       /CN=B113B31E9F01A2F41870E8C77492B18EBA830E07
Certificate serial:       45FD255B18ABB7D97F91BCC5AF68432AB090ED4C
Authority key identifier: B1:13:B3:1E:9F:01:A2:F4:18:70:E8:C7:74:92:B1:8E:BA:83:0E:07
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/B113B31E9F01A2F41870E8C77492B18EBA830E07.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/2/326130363a313238333a386235303a3a2f34342d313238203d3e20323135383238.roa
Signing time:             Tue 06 Jan 2026 18:52:40 +0000
ROA not before:           Tue 06 Jan 2026 18:47:40 +0000
ROA not after:            Tue 05 Jan 2027 18:52:40 +0000
asID:                     215828
IP address blocks:        2a06:1283:8b50::/44 maxlen: 128
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/2/B113B31E9F01A2F41870E8C77492B18EBA830E07.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/2/B113B31E9F01A2F41870E8C77492B18EBA830E07.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/B113B31E9F01A2F41870E8C77492B18EBA830E07.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Jan 2026 06:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:fd:25:5b:18:ab:b7:d9:7f:91:bc:c5:af:68:43:2a:b0:90:ed:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B113B31E9F01A2F41870E8C77492B18EBA830E07
        Validity
            Not Before: Jan  6 18:47:40 2026 GMT
            Not After : Jan  5 18:52:40 2027 GMT
        Subject: CN=8BC07C9C508E872D98971720FCF820305B7EF985
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:d6:c1:7a:07:b5:0c:8f:95:ad:34:e8:cb:99:
                    50:5b:35:9c:b0:76:f6:e1:65:d2:90:16:cc:09:25:
                    ee:c4:f2:8b:d7:2f:b5:e0:f8:7b:8a:61:26:09:cb:
                    b2:ee:3d:31:4b:50:a6:f7:90:51:8f:58:70:26:08:
                    78:40:9c:74:ef:61:04:0d:25:06:e8:77:41:90:cb:
                    ca:25:34:8b:34:05:a6:35:44:5d:95:74:7a:85:50:
                    40:6e:97:d8:e2:25:b1:f7:ae:7b:c3:3e:00:b6:ca:
                    32:d9:b6:f5:ef:5d:90:f1:9b:43:45:d8:f1:cc:7d:
                    8c:00:80:a3:c1:98:84:35:33:a7:7e:ee:b5:d9:c8:
                    27:e5:20:a2:1b:61:85:9a:20:07:1e:e3:2a:ce:c2:
                    eb:a6:96:53:3b:9e:cd:1d:2f:73:14:31:32:15:8d:
                    c7:b9:68:74:07:40:8e:33:0a:39:80:46:81:f7:21:
                    e5:20:69:dd:f8:cc:d8:51:6c:7c:ff:c9:41:63:d8:
                    35:7e:e0:6d:1f:7c:88:0e:77:e8:83:15:ac:1d:a2:
                    5e:36:79:44:ce:8a:f5:c9:fc:89:72:1c:f9:d2:cb:
                    0e:05:40:56:16:17:ee:8d:cc:5d:90:40:8f:e3:6a:
                    8d:7d:6a:26:e5:28:f9:bf:1f:81:98:7d:ca:e4:e6:
                    37:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:C0:7C:9C:50:8E:87:2D:98:97:17:20:FC:F8:20:30:5B:7E:F9:85
            X509v3 Authority Key Identifier:
                keyid:B1:13:B3:1E:9F:01:A2:F4:18:70:E8:C7:74:92:B1:8E:BA:83:0E:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/2/B113B31E9F01A2F41870E8C77492B18EBA830E07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/B113B31E9F01A2F41870E8C77492B18EBA830E07.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/2/326130363a313238333a386235303a3a2f34342d313238203d3e20323135383238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1283:8b50::/44

    Signature Algorithm: sha256WithRSAEncryption
         8a:ae:2b:fb:0a:f3:2e:17:bb:21:85:7b:93:80:4e:3c:17:2a:
         d1:3e:4f:95:4b:2c:86:2b:ec:42:e6:31:e3:2e:5b:e4:e6:eb:
         bf:ee:5d:93:49:5b:53:80:d2:fb:07:3f:c5:4d:fe:25:01:28:
         26:0a:96:15:33:3a:31:a2:f4:88:8e:5e:3a:61:43:39:c3:09:
         e9:3d:bf:b2:a5:37:10:10:b6:fa:69:15:e0:4f:b0:58:4b:5e:
         a1:c2:6a:7a:e5:15:78:39:dc:c7:e2:d8:52:73:46:29:2c:d9:
         bf:f7:51:8d:e2:24:17:ad:b0:77:af:2e:ee:69:da:e8:a1:90:
         a8:ff:eb:53:ee:36:88:ad:a4:2b:be:70:55:d0:b8:8e:3c:19:
         1c:c8:9f:db:db:88:ed:a6:18:38:d4:24:8c:d7:7a:2f:39:5f:
         e8:7b:ad:8b:51:8f:71:9b:c9:69:db:83:c6:56:40:56:d0:d3:
         bf:bd:df:a2:a7:8f:c9:df:f4:8b:1d:85:5d:46:55:8e:24:e6:
         55:d8:6b:43:93:a6:ec:e6:6a:13:0d:7c:1e:6c:e3:93:1f:77:
         b1:cd:66:4f:48:b6:58:22:ea:b8:6d:8c:05:55:cd:b7:c4:31:
         ab:34:f7:82:09:ed:fa:ed:56:ff:97:4c:f2:c7:dd:37:55:85:
         c3:c3:1b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 15:29:19 2026 by rpki-client