This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/2/326130363a313238333a386430303a3a2f34302d3438203d3e20323131303636.roa
File:                     326130363a313238333a386430303a3a2f34302d3438203d3e20323131303636.roa (raw, json)
Hash identifier:          1H3ZmelRouO89r9hr+yAmSPC+EHIB/3lnuzzFMg7TiQ=
Subject key identifier:   B8:89:51:7A:0A:55:34:FF:68:CF:82:B0:EB:F3:0A:A4:56:DA:D7:B9
Certificate issuer:       /CN=B113B31E9F01A2F41870E8C77492B18EBA830E07
Certificate serial:       097F6A30AABA23CC3A44F0A2FB0E29867148F5DE
Authority key identifier: B1:13:B3:1E:9F:01:A2:F4:18:70:E8:C7:74:92:B1:8E:BA:83:0E:07
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/B113B31E9F01A2F41870E8C77492B18EBA830E07.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/2/326130363a313238333a386430303a3a2f34302d3438203d3e20323131303636.roa
Signing time:             Sat 03 Jan 2026 21:40:14 +0000
ROA not before:           Sat 03 Jan 2026 21:35:14 +0000
ROA not after:            Sat 02 Jan 2027 21:40:14 +0000
asID:                     211066
IP address blocks:        2a06:1283:8d00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/2/B113B31E9F01A2F41870E8C77492B18EBA830E07.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/2/B113B31E9F01A2F41870E8C77492B18EBA830E07.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/B113B31E9F01A2F41870E8C77492B18EBA830E07.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Jan 2026 06:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:7f:6a:30:aa:ba:23:cc:3a:44:f0:a2:fb:0e:29:86:71:48:f5:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B113B31E9F01A2F41870E8C77492B18EBA830E07
        Validity
            Not Before: Jan  3 21:35:14 2026 GMT
            Not After : Jan  2 21:40:14 2027 GMT
        Subject: CN=B889517A0A5534FF68CF82B0EBF30AA456DAD7B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:15:75:1f:a8:cf:56:76:46:3a:11:56:6e:0f:
                    97:18:34:c0:3b:ba:72:ca:d7:0c:f7:95:8b:1d:b2:
                    6a:2e:49:bc:d6:af:00:00:01:4a:9d:43:45:66:68:
                    09:08:1d:fb:1d:fc:a3:8a:91:74:69:66:6d:41:07:
                    71:79:92:6b:4b:7e:26:75:dd:cd:89:3d:b4:83:4e:
                    7b:1d:1c:93:27:83:ac:cb:e4:cc:bd:94:eb:2c:8e:
                    91:aa:3f:da:4d:ab:ca:61:7b:ba:77:d8:64:68:f4:
                    fe:3f:b0:48:b2:b2:91:9d:c4:1a:b4:3b:5c:c2:33:
                    e6:5d:87:e2:84:d3:4e:da:c2:c8:57:52:39:9e:d1:
                    6b:bf:a0:53:f0:53:5b:56:71:df:6c:06:87:23:06:
                    0c:43:0a:3d:63:32:2f:a7:4e:f8:ce:60:80:9e:b7:
                    c3:6e:f7:87:54:b3:a0:b1:a4:89:7e:f1:f3:18:57:
                    95:d3:d9:52:92:c9:8a:10:d7:65:24:7f:f6:3f:2b:
                    37:4c:49:e8:47:cf:b9:a1:a5:8c:ac:de:81:3a:c4:
                    47:e6:c0:00:81:43:5f:59:7e:d0:7c:66:fa:18:2a:
                    61:23:dc:18:00:fa:21:c3:bb:14:6b:45:1a:c6:f1:
                    15:54:4b:3b:9f:ab:21:91:28:28:80:06:b2:45:c0:
                    f4:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:89:51:7A:0A:55:34:FF:68:CF:82:B0:EB:F3:0A:A4:56:DA:D7:B9
            X509v3 Authority Key Identifier:
                keyid:B1:13:B3:1E:9F:01:A2:F4:18:70:E8:C7:74:92:B1:8E:BA:83:0E:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/2/B113B31E9F01A2F41870E8C77492B18EBA830E07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/B113B31E9F01A2F41870E8C77492B18EBA830E07.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/2/326130363a313238333a386430303a3a2f34302d3438203d3e20323131303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1283:8d00::/40

    Signature Algorithm: sha256WithRSAEncryption
         8e:bc:64:c7:a6:db:fc:3b:0a:b9:78:7f:db:fe:c8:1d:d8:b2:
         e7:f4:f4:35:49:9c:a5:aa:8f:16:75:c4:5f:52:20:03:5e:a3:
         59:0f:5d:f1:32:bd:68:4e:a9:d8:39:09:14:0e:60:e1:21:ed:
         55:d8:96:40:de:91:f9:32:a6:43:d8:85:fa:b4:8e:9a:a5:b9:
         d2:fa:a0:0e:66:4c:f2:66:6a:e5:a6:15:86:f0:9d:f9:3f:d6:
         2e:21:92:e6:ba:42:36:c0:47:e1:5e:36:05:d4:da:a8:3c:62:
         82:a4:36:81:9e:f1:cd:b9:77:cf:f5:2a:2b:42:5b:b2:13:e8:
         a3:f4:a4:b3:a2:68:0c:c7:88:bd:1d:af:82:59:8e:3f:a9:43:
         a0:81:d0:18:b0:e8:22:85:39:79:d0:45:72:0c:3f:c2:89:e0:
         1c:0d:37:b3:5a:72:6e:6f:4a:85:60:e2:0a:ee:04:fd:0c:89:
         93:12:61:86:9d:85:c8:15:09:d6:63:87:79:ff:0d:fa:20:8e:
         9f:8e:32:64:fa:30:95:37:6e:17:36:5f:60:4b:2e:17:94:4a:
         6b:49:f9:c2:b1:e1:94:e5:c2:7d:ee:e8:cb:66:e4:f6:cf:47:
         ff:46:fe:3e:7f:2c:59:63:4f:7d:e1:77:cb:bc:e0:16:48:14:
         db:02:4d:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 15:29:25 2026 by rpki-client