This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/2/326130363a313238333a386630303a3a2f34302d313238203d3e20323131303636.roa
File:                     326130363a313238333a386630303a3a2f34302d313238203d3e20323131303636.roa (raw, json)
Hash identifier:          hGhonvYWM23gQrcaxDOxLSBFb009+nzQklVht9IR8Dw=
Subject key identifier:   32:FB:39:E3:6B:5F:CD:A5:58:F2:99:68:CD:5A:9A:AC:B5:87:02:5B
Certificate issuer:       /CN=B113B31E9F01A2F41870E8C77492B18EBA830E07
Certificate serial:       40EDBA37784D4634ABBE1DCD593E56B348F0B983
Authority key identifier: B1:13:B3:1E:9F:01:A2:F4:18:70:E8:C7:74:92:B1:8E:BA:83:0E:07
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/B113B31E9F01A2F41870E8C77492B18EBA830E07.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/2/326130363a313238333a386630303a3a2f34302d313238203d3e20323131303636.roa
Signing time:             Tue 06 Jan 2026 20:45:57 +0000
ROA not before:           Tue 06 Jan 2026 20:40:57 +0000
ROA not after:            Tue 05 Jan 2027 20:45:57 +0000
asID:                     211066
IP address blocks:        2a06:1283:8f00::/40 maxlen: 128
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/2/B113B31E9F01A2F41870E8C77492B18EBA830E07.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/2/B113B31E9F01A2F41870E8C77492B18EBA830E07.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/B113B31E9F01A2F41870E8C77492B18EBA830E07.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Jan 2026 06:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:ed:ba:37:78:4d:46:34:ab:be:1d:cd:59:3e:56:b3:48:f0:b9:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B113B31E9F01A2F41870E8C77492B18EBA830E07
        Validity
            Not Before: Jan  6 20:40:57 2026 GMT
            Not After : Jan  5 20:45:57 2027 GMT
        Subject: CN=32FB39E36B5FCDA558F29968CD5A9AACB587025B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c3:bc:bd:33:dc:6f:1f:39:12:76:b0:f8:18:
                    ad:9d:64:9e:f3:de:f3:41:27:54:8e:7d:12:79:19:
                    87:3b:85:06:37:4b:2d:b1:c2:1e:cf:cb:ea:09:20:
                    75:55:ee:d5:10:2a:06:86:d6:68:03:ae:0c:b0:d1:
                    a5:72:a9:32:7a:a5:32:aa:89:04:d6:f8:ca:40:44:
                    fb:dc:bf:f9:30:7f:ed:8b:83:66:f0:15:1c:cb:e4:
                    b8:cc:93:a7:56:55:2b:bd:08:4b:30:8e:e3:7e:05:
                    d2:79:af:53:ae:38:90:e2:97:4a:6f:e9:32:5a:0d:
                    4a:ec:6c:27:df:fe:4f:4b:c7:ab:a3:59:9c:3d:df:
                    b5:dd:39:70:2a:e0:c8:45:93:a5:20:d8:70:3f:b2:
                    eb:c2:9a:be:0a:10:72:d8:89:4f:06:55:18:4f:75:
                    ae:b7:5f:1f:dd:b2:26:ce:4e:48:75:0f:21:0f:42:
                    e8:0e:16:93:18:74:29:de:4b:53:2e:89:21:87:53:
                    c1:56:ae:cd:74:94:38:eb:06:ab:36:5a:b5:ab:a0:
                    74:5a:d4:78:ce:09:50:65:43:a8:02:34:d3:be:9d:
                    f8:b0:ea:5c:c2:1a:0b:56:02:13:80:0a:b7:af:7a:
                    ae:76:e8:fb:16:18:6a:7d:f8:41:93:35:fc:a2:f1:
                    f7:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:FB:39:E3:6B:5F:CD:A5:58:F2:99:68:CD:5A:9A:AC:B5:87:02:5B
            X509v3 Authority Key Identifier:
                keyid:B1:13:B3:1E:9F:01:A2:F4:18:70:E8:C7:74:92:B1:8E:BA:83:0E:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/2/B113B31E9F01A2F41870E8C77492B18EBA830E07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/B113B31E9F01A2F41870E8C77492B18EBA830E07.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/2/326130363a313238333a386630303a3a2f34302d313238203d3e20323131303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1283:8f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         8b:f6:a2:f9:2e:77:21:c0:ef:21:4b:b1:6a:e4:9c:3a:e2:ae:
         0b:24:5b:a3:a8:a8:32:8b:ec:8a:20:88:57:cf:8f:7f:b8:bb:
         c0:3e:4a:91:99:1c:21:cd:58:06:98:05:05:75:68:c3:3a:74:
         96:db:61:10:27:ef:57:24:b3:97:54:c8:07:b1:37:f6:aa:2c:
         32:45:32:cf:4d:33:fa:11:32:0e:c0:37:87:79:38:b2:24:6b:
         c2:00:b9:e5:5c:2f:f4:0a:60:39:1f:4a:cc:65:a7:7b:ca:4d:
         b3:b9:ca:6a:a1:bf:1c:b0:0f:68:1d:5e:6a:96:08:6b:fb:e4:
         33:44:1a:da:0f:a6:96:ee:cf:f9:35:21:36:b6:e8:57:9c:dc:
         56:84:30:8e:85:41:9d:83:df:b6:8e:87:2e:0c:96:7b:ef:ed:
         d1:a7:d5:01:4d:8c:03:eb:9e:8c:42:3c:50:a9:e9:f9:17:64:
         96:b0:f7:1e:ab:3d:e7:15:96:78:29:11:dd:f0:ba:7e:b7:8c:
         70:38:7d:02:c0:8c:da:69:19:ee:67:ce:67:72:5d:bd:78:9f:
         33:7f:89:96:47:16:45:3f:96:26:1b:5d:dd:03:7e:46:b9:77:
         e6:3c:17:f0:2e:84:06:84:66:f2:70:a9:fb:d2:bf:6a:60:a3:
         f4:61:51:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 15:29:25 2026 by rpki-client