This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/326130363a313238333a383930373a3a2f34382d3438203d3e20323135303330.roa
File:                     326130363a313238333a383930373a3a2f34382d3438203d3e20323135303330.roa (raw, json)
Hash identifier:          VcVUsrYac0pzWJK2F7lpmFfvFDL2ZKG/uypN2LdY9f4=
Subject key identifier:   D1:78:C7:44:D0:71:7D:BD:69:35:C5:72:54:CA:98:06:FC:46:A7:0A
Certificate issuer:       /CN=5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9
Certificate serial:       1087FB742C1AD6FD37CB699873B136095D2BDF0B
Authority key identifier: 5F:BB:D0:F3:D7:B8:1E:8A:FD:99:E5:A3:4B:67:83:4D:D3:CD:13:C9
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/326130363a313238333a383930373a3a2f34382d3438203d3e20323135303330.roa
Signing time:             Sat 07 Feb 2026 19:11:27 +0000
ROA not before:           Sat 07 Feb 2026 19:06:27 +0000
ROA not after:            Sat 06 Feb 2027 19:11:27 +0000
asID:                     215030
IP address blocks:        2a06:1283:8907::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Feb 2026 08:45:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:87:fb:74:2c:1a:d6:fd:37:cb:69:98:73:b1:36:09:5d:2b:df:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9
        Validity
            Not Before: Feb  7 19:06:27 2026 GMT
            Not After : Feb  6 19:11:27 2027 GMT
        Subject: CN=D178C744D0717DBD6935C57254CA9806FC46A70A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e3:ee:ac:83:45:6f:82:d8:98:9e:a6:24:5c:
                    5a:27:d0:5a:fc:64:5d:a3:46:2b:29:17:86:f7:f7:
                    d3:66:48:33:10:6d:75:27:29:23:b3:7e:ab:df:74:
                    05:d4:5f:29:c4:15:a8:32:c2:b9:d9:17:ad:ff:b5:
                    39:3d:70:c7:50:43:af:0f:4e:41:50:aa:fc:8b:91:
                    a3:5e:e4:10:ac:cc:50:f9:df:bd:32:0b:50:74:10:
                    1c:aa:46:50:dd:a6:f2:36:cf:80:5b:0d:e9:92:68:
                    c7:63:25:8e:a9:14:e8:3d:e5:90:81:66:41:46:a5:
                    64:58:3a:b1:a0:00:6b:72:85:35:2c:84:7e:5c:5a:
                    34:6e:3d:73:59:ad:28:66:f0:c8:3d:0f:b3:92:b0:
                    5d:b2:18:e4:bc:9a:c9:61:26:c6:54:6f:c1:3e:79:
                    55:64:87:fd:cc:6a:93:30:26:91:f0:6a:3a:d3:27:
                    84:d0:3a:c7:4e:73:dc:a5:17:94:76:e6:e4:a2:25:
                    81:01:6a:0e:b8:80:4d:07:59:3a:2c:51:43:61:ad:
                    3a:4e:c4:65:6c:9e:60:f0:6d:cc:37:a5:89:e3:14:
                    55:bb:9a:2b:53:31:ed:6f:e2:02:c0:1d:ce:10:f7:
                    a4:3b:8d:2e:0a:59:80:a5:1e:0d:fc:7e:92:3e:5c:
                    d6:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:78:C7:44:D0:71:7D:BD:69:35:C5:72:54:CA:98:06:FC:46:A7:0A
            X509v3 Authority Key Identifier:
                keyid:5F:BB:D0:F3:D7:B8:1E:8A:FD:99:E5:A3:4B:67:83:4D:D3:CD:13:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/326130363a313238333a383930373a3a2f34382d3438203d3e20323135303330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1283:8907::/48

    Signature Algorithm: sha256WithRSAEncryption
         1b:12:09:22:fe:b3:65:c6:c4:d1:a3:3a:ef:6a:c8:e2:15:e3:
         11:69:ea:50:25:ab:39:89:8e:80:31:d5:7b:4b:d0:89:a3:14:
         fc:fa:55:c1:2f:c0:a2:38:9a:dc:e2:2b:8e:0d:cb:e2:46:46:
         0e:da:e3:d9:88:08:e8:ea:18:74:4c:aa:60:f4:d4:55:c5:59:
         81:11:01:0e:a8:e7:a8:83:2e:8d:4a:bb:93:2f:b4:9e:db:f2:
         d4:47:c0:6f:c4:c1:09:d6:07:da:dd:ed:9d:10:8a:aa:b9:9d:
         9c:77:fa:d9:6d:ac:00:64:f1:53:b0:3a:ff:6c:67:1a:ec:15:
         7d:ca:a7:5c:26:e5:f5:17:8f:ac:31:a8:5d:67:67:2c:4e:a1:
         08:1b:ca:8b:e9:33:40:26:b2:cb:02:b0:0b:17:36:de:ae:7f:
         8f:8e:43:56:ce:3e:fc:51:e4:4c:09:35:3a:e8:d7:bc:2b:2c:
         27:4e:41:89:82:c9:0e:25:35:88:e9:ca:3f:17:6f:11:0d:18:
         d9:1c:e6:65:82:65:dc:1a:d7:96:91:40:4d:06:f8:bb:53:48:
         82:a5:a5:bb:83:f7:cd:61:f1:4e:48:48:a2:44:1a:02:c3:2a:
         c0:03:16:11:24:82:41:30:fb:f1:1d:0e:90:cb:34:ce:ca:64:
         9e:03:94:15
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIUEIf7dCwa1v03y2mYc7E2CV0r3wswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUZCQkQwRjNEN0I4MUU4QUZEOTlFNUEzNEI2NzgzNERE
M0NEMTNDOTAeFw0yNjAyMDcxOTA2MjdaFw0yNzAyMDYxOTExMjdaMDMxMTAvBgNV
BAMTKEQxNzhDNzQ0RDA3MTdEQkQ2OTM1QzU3MjU0Q0E5ODA2RkM0NkE3MEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCT4+6sg0VvgtiYnqYkXFon0Fr8
ZF2jRispF4b399NmSDMQbXUnKSOzfqvfdAXUXynEFagywrnZF63/tTk9cMdQQ68P
TkFQqvyLkaNe5BCszFD5370yC1B0EByqRlDdpvI2z4BbDemSaMdjJY6pFOg95ZCB
ZkFGpWRYOrGgAGtyhTUshH5cWjRuPXNZrShm8Mg9D7OSsF2yGOS8mslhJsZUb8E+
eVVkh/3MapMwJpHwajrTJ4TQOsdOc9ylF5R25uSiJYEBag64gE0HWTosUUNhrTpO
xGVsnmDwbcw3pYnjFFW7mitTMe1v4gLAHc4Q96Q7jS4KWYClHg38fpI+XNarAgMB
AAGjggKFMIICgTAdBgNVHQ4EFgQU0XjHRNBxfb1pNcVyVMqYBvxGpwowHwYDVR0j
BBgwFoAUX7vQ89e4Hor9meWjS2eDTdPNE8kwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzhlNjE2MTEtM2IwYi00MWNlLTg4Y2QtZTU2MDM1M2Y2
OTQyLzEvNUZCQkQwRjNEN0I4MUU4QUZEOTlFNUEzNEI2NzgzNEREM0NEMTNDOS5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82OGFiYWJiYi1mMDQ4LTRk
ZTEtOTIwNi04ZDQwZjA3MTgwOGIvNi81RkJCRDBGM0Q3QjgxRThBRkQ5OUU1QTM0
QjY3ODM0REQzQ0QxM0M5LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS83OGU2MTYxMS0zYjBiLTQxY2UtODhjZC1lNTYwMzUzZjY5NDIvMS8zMjYxMzAz
NjNhMzEzMjM4MzMzYTM4MzkzMDM3M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz
MTM1MzAzMzMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAKgYSg4kHMA0GCSqGSIb3DQEBCwUAA4IBAQAb
Egki/rNlxsTRozrvasjiFeMRaepQJas5iY6AMdV7S9CJoxT8+lXBL8CiOJrc4iuO
DcviRkYO2uPZiAjo6hh0TKpg9NRVxVmBEQEOqOeogy6NSruTL7Se2/LUR8BvxMEJ
1gfa3e2dEIqquZ2cd/rZbawAZPFTsDr/bGca7BV9yqdcJuX1F4+sMahdZ2csTqEI
G8qL6TNAJrLLArALFzbern+PjkNWzj78UeRMCTU66Ne8KywnTkGJgskOJTWI6co/
F28RDRjZHOZlgmXcGteWkUBNBvi7U0iCpaW7g/fNYfFOSEiiRBoCwyrAAxYRJIJB
MPvxHQ6QyzTOymSeA5QV
-----END CERTIFICATE-----
Generated at Sun Feb 8 18:53:13 2026 by rpki-client