This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/326130363a313238333a383931303a3a2f34382d3438203d3e20323133343133.roa
File:                     326130363a313238333a383931303a3a2f34382d3438203d3e20323133343133.roa (raw, json)
Hash identifier:          oeDFQ+FnCiKJbPwAjwpePfvdkd66O/1mSy2s5rHvj9Y=
Subject key identifier:   11:A3:18:03:17:13:A0:78:CB:91:19:6E:50:9C:CE:7C:BA:59:22:5B
Certificate issuer:       /CN=5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9
Certificate serial:       27613AEEE71B2ED94A8E4F83B953049BE3920693
Authority key identifier: 5F:BB:D0:F3:D7:B8:1E:8A:FD:99:E5:A3:4B:67:83:4D:D3:CD:13:C9
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/326130363a313238333a383931303a3a2f34382d3438203d3e20323133343133.roa
Signing time:             Mon 29 Dec 2025 02:17:09 +0000
ROA not before:           Mon 29 Dec 2025 02:12:09 +0000
ROA not after:            Mon 28 Dec 2026 02:17:09 +0000
asID:                     213413
IP address blocks:        2a06:1283:8910::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Jan 2026 06:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:61:3a:ee:e7:1b:2e:d9:4a:8e:4f:83:b9:53:04:9b:e3:92:06:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9
        Validity
            Not Before: Dec 29 02:12:09 2025 GMT
            Not After : Dec 28 02:17:09 2026 GMT
        Subject: CN=11A318031713A078CB91196E509CCE7CBA59225B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:9a:0a:b7:0b:04:16:a5:2c:27:18:05:52:84:
                    dd:24:94:b0:3c:78:23:14:97:0f:59:d7:af:fa:f9:
                    39:7c:f1:bc:9a:4d:36:dc:1c:80:9d:e6:19:ed:e8:
                    90:0c:27:de:4a:f3:31:2c:0c:1e:51:82:73:3c:ae:
                    9a:50:dc:68:70:89:56:97:c2:36:45:ec:39:32:12:
                    2f:36:71:22:93:56:63:7e:61:00:bd:7c:03:eb:3c:
                    36:f8:96:57:e7:e6:71:c2:fd:18:04:9d:0f:0f:86:
                    6d:e9:87:f9:3c:b2:42:c2:1a:85:9e:a0:d3:5e:eb:
                    63:ee:d8:c6:c9:69:d6:0b:28:5f:38:7a:34:e8:95:
                    2c:22:ab:bc:e3:e0:eb:d2:ed:51:74:e5:a7:de:45:
                    17:45:b1:70:40:f4:c1:11:e4:c4:6c:c1:04:36:e8:
                    0f:eb:eb:cf:6a:e8:ed:78:cf:40:37:7b:c8:69:bb:
                    83:0f:7f:a1:12:b0:1e:c2:b0:2c:9a:95:fa:c5:9b:
                    6d:c1:b6:3c:95:7c:cf:41:35:f3:d2:ef:d8:34:ab:
                    d6:22:1a:bd:28:58:16:f5:36:29:2e:3c:0f:60:bb:
                    59:cb:67:1f:96:ba:31:96:29:96:91:f0:2c:f2:79:
                    d4:43:d2:7a:25:71:25:4d:ae:e9:d0:1b:a2:c3:c8:
                    47:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:A3:18:03:17:13:A0:78:CB:91:19:6E:50:9C:CE:7C:BA:59:22:5B
            X509v3 Authority Key Identifier:
                keyid:5F:BB:D0:F3:D7:B8:1E:8A:FD:99:E5:A3:4B:67:83:4D:D3:CD:13:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/326130363a313238333a383931303a3a2f34382d3438203d3e20323133343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1283:8910::/48

    Signature Algorithm: sha256WithRSAEncryption
         44:e5:0e:06:63:d1:88:16:8b:9d:21:38:67:a8:e1:cc:2a:13:
         1d:74:5e:49:05:26:25:dc:d6:cf:b8:c5:c6:e0:0c:b1:19:c4:
         ce:69:bf:f8:9b:62:5d:17:cf:16:13:69:7e:12:ad:98:5a:7a:
         77:1d:13:d4:89:eb:1f:16:45:b6:4c:31:3b:07:c1:37:73:de:
         f8:b8:75:d0:0b:8d:d4:e1:e3:0d:bf:55:65:ce:5c:7a:5e:e4:
         7a:e1:6f:1c:e9:0d:d0:9c:72:8d:a3:e4:6c:ec:40:57:9a:47:
         51:98:ab:6f:19:e6:da:fb:aa:ec:c7:cf:bc:1a:5b:eb:b5:72:
         d1:59:52:9f:e7:54:bf:e9:b1:48:fa:c6:4f:b9:76:db:c1:2c:
         3a:f5:40:1d:2c:61:e3:91:2f:f0:ef:fa:ad:8d:bb:b6:66:12:
         b0:c0:02:09:4f:08:e5:b8:8a:11:9d:b7:02:3e:60:20:3f:4f:
         a9:1a:80:76:dd:27:d7:e4:cd:3b:c7:b5:d0:2d:16:db:37:7a:
         5d:aa:61:bb:04:e2:73:6d:6c:65:82:80:07:aa:bf:2a:12:02:
         25:11:61:01:af:83:28:5a:48:7f:11:87:8d:a8:97:45:39:24:
         e8:a0:ba:ec:ad:8b:a9:75:35:e1:68:bb:88:ea:95:89:2b:19:
         87:52:71:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 13:14:03 2026 by rpki-client