This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613030303a3a2f34302d3438203d3e20313938333034.roa
File:                     323630323a663932613a613030303a3a2f34302d3438203d3e20313938333034.roa (raw, json)
Hash identifier:          YX1mxzfkZu8LGScEYjaMn4TI1hSQfjHgcc9tVmbWEew=
Subject key identifier:   8C:67:F6:66:4E:13:B9:76:40:E9:50:EE:98:CF:04:DB:A3:FB:4C:B5
Certificate issuer:       /CN=a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8
Certificate serial:       2B7F630C0B21954FBE37C8D47498EC5C5F5F898D
Authority key identifier: 65:2C:01:99:E6:56:2F:B6:11:9E:25:92:30:16:98:26:29:C2:10:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613030303a3a2f34302d3438203d3e20313938333034.roa
Signing time:             Sat 17 Jan 2026 21:00:18 +0000
ROA not before:           Sat 17 Jan 2026 20:55:18 +0000
ROA not after:            Sat 16 Jan 2027 21:00:18 +0000
asID:                     198304
IP address blocks:        2602:f92a:a000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/652C0199E6562FB6119E25923016982629C2108D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/652C0199E6562FB6119E25923016982629C2108D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 19 Jan 2026 11:02:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:7f:63:0c:0b:21:95:4f:be:37:c8:d4:74:98:ec:5c:5f:5f:89:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8
        Validity
            Not Before: Jan 17 20:55:18 2026 GMT
            Not After : Jan 16 21:00:18 2027 GMT
        Subject: CN=8C67F6664E13B97640E950EE98CF04DBA3FB4CB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:7c:d4:77:0e:c7:e6:ba:65:47:f2:61:71:0f:
                    38:61:2d:d6:6f:72:b6:27:09:ba:51:cd:6d:96:c4:
                    65:06:4b:9e:fc:16:cf:b4:89:b0:22:dd:9e:2f:12:
                    17:6c:ed:24:25:80:e7:43:1c:50:07:fe:cb:d8:31:
                    74:1d:63:ec:b1:7e:c3:fa:a7:34:5f:0b:a9:6d:a6:
                    ad:79:b7:8e:7d:a1:f4:21:7f:af:b1:ca:9d:84:50:
                    9d:c4:09:01:44:04:51:9b:cc:31:70:37:28:f5:24:
                    31:32:d5:76:71:86:c5:ad:c1:88:12:a6:47:b9:df:
                    ee:b2:73:37:38:68:7c:04:00:88:f7:4c:6c:e8:5c:
                    81:5e:09:88:f3:d7:4f:73:1c:06:39:be:a4:fc:df:
                    97:01:b2:35:3f:77:2b:9d:66:27:04:ac:f1:ef:6f:
                    54:db:7e:ea:7d:ac:8a:75:bb:3a:c6:fd:38:19:44:
                    69:c0:1f:13:b7:d4:bf:51:b8:29:7f:e8:a9:82:92:
                    c3:40:34:4e:8d:c0:95:7b:43:12:c8:0e:c8:d7:84:
                    4e:f6:5c:ec:dc:ab:37:88:a7:3d:95:33:25:b8:e0:
                    01:aa:f1:d8:72:c8:87:73:c1:02:9b:1c:eb:33:ae:
                    ec:0f:63:16:e6:41:a7:3b:01:9b:fd:0d:0b:19:b3:
                    d8:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:67:F6:66:4E:13:B9:76:40:E9:50:EE:98:CF:04:DB:A3:FB:4C:B5
            X509v3 Authority Key Identifier:
                keyid:65:2C:01:99:E6:56:2F:B6:11:9E:25:92:30:16:98:26:29:C2:10:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/652C0199E6562FB6119E25923016982629C2108D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613030303a3a2f34302d3438203d3e20313938333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f92a:a000::/40

    Signature Algorithm: sha256WithRSAEncryption
         8e:5a:bd:35:0d:72:90:7a:0d:0f:bf:90:c3:a8:43:07:7a:d7:
         a1:d5:31:01:8b:23:8f:4b:51:5a:31:17:84:ae:0a:6a:80:40:
         f0:3c:a5:93:f0:01:39:84:44:b9:e4:c4:bd:3b:60:21:ac:65:
         e9:af:ee:ec:11:d9:c4:5b:77:a8:a7:59:bd:b3:81:60:8a:62:
         5e:3d:89:76:55:44:09:86:78:ef:88:d2:67:fe:13:49:2f:d7:
         e6:96:4a:ca:8b:01:4b:c0:5d:64:94:a1:6e:44:b5:ce:42:c7:
         26:67:c6:91:5e:01:c8:95:cc:57:7c:f5:a8:91:83:db:df:ce:
         1c:87:e4:d8:08:a5:ef:ab:24:17:0c:43:55:35:d0:f0:7e:7b:
         c3:a7:62:db:d3:63:f7:2a:bd:e5:ca:43:9d:cf:f4:8f:89:4a:
         35:c6:6e:70:47:9f:99:24:5a:50:8c:f7:87:2c:f4:09:a1:65:
         7b:6b:5f:c2:ef:d8:f5:6c:80:42:0c:17:1b:69:b5:45:a6:f7:
         d5:2e:4e:8d:bf:33:41:3d:f7:d0:a7:38:7f:62:81:30:57:60:
         72:3c:b6:a9:98:36:ae:5f:5c:35:1f:50:62:de:ba:99:14:56:
         f0:ca:02:79:20:a5:bf:dc:2f:53:84:79:c1:e0:a9:94:7a:2c:
         24:c9:73:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 17:56:13 2026 by rpki-client