This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613436623a3a2f34382d3438203d3e20323034353339.roa
File:                     323630323a663932613a613436623a3a2f34382d3438203d3e20323034353339.roa (raw, json)
Hash identifier:          mTj4Kpj9skM4imBRREZv8jcja5D2jsvUqRlIxwoc3SI=
Subject key identifier:   53:B1:3B:72:0B:65:0C:B2:48:15:43:BE:AF:AE:4E:90:D0:74:96:12
Certificate issuer:       /CN=a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8
Certificate serial:       529902C2EE206D712191B46B66034D52137664BF
Authority key identifier: 65:2C:01:99:E6:56:2F:B6:11:9E:25:92:30:16:98:26:29:C2:10:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613436623a3a2f34382d3438203d3e20323034353339.roa
Signing time:             Sat 17 Jan 2026 21:17:23 +0000
ROA not before:           Sat 17 Jan 2026 21:12:23 +0000
ROA not after:            Sat 16 Jan 2027 21:17:23 +0000
asID:                     204539
IP address blocks:        2602:f92a:a46b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/652C0199E6562FB6119E25923016982629C2108D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/652C0199E6562FB6119E25923016982629C2108D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 19 Jan 2026 11:02:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:99:02:c2:ee:20:6d:71:21:91:b4:6b:66:03:4d:52:13:76:64:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8
        Validity
            Not Before: Jan 17 21:12:23 2026 GMT
            Not After : Jan 16 21:17:23 2027 GMT
        Subject: CN=53B13B720B650CB2481543BEAFAE4E90D0749612
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d7:40:44:4c:fc:4b:5c:fb:48:f1:e1:f7:f8:
                    89:a1:16:51:cf:72:24:de:90:41:b4:34:5f:c7:09:
                    1c:8b:81:c2:1b:29:d3:1b:3f:b1:8f:d3:83:37:7e:
                    ed:58:a5:d2:50:85:c4:be:2a:72:2e:aa:cc:c7:00:
                    0a:34:1c:d2:82:53:93:17:7f:80:f6:ba:01:53:ae:
                    52:04:38:05:4b:1e:95:5f:80:de:22:8b:75:f5:6c:
                    4b:4a:61:31:ca:14:91:8e:cf:19:5b:a0:1e:18:1c:
                    4d:c0:9f:ec:c5:a3:ee:f3:f8:57:8a:60:c7:63:c2:
                    c0:d9:2b:a0:3d:72:1b:90:fc:d2:46:ba:df:03:bb:
                    18:69:69:18:83:df:50:77:e2:53:0e:59:30:be:7a:
                    8f:35:f8:25:95:88:6e:18:2b:4a:cc:6a:74:82:b9:
                    9d:6b:86:5a:44:96:dc:a4:4a:82:ab:ae:12:2d:b7:
                    50:4c:ca:3a:a5:23:7f:fb:8a:5d:51:38:36:0a:63:
                    41:94:ac:1b:5a:19:95:4d:0e:90:75:c4:f0:6e:9b:
                    19:a0:15:d6:46:51:e5:d1:92:4f:b3:d2:25:90:06:
                    8a:4b:2b:8e:11:8a:fb:87:df:cd:9d:58:74:e3:56:
                    6c:88:75:2b:c9:98:ce:3f:b3:01:a0:1b:63:94:e9:
                    b4:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:B1:3B:72:0B:65:0C:B2:48:15:43:BE:AF:AE:4E:90:D0:74:96:12
            X509v3 Authority Key Identifier:
                keyid:65:2C:01:99:E6:56:2F:B6:11:9E:25:92:30:16:98:26:29:C2:10:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/652C0199E6562FB6119E25923016982629C2108D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613436623a3a2f34382d3438203d3e20323034353339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f92a:a46b::/48

    Signature Algorithm: sha256WithRSAEncryption
         8b:28:8c:ae:ca:0d:93:bd:cd:ca:05:13:10:cd:09:34:b3:8c:
         17:60:c5:fb:6a:43:6a:ae:80:24:a2:d1:3d:b9:dc:8a:0f:5d:
         d0:f2:fe:c9:fc:0e:f0:c1:6b:b0:6a:ab:e5:36:a2:dc:68:d0:
         f3:51:35:1c:9b:d6:79:6d:65:41:c2:19:0d:d4:5a:75:78:2b:
         df:bf:54:e5:15:08:a1:f1:e4:cb:7b:ee:f2:a9:35:b9:71:72:
         37:84:5c:5f:28:eb:09:da:cd:df:07:e6:7c:77:57:5e:d7:b7:
         5b:79:40:71:6b:5b:6c:40:90:5d:2d:c6:27:44:5c:42:35:65:
         47:e6:34:be:f3:b6:15:80:4a:3f:0e:5b:fa:90:fe:9b:d2:94:
         5c:d2:63:f7:7f:68:47:fb:c7:5f:6d:28:f7:93:36:f1:66:66:
         20:b1:3f:f8:4e:c4:22:20:0c:fe:7e:40:07:88:09:54:47:7f:
         33:6b:17:0e:ec:52:9d:dc:65:1e:fa:50:5e:99:5b:2a:cc:9b:
         a9:2b:95:8f:23:aa:83:99:7f:fa:f0:7d:c5:ff:20:d8:95:f6:
         c5:e6:c7:28:62:af:4b:7d:a5:9f:55:a6:6c:56:b4:0f:9c:a9:
         97:9d:91:75:6c:b9:10:f7:fb:8f:15:a8:ed:c8:01:60:51:e1:
         25:0f:e8:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 15:29:36 2026 by rpki-client