This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613436633a3a2f34382d3438203d3e203531303837.roa
File:                     323630323a663932613a613436633a3a2f34382d3438203d3e203531303837.roa (raw, json)
Hash identifier:          BLqZYyTalxRWLkSRCH3NbfzX0BV/EB7yx8snEAYqCaA=
Subject key identifier:   CD:BB:75:5B:29:C0:1B:43:E7:EA:CC:9C:3E:08:7B:4D:27:5B:1D:E6
Certificate issuer:       /CN=a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8
Certificate serial:       7697C8D72DA21B3C1800074135C58A5FC6BDD865
Authority key identifier: 65:2C:01:99:E6:56:2F:B6:11:9E:25:92:30:16:98:26:29:C2:10:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613436633a3a2f34382d3438203d3e203531303837.roa
Signing time:             Sat 17 Jan 2026 21:02:21 +0000
ROA not before:           Sat 17 Jan 2026 20:57:21 +0000
ROA not after:            Sat 16 Jan 2027 21:02:21 +0000
asID:                     51087
IP address blocks:        2602:f92a:a46c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/652C0199E6562FB6119E25923016982629C2108D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/652C0199E6562FB6119E25923016982629C2108D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 19 Jan 2026 11:02:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:97:c8:d7:2d:a2:1b:3c:18:00:07:41:35:c5:8a:5f:c6:bd:d8:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8
        Validity
            Not Before: Jan 17 20:57:21 2026 GMT
            Not After : Jan 16 21:02:21 2027 GMT
        Subject: CN=CDBB755B29C01B43E7EACC9C3E087B4D275B1DE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b6:6c:ba:f3:c9:cb:1c:91:fb:0b:ce:11:cd:
                    38:91:73:8f:67:7a:0c:cc:ee:d7:cc:2f:80:01:e4:
                    92:d6:32:de:74:91:8d:04:3e:e2:df:c1:c4:3e:4d:
                    3a:fd:11:e8:d2:b9:30:8f:a8:48:7d:aa:7b:dc:66:
                    d7:3f:f6:c0:f3:c4:51:5b:ef:78:e7:26:1f:9c:44:
                    22:d9:04:e7:c2:5a:2c:35:92:30:e1:97:ac:68:e9:
                    aa:4b:c2:b1:93:dd:1d:51:85:07:80:82:16:30:e4:
                    da:5b:12:ff:02:2e:1c:a6:28:ec:57:fd:45:62:65:
                    19:4a:5a:d3:32:49:79:7f:26:51:c0:a2:f0:3e:e0:
                    97:59:c4:e7:60:66:5b:ee:88:b2:c2:d6:d8:b8:ae:
                    e4:aa:87:42:39:15:4b:e1:73:30:35:99:fb:4f:42:
                    a7:fe:e7:5c:b8:19:35:48:7b:73:e4:13:2b:76:ee:
                    43:85:86:49:c0:d7:36:73:26:d2:dc:5d:cd:4c:e3:
                    75:24:aa:d2:0b:c0:76:65:55:93:88:40:c6:df:b9:
                    8c:dc:20:de:2b:f6:82:48:7f:a0:da:84:b9:99:69:
                    00:d4:04:c8:76:9b:71:55:1d:2a:52:94:9c:17:32:
                    1f:b6:0e:66:bb:41:c5:b3:a2:23:81:55:e4:70:a8:
                    e2:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:BB:75:5B:29:C0:1B:43:E7:EA:CC:9C:3E:08:7B:4D:27:5B:1D:E6
            X509v3 Authority Key Identifier:
                keyid:65:2C:01:99:E6:56:2F:B6:11:9E:25:92:30:16:98:26:29:C2:10:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/652C0199E6562FB6119E25923016982629C2108D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613436633a3a2f34382d3438203d3e203531303837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f92a:a46c::/48

    Signature Algorithm: sha256WithRSAEncryption
         35:64:92:fb:34:a4:a8:4f:fd:c6:a0:6f:36:c1:46:7c:0c:3b:
         2a:9a:b3:16:70:a1:d3:37:32:5a:d5:63:b6:fc:84:a3:42:47:
         ac:52:1f:a7:43:df:1b:aa:c8:b0:f6:5a:c9:4f:1e:ec:51:03:
         17:04:1e:8b:b3:a8:45:eb:22:3e:e9:44:6f:a3:b8:5f:dc:15:
         c7:d3:dd:b2:39:08:7c:ec:3e:e5:e6:04:c1:23:d9:1f:64:e5:
         2f:18:7d:6c:c1:9f:67:ef:63:c7:52:57:82:01:7f:78:db:7f:
         1a:b5:73:1c:13:40:5d:42:35:7b:2d:eb:3f:3a:25:89:2e:5a:
         6a:ef:0c:77:34:87:80:77:ab:11:b7:3c:04:3a:59:79:28:7f:
         e9:52:1d:b7:45:f9:73:5f:3e:9d:36:a5:89:84:5b:be:28:6b:
         4b:cf:6c:ae:83:f1:9d:f4:61:c0:c9:89:01:d0:6c:a3:e3:58:
         98:32:6a:9b:76:7f:ba:8f:ce:1c:7e:a4:66:59:99:27:24:d0:
         78:c8:20:0f:92:34:fa:aa:f3:be:04:b6:ec:df:7e:33:49:70:
         1b:62:21:c5:ae:f0:1c:54:ef:e9:ed:eb:87:ad:ff:13:e4:38:
         76:4d:d2:06:ad:97:a6:e3:1e:5c:0c:38:c3:bf:f1:bd:3c:d3:
         33:00:d6:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 17:55:01 2026 by rpki-client