This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613436643a3a2f34382d3438203d3e20323134393535.roa
File:                     323630323a663932613a613436643a3a2f34382d3438203d3e20323134393535.roa (raw, json)
Hash identifier:          nHGY9JwHA1gV3ZB01r0NsQMlXvaKKqpqjnW3pCpd9Fc=
Subject key identifier:   CE:5F:7F:AB:0B:2F:7A:1B:B9:1A:54:FE:A5:D2:6A:FA:1A:D0:4E:AD
Certificate issuer:       /CN=a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8
Certificate serial:       13D7B107175A62E7D731D871E8340713937E50DB
Authority key identifier: 65:2C:01:99:E6:56:2F:B6:11:9E:25:92:30:16:98:26:29:C2:10:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613436643a3a2f34382d3438203d3e20323134393535.roa
Signing time:             Sat 17 Jan 2026 21:27:43 +0000
ROA not before:           Sat 17 Jan 2026 21:22:43 +0000
ROA not after:            Sat 16 Jan 2027 21:27:43 +0000
asID:                     214955
IP address blocks:        2602:f92a:a46d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/652C0199E6562FB6119E25923016982629C2108D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/652C0199E6562FB6119E25923016982629C2108D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 19 Jan 2026 11:02:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:d7:b1:07:17:5a:62:e7:d7:31:d8:71:e8:34:07:13:93:7e:50:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8
        Validity
            Not Before: Jan 17 21:22:43 2026 GMT
            Not After : Jan 16 21:27:43 2027 GMT
        Subject: CN=CE5F7FAB0B2F7A1BB91A54FEA5D26AFA1AD04EAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1d:bf:b2:8a:1f:6a:5a:77:f1:40:d6:66:75:
                    b9:79:de:41:38:ce:4c:e1:8d:21:dd:6f:b2:8b:74:
                    6a:88:b2:b0:73:6d:dc:1a:5b:b0:f4:2b:6e:6d:58:
                    21:fa:c2:db:04:84:68:ac:82:dc:a9:5d:f8:c0:9b:
                    cb:34:1d:9b:ae:8a:a5:a0:58:69:ea:88:68:ff:c8:
                    c6:c3:dd:5f:fb:69:ec:b5:3b:a4:1e:aa:51:71:5e:
                    7c:1f:72:0a:2e:ed:30:37:8b:30:60:30:fc:d3:1a:
                    8a:84:84:f2:41:96:3c:36:ec:5d:53:1d:02:d5:45:
                    c8:6d:fd:45:39:b8:82:c0:9f:b1:fe:fa:f4:30:44:
                    b9:79:e6:81:59:ab:c9:f4:05:ce:eb:1f:28:83:70:
                    6a:a6:24:df:c3:5b:c3:c0:55:f5:51:e7:d7:d8:15:
                    0e:5b:69:1c:fd:a7:af:07:a1:0f:a9:bf:61:28:bb:
                    3c:fa:eb:fb:b5:2d:14:d0:5e:f6:a8:7d:de:33:49:
                    bb:c7:18:57:b1:fd:8d:ba:da:28:f8:06:32:75:ee:
                    a0:94:17:ad:71:73:06:42:1f:59:fe:75:cf:25:50:
                    49:70:69:bf:fd:ee:ca:f3:55:16:7b:bf:d7:bb:c8:
                    a9:24:e9:12:6f:31:2a:7d:0a:d2:55:17:5e:1c:89:
                    04:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:5F:7F:AB:0B:2F:7A:1B:B9:1A:54:FE:A5:D2:6A:FA:1A:D0:4E:AD
            X509v3 Authority Key Identifier:
                keyid:65:2C:01:99:E6:56:2F:B6:11:9E:25:92:30:16:98:26:29:C2:10:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/652C0199E6562FB6119E25923016982629C2108D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613436643a3a2f34382d3438203d3e20323134393535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f92a:a46d::/48

    Signature Algorithm: sha256WithRSAEncryption
         41:e7:08:4a:1f:8a:89:d4:23:a7:f4:d7:13:f8:bb:21:ed:0e:
         54:ad:49:07:11:31:e5:b6:85:0d:66:0d:82:b8:d5:4f:82:84:
         08:61:55:32:22:17:38:e2:06:f3:09:29:32:b8:6e:db:4c:3f:
         2a:6b:3c:ff:33:af:9a:c0:b8:30:54:71:1c:b6:02:5e:be:9f:
         04:73:8b:35:c0:5e:4a:e4:09:07:3c:81:e8:66:07:55:43:8a:
         8f:18:41:95:d2:56:bd:13:25:63:f2:3b:33:f0:b1:74:b5:ce:
         1e:45:2a:ae:2e:3e:0e:5d:cb:47:5a:72:3e:1d:a7:c1:92:2e:
         5f:21:b5:15:21:fc:8d:4d:7a:4d:a8:04:40:9f:0b:ae:05:de:
         04:63:17:33:61:8a:5d:21:38:d4:94:54:fb:63:da:68:2f:13:
         6b:53:6e:dd:b9:ae:28:47:18:4e:ce:79:25:8b:58:ba:8b:b6:
         c3:22:b5:db:e0:93:01:02:98:71:e8:61:58:8f:d2:6b:e9:7c:
         c2:62:ec:8e:49:90:c9:07:03:95:34:d7:a2:40:79:81:32:65:
         7f:2a:9a:cd:25:dc:35:74:9f:82:ce:f8:af:ae:9b:9a:dd:f5:
         ca:f3:b8:8c:ef:1c:d5:ee:f8:74:42:9a:ea:fc:8b:b5:79:84:
         d8:87:57:9d
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIUE9exBxdaYufXMdhx6DQHE5N+UNswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYTIyYWE4MmJkNjA5YjdiNjgwOGUyMTM0YTRmOGJiNmNl
ZWYyODUxNDQxZWQ3YzBmZTgwHhcNMjYwMTE3MjEyMjQzWhcNMjcwMTE2MjEyNzQz
WjAzMTEwLwYDVQQDEyhDRTVGN0ZBQjBCMkY3QTFCQjkxQTU0RkVBNUQyNkFGQTFB
RDA0RUFEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuR2/soofalp3
8UDWZnW5ed5BOM5M4Y0h3W+yi3RqiLKwc23cGluw9CtubVgh+sLbBIRorILcqV34
wJvLNB2broqloFhp6oho/8jGw91f+2nstTukHqpRcV58H3IKLu0wN4swYDD80xqK
hITyQZY8NuxdUx0C1UXIbf1FObiCwJ+x/vr0MES5eeaBWavJ9AXO6x8og3BqpiTf
w1vDwFX1UefX2BUOW2kc/aevB6EPqb9hKLs8+uv7tS0U0F72qH3eM0m7xxhXsf2N
utoo+AYyde6glBetcXMGQh9Z/nXPJVBJcGm//e7K81UWe7/Xu8ipJOkSbzEqfQrS
VRdeHIkEuwIDAQABo4IC2jCCAtYwHQYDVR0OBBYEFM5ff6sLL3obuRpU/qXSavoa
0E6tMB8GA1UdIwQYMBaAFGUsAZnmVi+2EZ4lkjAWmCYpwhCNMA4GA1UdDwEB/wQE
AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu
cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzhhZmI1ZmUyLTNjMmEtNDkzOS05NWU5
LTAwNzdiODBiNGYwZS8xLzY1MkMwMTk5RTY1NjJGQjYxMTlFMjU5MjMwMTY5ODI2
MjlDMjEwOEQuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy
c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0
YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmIt
NDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83ZjMzY2Y1OS1hZTM1LTQxZDQtODI1Mi1k
OWJkYmFiYTQyMTAvYTIyYWE4MmJkNjA5YjdiNjgwOGUyMTM0YTRmOGJiNmNlZWYy
ODUxNDQxZWQ3YzBmZTguY2VyMIG3BggrBgEFBQcBCwSBqjCBpzCBpAYIKwYBBQUH
MAuGgZdyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
LzhhZmI1ZmUyLTNjMmEtNDkzOS05NWU5LTAwNzdiODBiNGYwZS8xLzMyMzYzMDMy
M2E2NjM5MzI2MTNhNjEzNDM2NjQzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMx
MzQzOTM1MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUH
AQcBAf8EEzARMA8EAgACMAkDBwAmAvkqpG0wDQYJKoZIhvcNAQELBQADggEBAEHn
CEofionUI6f01xP4uyHtDlStSQcRMeW2hQ1mDYK41U+ChAhhVTIiFzjiBvMJKTK4
bttMPyprPP8zr5rAuDBUcRy2Al6+nwRzizXAXkrkCQc8gehmB1VDio8YQZXSVr0T
JWPyOzPwsXS1zh5FKq4uPg5dy0dacj4dp8GSLl8htRUh/I1Nek2oBECfC64F3gRj
FzNhil0hONSUVPtj2mgvE2tTbt25rihHGE7OeSWLWLqLtsMitdvgkwECmHHoYViP
0mvpfMJi7I5JkMkHA5U016JAeYEyZX8qms0l3DV0n4LO+K+um5rd9crzuIzvHNXu
+HRCmur8i7V5hNiHV50=
-----END CERTIFICATE-----
Generated at Sun Jan 18 17:56:12 2026 by rpki-client