This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613436653a3a2f34382d3438203d3e20323034353335.roa
File:                     323630323a663932613a613436653a3a2f34382d3438203d3e20323034353335.roa (raw, json)
Hash identifier:          ZTuzUBd8F+6HeeOFmS8JC85pek1UrzJEnRIsKAeVglc=
Subject key identifier:   04:72:8A:8B:3E:7C:A9:02:D8:A1:87:37:C5:AC:50:F3:1A:3C:74:C9
Certificate issuer:       /CN=a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8
Certificate serial:       6F475383D6C599CE4FF7631ED812AB97A22C9A07
Authority key identifier: 65:2C:01:99:E6:56:2F:B6:11:9E:25:92:30:16:98:26:29:C2:10:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613436653a3a2f34382d3438203d3e20323034353335.roa
Signing time:             Sat 17 Jan 2026 21:17:06 +0000
ROA not before:           Sat 17 Jan 2026 21:12:06 +0000
ROA not after:            Sat 16 Jan 2027 21:17:06 +0000
asID:                     204535
IP address blocks:        2602:f92a:a46e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/652C0199E6562FB6119E25923016982629C2108D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/652C0199E6562FB6119E25923016982629C2108D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 19 Jan 2026 11:02:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:47:53:83:d6:c5:99:ce:4f:f7:63:1e:d8:12:ab:97:a2:2c:9a:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8
        Validity
            Not Before: Jan 17 21:12:06 2026 GMT
            Not After : Jan 16 21:17:06 2027 GMT
        Subject: CN=04728A8B3E7CA902D8A18737C5AC50F31A3C74C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:29:fb:3e:de:80:0d:62:20:c9:6d:35:88:4f:
                    af:c2:22:29:7d:48:4d:8d:e6:ab:32:10:7f:f0:36:
                    43:02:57:0a:73:56:ca:d6:6c:32:7b:cd:80:9c:a6:
                    de:d8:df:9b:15:0f:07:06:b0:02:8d:30:b7:2a:1c:
                    ff:62:c9:41:69:09:15:e9:32:24:98:ce:10:4f:82:
                    16:c5:41:15:0f:01:c0:7b:7b:65:5f:ee:78:d0:3d:
                    44:07:e5:f4:f2:a0:4b:20:25:da:ce:73:a9:a2:a7:
                    30:9f:11:12:a2:f6:78:b1:f0:6f:92:52:37:3b:56:
                    df:33:54:f2:6c:7c:7e:11:e2:60:3d:ab:37:35:35:
                    d0:00:2f:d9:00:c8:b8:38:e3:76:91:dd:dc:ca:45:
                    d6:03:8d:71:e7:7c:9c:55:4f:e2:77:6b:b7:69:00:
                    89:ef:ef:3a:27:a8:c2:3e:25:d1:ad:b5:8e:f9:63:
                    e8:ea:e2:d4:c3:35:fd:40:71:c5:68:16:19:ae:88:
                    8c:11:8e:bb:30:dd:7a:4d:07:67:06:e0:71:fe:28:
                    bc:65:9f:ea:81:0d:65:71:56:76:3d:88:3e:4d:79:
                    be:30:8e:5b:95:e2:c5:c1:55:32:42:04:f0:25:10:
                    6c:14:40:33:1f:1c:2a:df:65:a6:35:3f:29:48:9d:
                    6b:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:72:8A:8B:3E:7C:A9:02:D8:A1:87:37:C5:AC:50:F3:1A:3C:74:C9
            X509v3 Authority Key Identifier:
                keyid:65:2C:01:99:E6:56:2F:B6:11:9E:25:92:30:16:98:26:29:C2:10:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/652C0199E6562FB6119E25923016982629C2108D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613436653a3a2f34382d3438203d3e20323034353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f92a:a46e::/48

    Signature Algorithm: sha256WithRSAEncryption
         0a:4a:2f:30:25:39:7d:13:54:85:f3:77:59:e7:0c:11:b5:81:
         30:f4:e5:a8:11:2b:8d:f3:b3:43:92:96:b7:11:b1:5c:6c:5f:
         4f:e8:3f:93:a4:c7:c6:fe:14:2e:ca:ba:0d:f6:d6:16:b2:4a:
         51:73:00:9c:f0:8e:9d:79:fc:a4:96:51:be:1d:f6:d8:bc:08:
         98:67:bc:b9:22:51:81:8b:92:ac:b5:f5:a6:f9:2e:70:c0:20:
         b1:63:62:04:d1:7a:f1:53:e4:ed:e1:8d:a8:e2:ed:36:24:f6:
         42:48:8a:d8:ec:57:fc:0c:c8:11:b1:6a:df:5d:66:42:e7:5a:
         7d:9d:37:3e:cf:2a:e7:f4:7d:6d:af:34:d5:8d:5c:aa:ba:96:
         15:54:81:fa:84:c5:20:38:74:31:f0:2f:1b:b6:a8:23:5f:dc:
         ce:2c:c0:cb:4e:d5:d2:62:d3:c4:2f:45:5c:ef:41:b4:22:65:
         d3:e8:5a:e0:36:f4:20:8b:93:54:c4:28:0d:b8:0f:df:0d:ff:
         0a:15:51:c0:f7:12:69:73:f5:a2:b2:71:f1:c4:fd:4c:de:90:
         8b:fa:c5:e4:b8:90:e5:4a:6f:8c:a9:03:de:f5:c3:3a:45:23:
         e4:8f:90:44:32:d5:d6:12:65:ee:ea:7d:72:ad:52:a1:26:ef:
         22:86:e4:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 17:55:45 2026 by rpki-client