This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613436663a3a2f34382d3438203d3e20323134393333.roa
File:                     323630323a663932613a613436663a3a2f34382d3438203d3e20323134393333.roa (raw, json)
Hash identifier:          7bJdTrlT6VfYPtZ524N64q5rra/HSG/apOSRN+7RXaM=
Subject key identifier:   9A:03:9E:25:B5:36:FD:C5:2C:A6:B2:D4:CE:AC:A7:7F:94:0E:2A:24
Certificate issuer:       /CN=a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8
Certificate serial:       3B7F12C94E1BA47782B6D414F3BEA64C8A7665E2
Authority key identifier: 65:2C:01:99:E6:56:2F:B6:11:9E:25:92:30:16:98:26:29:C2:10:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613436663a3a2f34382d3438203d3e20323134393333.roa
Signing time:             Sat 17 Jan 2026 21:26:16 +0000
ROA not before:           Sat 17 Jan 2026 21:21:16 +0000
ROA not after:            Sat 16 Jan 2027 21:26:16 +0000
asID:                     214933
IP address blocks:        2602:f92a:a46f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/652C0199E6562FB6119E25923016982629C2108D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/652C0199E6562FB6119E25923016982629C2108D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 19 Jan 2026 11:02:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:7f:12:c9:4e:1b:a4:77:82:b6:d4:14:f3:be:a6:4c:8a:76:65:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8
        Validity
            Not Before: Jan 17 21:21:16 2026 GMT
            Not After : Jan 16 21:26:16 2027 GMT
        Subject: CN=9A039E25B536FDC52CA6B2D4CEACA77F940E2A24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:1a:9c:b0:e8:14:fe:a0:e7:c2:db:cb:5d:57:
                    9c:5a:88:c3:da:e6:02:47:59:87:5c:6e:d4:05:a9:
                    82:c2:70:d5:f3:7a:67:77:22:11:d4:c3:ca:03:8f:
                    bb:79:a3:6c:98:59:f4:8b:46:d5:76:6b:0d:9c:35:
                    a4:82:67:77:df:7d:c6:58:cd:f2:24:4c:30:ca:fe:
                    04:03:8f:a7:6a:a6:a7:65:05:d5:54:61:0a:d2:d2:
                    4a:e8:01:d3:63:9d:47:ad:98:1d:e8:ee:fb:cb:74:
                    87:98:51:2d:50:35:1b:00:71:b6:88:86:be:5c:c4:
                    07:78:ad:ea:1b:93:0d:2d:d6:67:48:37:df:bc:be:
                    7c:46:f1:bb:50:c0:76:60:56:8c:64:a2:43:37:b7:
                    c6:03:15:5f:0d:a9:c6:02:38:a3:83:2b:a8:e1:5e:
                    3b:04:f9:92:8f:5b:2a:1c:8c:d7:74:55:e0:74:d9:
                    b2:e5:31:40:82:cf:7f:75:1c:55:e0:64:64:1e:df:
                    3b:0d:9f:1e:09:51:0b:00:98:7f:f9:af:fe:0b:b1:
                    3d:4e:41:40:2e:70:0a:de:78:90:2e:6a:36:91:7c:
                    11:0b:1c:c2:99:5b:62:83:47:b1:76:7c:c2:d6:ca:
                    1a:2b:cc:b0:c6:91:f9:48:ee:b3:b5:7c:66:7e:51:
                    ac:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:03:9E:25:B5:36:FD:C5:2C:A6:B2:D4:CE:AC:A7:7F:94:0E:2A:24
            X509v3 Authority Key Identifier:
                keyid:65:2C:01:99:E6:56:2F:B6:11:9E:25:92:30:16:98:26:29:C2:10:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/652C0199E6562FB6119E25923016982629C2108D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613436663a3a2f34382d3438203d3e20323134393333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f92a:a46f::/48

    Signature Algorithm: sha256WithRSAEncryption
         88:1d:a8:f8:a2:4c:51:12:12:ad:21:3c:b6:fd:37:8f:59:3d:
         eb:ac:89:f6:61:58:40:f6:43:07:47:bb:23:76:42:ad:29:19:
         04:01:b5:9e:7b:a4:75:fa:80:89:0f:47:8c:65:49:8b:0e:95:
         98:ef:6a:0b:31:12:6c:af:e5:b4:a1:c8:cf:a1:06:45:1e:45:
         86:01:38:44:0c:5a:8f:f3:41:13:23:3c:63:db:47:98:05:a6:
         d7:72:8e:0a:39:10:0d:d9:95:c7:6b:02:cc:ae:fd:fe:c7:9e:
         5d:aa:fc:35:af:88:d7:f0:dd:07:8b:5b:5e:a8:fe:5b:37:57:
         6a:82:06:9b:c5:58:36:a4:3b:f2:4e:6f:bf:bc:21:1d:6f:0e:
         0f:f2:f9:ce:2e:3a:aa:2c:37:cb:ff:32:c1:b9:76:08:41:bb:
         2f:b9:4a:b6:d6:8c:c2:63:4d:99:b4:09:08:df:7e:f4:6d:88:
         58:da:91:0b:26:c1:dc:6a:1f:9f:3e:02:13:aa:1d:de:3b:1e:
         00:2f:35:7e:62:ce:3f:2a:40:96:84:e2:08:73:3e:3b:a2:32:
         38:cc:c3:28:95:d9:d3:4c:9d:3a:ab:93:15:b6:87:51:35:a2:
         00:41:59:4b:c7:e4:7a:8e:61:36:c7:f1:e6:aa:19:fb:bd:3f:
         df:c4:95:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 17:56:52 2026 by rpki-client