This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613437333a3a2f34382d3438203d3e20323134343339.roa
File:                     323630323a663932613a613437333a3a2f34382d3438203d3e20323134343339.roa (raw, json)
Hash identifier:          eYJ5D/9jy4JCP/LWnKkem2A6/sqvpj4yLievQ5xZkqc=
Subject key identifier:   A7:1B:17:7F:C7:8E:43:E2:A4:39:C1:ED:A3:C0:39:CE:86:91:D7:8C
Certificate issuer:       /CN=a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8
Certificate serial:       6C2CCEA4BCE08970FA652D418C40E9FF8FD75DA2
Authority key identifier: 65:2C:01:99:E6:56:2F:B6:11:9E:25:92:30:16:98:26:29:C2:10:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613437333a3a2f34382d3438203d3e20323134343339.roa
Signing time:             Sat 17 Jan 2026 21:24:50 +0000
ROA not before:           Sat 17 Jan 2026 21:19:50 +0000
ROA not after:            Sat 16 Jan 2027 21:24:50 +0000
asID:                     214439
IP address blocks:        2602:f92a:a473::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/652C0199E6562FB6119E25923016982629C2108D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/652C0199E6562FB6119E25923016982629C2108D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 19 Jan 2026 11:02:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:2c:ce:a4:bc:e0:89:70:fa:65:2d:41:8c:40:e9:ff:8f:d7:5d:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8
        Validity
            Not Before: Jan 17 21:19:50 2026 GMT
            Not After : Jan 16 21:24:50 2027 GMT
        Subject: CN=A71B177FC78E43E2A439C1EDA3C039CE8691D78C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6a:88:cc:71:43:f4:72:de:eb:8e:92:5f:8a:
                    c4:64:c4:fb:28:41:da:2f:ae:b7:64:f0:69:bb:bf:
                    17:48:73:bf:25:9d:41:a2:49:68:22:89:de:1f:28:
                    51:48:14:e8:09:46:01:9a:12:f3:95:64:b2:ae:81:
                    33:10:f7:a9:33:c6:31:fe:d8:98:d2:3a:92:05:20:
                    20:16:94:34:60:2c:2c:b9:78:01:56:0b:a7:1a:66:
                    99:21:0e:d9:9f:0b:0e:06:c5:e6:78:d1:8a:79:71:
                    90:43:f8:a1:a7:07:e3:48:0a:0d:13:f5:c8:81:e5:
                    97:e4:04:fe:b9:2c:81:62:76:fa:5b:34:d8:9e:26:
                    c5:f3:85:3e:d1:62:e9:e1:b6:5a:59:4e:be:42:ff:
                    6a:8c:c6:9e:df:e5:48:54:b8:3e:75:a7:63:14:4c:
                    5d:d3:35:b3:ed:f8:82:7d:7d:03:1c:6e:12:6d:73:
                    d5:de:c2:7a:4f:27:b7:ad:1c:f5:fe:f5:8b:7f:8d:
                    53:51:b4:b0:6a:4d:15:f2:6d:06:10:ee:58:cc:32:
                    cf:49:2b:7b:d1:85:01:6d:88:32:25:72:9c:9e:93:
                    4e:64:e2:2f:85:98:9a:6b:02:ec:ca:a2:fe:02:52:
                    f8:36:4b:5a:cd:f1:23:17:0c:92:04:03:13:59:08:
                    5b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:1B:17:7F:C7:8E:43:E2:A4:39:C1:ED:A3:C0:39:CE:86:91:D7:8C
            X509v3 Authority Key Identifier:
                keyid:65:2C:01:99:E6:56:2F:B6:11:9E:25:92:30:16:98:26:29:C2:10:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/652C0199E6562FB6119E25923016982629C2108D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613437333a3a2f34382d3438203d3e20323134343339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f92a:a473::/48

    Signature Algorithm: sha256WithRSAEncryption
         08:cf:80:65:94:95:f7:07:b6:85:f6:a5:8c:38:f3:61:f0:b4:
         15:eb:7e:42:e2:2b:8f:dc:89:8b:19:3a:a6:69:d9:42:0e:50:
         de:59:16:0f:aa:85:cc:e1:44:6b:c8:0b:af:79:d8:a6:5b:55:
         8d:b9:72:d2:6a:cc:e5:36:2b:5a:0e:71:bc:8b:12:91:75:ee:
         d6:9d:1e:ea:00:d4:54:a9:10:ab:58:98:48:ee:bb:2b:5f:67:
         51:c7:ee:9f:ba:be:5d:6b:63:90:21:3b:10:42:a0:5d:80:99:
         ad:21:75:b4:e5:0a:a4:62:76:f4:57:ab:ec:32:ba:4e:bb:b4:
         9d:bf:2d:e7:6c:01:fb:50:75:76:24:ff:d7:df:a1:a3:04:c7:
         7b:bb:9d:2d:d1:bb:b8:29:9f:e3:3f:8c:05:70:d4:ae:0d:bd:
         b6:70:39:c1:29:7a:78:8f:d5:5a:f7:30:14:ef:da:f6:c4:bb:
         f6:e9:c9:2a:21:8f:81:ab:f9:7e:11:c8:3f:b2:b1:2f:e3:26:
         7d:7c:02:9c:28:13:31:35:f9:ef:96:80:84:33:90:8a:60:17:
         68:11:5a:bc:23:3c:4f:9a:91:04:7f:a9:9b:1e:e9:58:32:6f:
         0b:e9:fd:e4:3e:25:c9:ce:ac:37:82:ad:62:d6:24:f4:5e:48:
         0c:39:43:d2
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIUbCzOpLzgiXD6ZS1BjEDp/4/XXaIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYTIyYWE4MmJkNjA5YjdiNjgwOGUyMTM0YTRmOGJiNmNl
ZWYyODUxNDQxZWQ3YzBmZTgwHhcNMjYwMTE3MjExOTUwWhcNMjcwMTE2MjEyNDUw
WjAzMTEwLwYDVQQDEyhBNzFCMTc3RkM3OEU0M0UyQTQzOUMxRURBM0MwMzlDRTg2
OTFENzhDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWqIzHFD9HLe
646SX4rEZMT7KEHaL663ZPBpu78XSHO/JZ1BokloIoneHyhRSBToCUYBmhLzlWSy
roEzEPepM8Yx/tiY0jqSBSAgFpQ0YCwsuXgBVgunGmaZIQ7ZnwsOBsXmeNGKeXGQ
Q/ihpwfjSAoNE/XIgeWX5AT+uSyBYnb6WzTYnibF84U+0WLp4bZaWU6+Qv9qjMae
3+VIVLg+dadjFExd0zWz7fiCfX0DHG4SbXPV3sJ6Tye3rRz1/vWLf41TUbSwak0V
8m0GEO5YzDLPSSt70YUBbYgyJXKcnpNOZOIvhZiaawLsyqL+AlL4NktazfEjFwyS
BAMTWQhbPQIDAQABo4IC2jCCAtYwHQYDVR0OBBYEFKcbF3/HjkPipDnB7aPAOc6G
kdeMMB8GA1UdIwQYMBaAFGUsAZnmVi+2EZ4lkjAWmCYpwhCNMA4GA1UdDwEB/wQE
AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu
cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzhhZmI1ZmUyLTNjMmEtNDkzOS05NWU5
LTAwNzdiODBiNGYwZS8xLzY1MkMwMTk5RTY1NjJGQjYxMTlFMjU5MjMwMTY5ODI2
MjlDMjEwOEQuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy
c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0
YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmIt
NDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83ZjMzY2Y1OS1hZTM1LTQxZDQtODI1Mi1k
OWJkYmFiYTQyMTAvYTIyYWE4MmJkNjA5YjdiNjgwOGUyMTM0YTRmOGJiNmNlZWYy
ODUxNDQxZWQ3YzBmZTguY2VyMIG3BggrBgEFBQcBCwSBqjCBpzCBpAYIKwYBBQUH
MAuGgZdyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
LzhhZmI1ZmUyLTNjMmEtNDkzOS05NWU5LTAwNzdiODBiNGYwZS8xLzMyMzYzMDMy
M2E2NjM5MzI2MTNhNjEzNDM3MzMzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMx
MzQzNDMzMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUH
AQcBAf8EEzARMA8EAgACMAkDBwAmAvkqpHMwDQYJKoZIhvcNAQELBQADggEBAAjP
gGWUlfcHtoX2pYw482HwtBXrfkLiK4/ciYsZOqZp2UIOUN5ZFg+qhczhRGvIC695
2KZbVY25ctJqzOU2K1oOcbyLEpF17tadHuoA1FSpEKtYmEjuuytfZ1HH7p+6vl1r
Y5AhOxBCoF2Ama0hdbTlCqRidvRXq+wyuk67tJ2/LedsAftQdXYk/9ffoaMEx3u7
nS3Ru7gpn+M/jAVw1K4NvbZwOcEpeniP1Vr3MBTv2vbEu/bpySohj4Gr+X4RyD+y
sS/jJn18ApwoEzE1+e+WgIQzkIpgF2gRWrwjPE+akQR/qZse6Vgybwvp/eQ+JcnO
rDeCrWLWJPReSAw5Q9I=
-----END CERTIFICATE-----
Generated at Sun Jan 18 17:57:03 2026 by rpki-client