This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613437363a3a2f34382d3438203d3e20323135313732.roa
File:                     323630323a663932613a613437363a3a2f34382d3438203d3e20323135313732.roa (raw, json)
Hash identifier:          QXjsuQCqZvo7gSFq8pe5a2qbRx0ksORhzu/TOa4aKlE=
Subject key identifier:   36:C1:0C:26:FF:E9:97:B2:6B:D0:AA:26:BA:F6:55:AD:65:7D:35:EF
Certificate issuer:       /CN=a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8
Certificate serial:       248A3EE1897FC03ED57CCCE1CF9F272408A9E394
Authority key identifier: 65:2C:01:99:E6:56:2F:B6:11:9E:25:92:30:16:98:26:29:C2:10:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613437363a3a2f34382d3438203d3e20323135313732.roa
Signing time:             Sat 17 Jan 2026 21:28:24 +0000
ROA not before:           Sat 17 Jan 2026 21:23:24 +0000
ROA not after:            Sat 16 Jan 2027 21:28:24 +0000
asID:                     215172
IP address blocks:        2602:f92a:a476::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/652C0199E6562FB6119E25923016982629C2108D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/652C0199E6562FB6119E25923016982629C2108D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 19 Jan 2026 11:02:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:8a:3e:e1:89:7f:c0:3e:d5:7c:cc:e1:cf:9f:27:24:08:a9:e3:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8
        Validity
            Not Before: Jan 17 21:23:24 2026 GMT
            Not After : Jan 16 21:28:24 2027 GMT
        Subject: CN=36C10C26FFE997B26BD0AA26BAF655AD657D35EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:cd:01:d2:db:84:ed:e2:9a:86:7d:d4:02:2a:
                    88:07:53:69:bd:e8:f5:aa:dc:c4:76:01:5b:c2:8f:
                    a3:54:a1:98:99:b9:34:96:c9:d3:4c:40:fd:ff:e7:
                    46:7b:eb:c1:5f:5a:f8:f4:f7:e9:b9:06:6c:de:5d:
                    3c:80:08:9a:d3:52:07:32:64:ad:c1:e9:21:dc:22:
                    ef:a6:b3:75:53:10:0a:8c:de:0f:14:3f:df:9a:ee:
                    f0:a6:57:28:90:89:4f:fc:55:76:7f:7f:34:d0:44:
                    96:ee:3d:39:e4:6c:a8:6d:0a:50:e4:f5:2a:b5:80:
                    9f:ca:c5:e7:47:cb:b6:42:99:bf:c3:f7:1e:9a:7f:
                    60:98:72:ca:4f:c3:09:08:20:b7:51:20:35:e5:34:
                    6e:02:15:5d:a7:76:64:9d:ad:d3:80:2f:e4:53:fd:
                    ec:13:7b:d5:56:7f:ef:31:40:43:56:5f:f1:9b:f2:
                    b8:31:11:26:cb:78:a8:18:23:96:e7:c5:b2:d1:94:
                    27:35:ee:6d:93:52:13:d7:ea:3d:22:52:57:f1:63:
                    78:94:38:8f:15:c6:0e:a0:d1:d8:4c:95:4f:7f:54:
                    08:75:03:05:9c:69:d9:0a:a6:e0:8c:37:ca:31:3d:
                    66:b3:d7:02:e6:a9:84:ce:4a:a2:0b:5c:93:67:d5:
                    aa:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:C1:0C:26:FF:E9:97:B2:6B:D0:AA:26:BA:F6:55:AD:65:7D:35:EF
            X509v3 Authority Key Identifier:
                keyid:65:2C:01:99:E6:56:2F:B6:11:9E:25:92:30:16:98:26:29:C2:10:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/652C0199E6562FB6119E25923016982629C2108D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613437363a3a2f34382d3438203d3e20323135313732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f92a:a476::/48

    Signature Algorithm: sha256WithRSAEncryption
         04:82:4d:76:c7:e7:62:fa:3d:c8:e4:18:3e:69:b1:c2:13:8c:
         fd:23:3b:35:44:f3:5e:74:b6:ab:c7:d2:21:1c:c2:bd:ac:16:
         c9:c2:0c:37:cf:fd:ef:0f:4b:ac:82:95:4c:6b:c4:8b:ed:39:
         1a:78:8a:10:4b:aa:ea:46:d4:02:5e:c8:9d:43:c7:ca:a8:a2:
         75:3f:7f:b1:96:49:f1:1c:e1:e8:de:8c:79:43:bb:c2:a5:cb:
         45:80:29:ac:1b:45:ce:19:ef:a7:55:dc:4c:f4:4c:b3:7b:e8:
         25:08:1c:e2:04:94:a6:37:82:dd:97:51:ce:90:c6:8c:6a:75:
         ee:df:b6:53:be:f0:dd:be:ab:60:da:43:3a:37:a1:ee:1a:28:
         3d:d2:57:dd:a4:5b:5c:75:36:72:45:99:4f:5a:24:4d:50:62:
         aa:8b:03:b2:a1:62:a1:09:28:ac:2f:85:23:bc:cf:02:6b:56:
         b7:dc:b0:79:db:c4:ec:0c:d7:6b:53:d4:97:33:c0:79:ca:85:
         29:6a:26:a8:85:da:de:c0:db:43:d0:3c:2c:ae:98:3c:88:10:
         c0:85:33:a1:80:6f:0e:34:68:a7:49:b9:7a:9c:cf:09:73:6f:
         32:47:41:51:26:58:65:fd:78:a5:b5:95:6c:e8:70:79:6f:fc:
         37:62:42:3a
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIUJIo+4Yl/wD7VfMzhz58nJAip45QwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYTIyYWE4MmJkNjA5YjdiNjgwOGUyMTM0YTRmOGJiNmNl
ZWYyODUxNDQxZWQ3YzBmZTgwHhcNMjYwMTE3MjEyMzI0WhcNMjcwMTE2MjEyODI0
WjAzMTEwLwYDVQQDEygzNkMxMEMyNkZGRTk5N0IyNkJEMEFBMjZCQUY2NTVBRDY1
N0QzNUVGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqs0B0tuE7eKa
hn3UAiqIB1Npvej1qtzEdgFbwo+jVKGYmbk0lsnTTED9/+dGe+vBX1r49PfpuQZs
3l08gAia01IHMmStwekh3CLvprN1UxAKjN4PFD/fmu7wplcokIlP/FV2f3800ESW
7j055GyobQpQ5PUqtYCfysXnR8u2Qpm/w/cemn9gmHLKT8MJCCC3USA15TRuAhVd
p3Zkna3TgC/kU/3sE3vVVn/vMUBDVl/xm/K4MREmy3ioGCOW58Wy0ZQnNe5tk1IT
1+o9IlJX8WN4lDiPFcYOoNHYTJVPf1QIdQMFnGnZCqbgjDfKMT1ms9cC5qmEzkqi
C1yTZ9Wq6QIDAQABo4IC2jCCAtYwHQYDVR0OBBYEFDbBDCb/6Zeya9CqJrr2Va1l
fTXvMB8GA1UdIwQYMBaAFGUsAZnmVi+2EZ4lkjAWmCYpwhCNMA4GA1UdDwEB/wQE
AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu
cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzhhZmI1ZmUyLTNjMmEtNDkzOS05NWU5
LTAwNzdiODBiNGYwZS8xLzY1MkMwMTk5RTY1NjJGQjYxMTlFMjU5MjMwMTY5ODI2
MjlDMjEwOEQuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy
c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0
YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmIt
NDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83ZjMzY2Y1OS1hZTM1LTQxZDQtODI1Mi1k
OWJkYmFiYTQyMTAvYTIyYWE4MmJkNjA5YjdiNjgwOGUyMTM0YTRmOGJiNmNlZWYy
ODUxNDQxZWQ3YzBmZTguY2VyMIG3BggrBgEFBQcBCwSBqjCBpzCBpAYIKwYBBQUH
MAuGgZdyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
LzhhZmI1ZmUyLTNjMmEtNDkzOS05NWU5LTAwNzdiODBiNGYwZS8xLzMyMzYzMDMy
M2E2NjM5MzI2MTNhNjEzNDM3MzYzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMx
MzUzMTM3MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUH
AQcBAf8EEzARMA8EAgACMAkDBwAmAvkqpHYwDQYJKoZIhvcNAQELBQADggEBAASC
TXbH52L6PcjkGD5pscITjP0jOzVE8150tqvH0iEcwr2sFsnCDDfP/e8PS6yClUxr
xIvtORp4ihBLqupG1AJeyJ1Dx8qoonU/f7GWSfEc4ejejHlDu8Kly0WAKawbRc4Z
76dV3Ez0TLN76CUIHOIElKY3gt2XUc6Qxoxqde7ftlO+8N2+q2DaQzo3oe4aKD3S
V92kW1x1NnJFmU9aJE1QYqqLA7KhYqEJKKwvhSO8zwJrVrfcsHnbxOwM12tT1Jcz
wHnKhSlqJqiF2t7A20PQPCyumDyIEMCFM6GAbw40aKdJuXqczwlzbzJHQVEmWGX9
eKW1lWzocHlv/DdiQjo=
-----END CERTIFICATE-----
Generated at Sun Jan 18 17:56:52 2026 by rpki-client