This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613437383a3a2f34382d3438203d3e20323131353735.roa
File:                     323630323a663932613a613437383a3a2f34382d3438203d3e20323131353735.roa (raw, json)
Hash identifier:          p2TAJ+SoheZVgt720I7qYK/LH2/2CMUTnLeIel9iBps=
Subject key identifier:   5D:B6:95:FD:E2:D4:D5:5A:83:C8:D5:B9:79:3B:14:F5:22:37:A4:03
Certificate issuer:       /CN=a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8
Certificate serial:       6A21E0534C359174F7FB261AB0EBABE7DD1F52BC
Authority key identifier: 65:2C:01:99:E6:56:2F:B6:11:9E:25:92:30:16:98:26:29:C2:10:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613437383a3a2f34382d3438203d3e20323131353735.roa
Signing time:             Sat 17 Jan 2026 21:21:26 +0000
ROA not before:           Sat 17 Jan 2026 21:16:26 +0000
ROA not after:            Sat 16 Jan 2027 21:21:26 +0000
asID:                     211575
IP address blocks:        2602:f92a:a478::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/652C0199E6562FB6119E25923016982629C2108D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/652C0199E6562FB6119E25923016982629C2108D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 19 Jan 2026 11:02:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:21:e0:53:4c:35:91:74:f7:fb:26:1a:b0:eb:ab:e7:dd:1f:52:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8
        Validity
            Not Before: Jan 17 21:16:26 2026 GMT
            Not After : Jan 16 21:21:26 2027 GMT
        Subject: CN=5DB695FDE2D4D55A83C8D5B9793B14F52237A403
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:4f:d4:f1:94:28:7f:f4:d6:90:07:85:70:f1:
                    71:ba:25:19:17:bc:ba:ce:7c:cc:e2:d9:0e:05:9c:
                    0f:1d:cd:05:cc:a5:d5:40:bf:10:32:e0:c6:ff:54:
                    d4:1d:58:60:72:c5:2d:92:b0:9c:b9:9f:33:c1:96:
                    e7:44:a0:2f:78:d2:4a:08:39:dc:94:1a:25:a0:c5:
                    20:46:3a:ec:3c:f0:a3:0b:4f:9f:0e:9b:b8:60:a9:
                    ab:09:7b:8f:70:4f:8c:c8:29:09:a6:7c:5b:a3:59:
                    cd:9a:bb:04:bc:fc:a4:1e:59:09:f9:14:aa:55:21:
                    ae:f5:93:85:94:fb:a9:4c:44:6f:44:35:87:ff:07:
                    26:dc:d8:00:82:60:40:55:f4:85:92:31:f9:f2:90:
                    70:35:2f:39:e0:88:a4:e1:43:35:10:af:2a:af:b0:
                    09:38:b3:c7:b1:c0:10:a1:94:4b:1f:85:d8:bc:ee:
                    55:50:98:e0:66:bd:3f:16:31:f9:5f:c7:7b:28:43:
                    19:e6:3e:dc:79:ae:c5:6c:79:9c:2e:9b:bf:97:76:
                    3b:f3:a1:5c:db:7b:88:46:f9:ef:e4:f8:23:e3:77:
                    86:19:67:02:b0:4d:9e:99:d5:8d:61:44:16:a5:80:
                    1a:61:50:8f:04:db:f5:04:29:34:0e:f4:8f:0a:f3:
                    cd:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:B6:95:FD:E2:D4:D5:5A:83:C8:D5:B9:79:3B:14:F5:22:37:A4:03
            X509v3 Authority Key Identifier:
                keyid:65:2C:01:99:E6:56:2F:B6:11:9E:25:92:30:16:98:26:29:C2:10:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/652C0199E6562FB6119E25923016982629C2108D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613437383a3a2f34382d3438203d3e20323131353735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f92a:a478::/48

    Signature Algorithm: sha256WithRSAEncryption
         07:31:ba:23:38:25:d6:60:86:7c:a7:db:f2:c4:9b:67:3a:0f:
         0b:9a:8c:7d:2b:b3:dd:27:7c:3c:76:91:7d:1b:5e:3d:75:f0:
         58:16:de:cd:fe:dc:fc:a6:73:a4:1f:df:f4:2f:61:f2:0b:0b:
         5a:b6:90:54:6a:7f:50:9f:d3:e3:72:99:92:aa:ca:18:d7:30:
         ec:0e:9a:82:a4:fe:be:6c:91:7b:67:3e:88:a1:30:98:b9:d9:
         6c:8c:1f:46:c5:1a:51:e1:ea:95:e0:2f:fb:d7:bd:8a:75:24:
         17:4a:76:15:d2:2b:5c:84:cf:66:96:90:30:86:0e:1e:7d:68:
         1e:25:50:1a:7f:d6:bc:b6:de:97:44:4c:25:d1:d5:90:4c:b4:
         6f:23:f9:e3:d2:76:d9:a2:1f:b1:dc:98:7a:96:a0:67:5e:02:
         bd:18:1e:d2:72:cd:52:ce:0b:b6:6b:54:a0:74:10:3c:1d:d4:
         2f:54:c0:2e:cc:2f:c3:e9:ad:54:e0:43:0c:4a:e4:ce:31:0f:
         7c:4e:66:0c:35:c0:2f:17:d8:41:52:7e:63:41:ae:62:f1:1b:
         95:8f:ae:85:6a:d3:2d:91:27:46:7b:ff:32:b1:f1:8b:0e:41:
         3e:5c:1a:17:d6:fb:e7:19:e8:fc:16:67:55:7d:96:b9:c7:e2:
         b8:3a:ac:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 17:56:52 2026 by rpki-client