This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613437633a3a2f34382d3438203d3e20313938303235.roa
File:                     323630323a663932613a613437633a3a2f34382d3438203d3e20313938303235.roa (raw, json)
Hash identifier:          t859eM/21Ihz32sEe0c1AsW78lvki7bEFnJsJ550pww=
Subject key identifier:   64:71:B9:2F:41:40:E5:9F:32:0C:61:40:9C:3D:6C:8F:91:B2:42:C9
Certificate issuer:       /CN=a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8
Certificate serial:       548F61886CA4C0EE0462B750192F8FDE36AE80CF
Authority key identifier: 65:2C:01:99:E6:56:2F:B6:11:9E:25:92:30:16:98:26:29:C2:10:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613437633a3a2f34382d3438203d3e20313938303235.roa
Signing time:             Sat 17 Jan 2026 21:06:59 +0000
ROA not before:           Sat 17 Jan 2026 21:01:59 +0000
ROA not after:            Sat 16 Jan 2027 21:06:59 +0000
asID:                     198025
IP address blocks:        2602:f92a:a47c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/652C0199E6562FB6119E25923016982629C2108D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/652C0199E6562FB6119E25923016982629C2108D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 19 Jan 2026 11:02:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:8f:61:88:6c:a4:c0:ee:04:62:b7:50:19:2f:8f:de:36:ae:80:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8
        Validity
            Not Before: Jan 17 21:01:59 2026 GMT
            Not After : Jan 16 21:06:59 2027 GMT
        Subject: CN=6471B92F4140E59F320C61409C3D6C8F91B242C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c2:96:9e:df:53:63:27:8b:30:ed:f8:56:60:
                    12:64:b2:ea:7f:42:ef:19:ad:38:9e:4e:4f:8b:12:
                    e0:3d:a4:56:66:10:72:8f:75:23:9a:1a:8d:9c:94:
                    20:40:bf:06:99:71:4f:de:4d:fb:d3:6d:66:44:49:
                    c9:1d:28:19:c5:10:92:9e:f4:10:d4:b2:3b:e6:5c:
                    a4:d7:df:11:ab:ab:df:4a:d0:ec:da:a7:64:20:63:
                    3e:67:47:2a:ea:8c:9c:c5:6e:11:42:1c:51:9d:fe:
                    4c:91:db:2b:c9:43:de:a9:17:cb:18:75:01:cc:54:
                    73:1a:02:d2:88:35:a7:a8:20:35:a0:78:2a:7a:6e:
                    0f:b0:43:29:97:5a:67:e5:c1:60:3b:a3:9d:84:ef:
                    16:e6:26:56:6c:f1:78:a2:1a:87:9e:b9:fa:47:0c:
                    58:6f:65:33:b5:53:47:83:6f:fa:46:21:81:b0:61:
                    a6:f8:fb:7e:1c:59:f1:b8:57:32:97:55:43:db:25:
                    5b:62:ac:e7:a5:ae:fd:ec:1a:5a:27:78:ae:33:40:
                    e4:da:10:b0:58:a4:d9:77:f0:6f:3b:83:7f:1a:2a:
                    67:5e:6b:0e:24:77:52:35:5b:bb:93:15:60:4d:40:
                    50:b2:eb:eb:d5:fb:cd:7e:ca:32:d2:d6:10:04:89:
                    a9:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:71:B9:2F:41:40:E5:9F:32:0C:61:40:9C:3D:6C:8F:91:B2:42:C9
            X509v3 Authority Key Identifier:
                keyid:65:2C:01:99:E6:56:2F:B6:11:9E:25:92:30:16:98:26:29:C2:10:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/652C0199E6562FB6119E25923016982629C2108D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613437633a3a2f34382d3438203d3e20313938303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f92a:a47c::/48

    Signature Algorithm: sha256WithRSAEncryption
         68:ba:ea:ee:07:5d:68:04:31:bf:bb:b9:de:04:53:eb:3e:db:
         1f:98:05:11:fa:82:a8:82:06:cd:74:ef:f8:e4:65:1b:ad:06:
         22:a3:8b:70:08:ab:7c:82:ae:7e:47:c4:23:fb:75:97:ba:00:
         94:e9:0d:1c:7d:9a:16:51:ec:62:56:d4:2d:33:8c:56:15:91:
         7b:90:cb:31:0e:b0:bb:08:4c:0c:22:b8:70:cf:ee:67:1c:56:
         71:4a:5f:82:1c:bd:61:2b:1c:88:04:fe:d1:05:36:dd:79:61:
         6d:e3:84:a2:9f:ea:c5:e5:b3:ad:61:2a:27:d8:c8:d7:22:1e:
         a8:e5:3e:db:08:e4:8d:32:1b:25:9a:7d:4e:e4:57:99:b3:2b:
         92:cb:92:b8:8d:31:60:fb:17:79:13:c0:dc:06:84:b7:86:6b:
         20:0f:34:ec:2d:89:a0:1f:db:8d:b8:98:d8:99:cd:6a:70:92:
         92:29:e8:ba:5b:cd:77:be:33:67:86:89:c6:35:81:59:7c:90:
         e6:97:50:a1:49:46:2d:ad:16:ac:be:c4:1f:fc:2a:bd:60:d4:
         8f:bb:98:2d:6e:f2:15:ba:9d:4b:b2:b2:fa:2c:1e:a3:7c:e0:
         e2:84:a6:41:c8:ce:27:ff:a4:d4:35:0c:56:48:b4:6e:35:a7:
         d8:0d:68:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 17:56:52 2026 by rpki-client