This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a653030303a3a2f34302d3438203d3e20323033323336.roa
File:                     323630323a663932613a653030303a3a2f34302d3438203d3e20323033323336.roa (raw, json)
Hash identifier:          Jp73CAhT8X4qbMvWPriH8XdxbLv++q2700sN8D3HLOc=
Subject key identifier:   EF:89:2E:C3:E0:BA:5E:36:87:BA:63:CD:26:BA:AA:4E:26:72:50:01
Certificate issuer:       /CN=a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8
Certificate serial:       133E62F97E8FFE28106DC5660715723758A46238
Authority key identifier: 65:2C:01:99:E6:56:2F:B6:11:9E:25:92:30:16:98:26:29:C2:10:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a653030303a3a2f34302d3438203d3e20323033323336.roa
Signing time:             Sat 17 Jan 2026 21:12:17 +0000
ROA not before:           Sat 17 Jan 2026 21:07:17 +0000
ROA not after:            Sat 16 Jan 2027 21:12:17 +0000
asID:                     203236
IP address blocks:        2602:f92a:e000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/652C0199E6562FB6119E25923016982629C2108D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/652C0199E6562FB6119E25923016982629C2108D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 19 Jan 2026 11:02:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:3e:62:f9:7e:8f:fe:28:10:6d:c5:66:07:15:72:37:58:a4:62:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8
        Validity
            Not Before: Jan 17 21:07:17 2026 GMT
            Not After : Jan 16 21:12:17 2027 GMT
        Subject: CN=EF892EC3E0BA5E3687BA63CD26BAAA4E26725001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:3c:c5:5a:1a:b3:09:ae:cd:52:05:a9:a8:52:
                    23:b1:44:39:f2:fe:c5:6d:6b:c8:d5:a7:8d:af:30:
                    f8:c6:61:34:6e:12:be:29:46:26:66:f4:a8:e4:48:
                    66:dd:31:2a:7b:e5:43:c8:af:cd:64:df:46:9a:76:
                    03:25:6a:8d:48:87:83:70:90:2a:8d:9c:7f:f7:44:
                    b7:4e:23:38:50:02:73:58:50:8b:22:0c:39:ea:89:
                    21:c8:12:a4:9f:f1:80:d2:43:1d:03:7d:82:38:75:
                    9e:32:2c:06:cc:f5:2c:57:b1:e6:05:0f:1b:81:ec:
                    02:ff:66:0c:2a:f3:5e:f5:8a:4b:72:10:30:93:42:
                    f1:0b:e7:aa:c4:50:a6:3c:17:bf:28:27:c0:b9:13:
                    df:37:02:f1:69:05:99:fe:60:57:e5:63:96:1b:10:
                    c8:50:0c:1d:9a:d5:a7:43:5e:a9:9f:51:0e:8b:b6:
                    18:49:87:c6:fc:e1:05:c5:45:9d:43:ed:fd:a2:d1:
                    73:39:0e:b0:65:72:ec:1b:41:8b:9a:62:89:c7:c6:
                    da:f4:4e:33:9a:b0:63:7f:a2:b1:2d:cf:22:0f:64:
                    47:76:6f:69:29:35:16:04:1c:64:60:eb:1d:dd:5a:
                    e7:3b:f0:7c:98:49:c1:55:20:02:67:8e:00:6b:aa:
                    a0:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:89:2E:C3:E0:BA:5E:36:87:BA:63:CD:26:BA:AA:4E:26:72:50:01
            X509v3 Authority Key Identifier:
                keyid:65:2C:01:99:E6:56:2F:B6:11:9E:25:92:30:16:98:26:29:C2:10:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/652C0199E6562FB6119E25923016982629C2108D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a653030303a3a2f34302d3438203d3e20323033323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f92a:e000::/40

    Signature Algorithm: sha256WithRSAEncryption
         85:a8:f1:fc:2a:c3:25:3c:a0:93:65:cf:0e:6a:80:74:47:c0:
         0a:e8:28:c2:6b:73:f4:39:0d:c0:8a:5c:23:1c:d4:f9:42:5b:
         84:09:49:97:b9:38:64:f7:66:0e:ad:4b:95:66:a0:3d:d5:f4:
         48:d7:ea:85:08:a4:1f:85:95:1f:4c:b9:c8:cd:54:d8:17:ae:
         7d:f5:01:f3:43:17:07:82:ac:3d:39:b8:ba:41:e5:b2:0a:fe:
         55:d2:e5:1a:6e:31:0a:bd:71:fb:20:d4:ee:84:92:64:87:47:
         8c:08:bb:74:d2:76:5e:51:38:01:59:49:0f:95:93:86:40:19:
         f0:87:f7:90:74:d7:ea:60:a4:84:37:ac:91:f5:38:11:75:0d:
         92:73:17:ed:6f:00:dc:42:3e:cf:85:eb:16:59:bd:4b:9e:1e:
         9c:76:39:ab:b9:0d:a1:77:7e:fa:e1:8a:41:a8:1c:b5:cd:d5:
         9e:9f:d4:b0:6d:7d:34:b1:4b:05:89:d0:62:ce:63:a1:d9:61:
         81:1e:33:f5:37:bb:47:f7:51:55:ba:00:41:aa:38:59:ec:9b:
         46:81:b3:35:d6:70:4d:50:bf:07:bb:d6:02:b8:4f:25:32:87:
         8a:9f:c2:93:5d:4f:96:a5:9f:30:b2:78:e3:4c:9b:5a:70:e7:
         e9:b1:50:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 17:56:53 2026 by rpki-client