This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/326130303a666265313a3a2f33322d3332203d3e203632313133.roa
File:                     326130303a666265313a3a2f33322d3332203d3e203632313133.roa (raw, json)
Hash identifier:          Z+RU3vtzvAe7ynR14QHAUV1/vmbrfJ5VHYPGPd2caBI=
Subject key identifier:   C1:FB:61:55:59:1E:F7:FF:DA:CE:D5:98:EE:62:4B:0F:04:D5:1D:43
Certificate issuer:       /CN=8cc300faf2f6d49186a8b62e08f190107743973d
Certificate serial:       0FCD1823F9775F8F6CEB6017D5EB03FF2E5ADEFF
Authority key identifier: 8C:C3:00:FA:F2:F6:D4:91:86:A8:B6:2E:08:F1:90:10:77:43:97:3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jMMA-vL21JGGqLYuCPGQEHdDlz0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/326130303a666265313a3a2f33322d3332203d3e203632313133.roa
Signing time:             Tue 03 Feb 2026 15:56:16 +0000
ROA not before:           Tue 03 Feb 2026 15:51:16 +0000
ROA not after:            Tue 02 Feb 2027 15:56:16 +0000
asID:                     62113
IP address blocks:        2a00:fbe1::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jMMA-vL21JGGqLYuCPGQEHdDlz0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:cd:18:23:f9:77:5f:8f:6c:eb:60:17:d5:eb:03:ff:2e:5a:de:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cc300faf2f6d49186a8b62e08f190107743973d
        Validity
            Not Before: Feb  3 15:51:16 2026 GMT
            Not After : Feb  2 15:56:16 2027 GMT
        Subject: CN=C1FB6155591EF7FFDACED598EE624B0F04D51D43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b4:2b:c8:c3:f0:5c:e8:70:09:c4:f8:dd:b0:
                    fb:c0:0b:c2:75:ed:b5:4b:1b:e9:26:1d:91:57:d2:
                    dd:65:f1:ba:d0:32:e3:ff:24:ef:b5:dd:b1:d4:b8:
                    d6:91:3b:e5:83:c0:62:ac:ee:ee:28:ad:8a:dd:a2:
                    02:d9:3e:0f:0c:40:e5:b2:d0:09:70:ef:6f:bb:9d:
                    fa:3b:c2:91:ae:25:8a:c1:72:f8:8b:61:5a:7e:47:
                    98:a4:11:77:eb:b9:ad:a6:81:85:3f:34:20:0c:d5:
                    cd:67:c0:82:7a:c8:45:3f:0a:f9:83:f2:ee:8f:e8:
                    b3:1d:16:f9:55:0d:15:d4:e6:30:0c:a2:48:5d:78:
                    ac:70:b7:d2:9c:cc:e3:7c:70:50:b8:31:91:34:da:
                    93:0f:aa:b3:4a:52:d7:40:16:20:eb:0b:71:b6:81:
                    b1:ba:43:90:96:19:49:21:d3:97:af:4c:5c:1e:d2:
                    2c:12:87:4a:47:e0:78:f3:5e:e6:35:b6:f7:7d:b1:
                    73:e1:6a:a6:8b:ae:8b:b2:6c:ca:9a:d3:8a:e6:7b:
                    e3:05:97:1f:4c:31:71:58:7c:d6:4c:29:98:15:96:
                    e6:f3:2b:55:29:ad:a8:a6:d7:f8:84:e7:5f:7c:51:
                    3f:8b:85:d7:a2:9a:b3:3f:07:72:9c:a6:17:15:df:
                    15:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:FB:61:55:59:1E:F7:FF:DA:CE:D5:98:EE:62:4B:0F:04:D5:1D:43
            X509v3 Authority Key Identifier:
                keyid:8C:C3:00:FA:F2:F6:D4:91:86:A8:B6:2E:08:F1:90:10:77:43:97:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jMMA-vL21JGGqLYuCPGQEHdDlz0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/326130303a666265313a3a2f33322d3332203d3e203632313133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a00:fbe1::/32

    Signature Algorithm: sha256WithRSAEncryption
         48:c6:c0:30:98:e0:50:d9:ff:63:cf:89:9d:59:98:31:59:f8:
         38:d8:71:ac:43:26:51:6f:b6:f6:a2:e1:b4:08:80:d3:43:c5:
         69:42:c8:1a:71:18:e0:28:e3:47:58:19:91:0a:55:01:52:ae:
         cf:89:96:11:02:87:89:16:6c:ac:6a:75:6f:b4:82:a6:6d:a2:
         ca:32:84:98:88:e5:97:fb:24:8a:75:9f:a2:3b:74:3f:39:1c:
         a1:7d:33:48:22:22:7f:98:58:bb:1f:d2:b1:77:52:b6:aa:c5:
         cb:a5:b4:be:10:bb:72:b7:23:67:33:84:0f:18:08:96:40:60:
         30:b3:66:c2:cb:78:32:ac:e9:6a:c7:1b:6b:39:6a:c2:3c:52:
         05:1f:a2:85:de:05:6e:8c:b1:12:d5:c2:51:a3:38:4a:14:91:
         da:22:21:da:43:c9:cc:9d:3d:44:c1:dd:2e:f1:a1:9a:19:93:
         30:8e:f2:3d:b4:9f:f6:7b:12:fb:2f:ef:8f:0b:5b:ec:4a:9e:
         43:0d:44:6b:ba:34:be:1c:15:1a:09:6c:0c:3f:cd:20:50:fb:
         5b:df:20:c8:aa:8e:a6:e0:49:de:da:2e:3a:6d:c3:74:ad:58:
         ef:1f:f2:ec:ed:c1:d1:d9:24:c7:2c:86:e6:11:04:4e:41:5b:
         a2:71:fc:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:23:12 2026 by rpki-client