This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/90821899-77a6-43a7-9a82-0a38ff3b4ad0/0/326131343a373538313a333830303a3a2f34302d3438203d3e20313531363733.roa
File:                     326131343a373538313a333830303a3a2f34302d3438203d3e20313531363733.roa (raw, json)
Hash identifier:          r53+tlnjK7xAc5kJlxhFUell1c4S1jQNbSq/pievGCs=
Subject key identifier:   C0:1B:31:C4:9F:08:A4:9E:76:71:F2:86:90:45:E4:21:C3:EC:78:2C
Certificate issuer:       /CN=EC5F579A068CE6CFBF46FDA7C3EB4DD6F94653F1
Certificate serial:       1158A4D10E14BBBD6530D53CA8C6ED2D1C53E2B3
Authority key identifier: EC:5F:57:9A:06:8C:E6:CF:BF:46:FD:A7:C3:EB:4D:D6:F9:46:53:F1
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/EC5F579A068CE6CFBF46FDA7C3EB4DD6F94653F1.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/90821899-77a6-43a7-9a82-0a38ff3b4ad0/0/326131343a373538313a333830303a3a2f34302d3438203d3e20313531363733.roa
Signing time:             Thu 15 Jan 2026 16:33:07 +0000
ROA not before:           Thu 15 Jan 2026 16:28:07 +0000
ROA not after:            Thu 14 Jan 2027 16:33:07 +0000
asID:                     151673
IP address blocks:        2a14:7581:3800::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/90821899-77a6-43a7-9a82-0a38ff3b4ad0/0/EC5F579A068CE6CFBF46FDA7C3EB4DD6F94653F1.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/90821899-77a6-43a7-9a82-0a38ff3b4ad0/0/EC5F579A068CE6CFBF46FDA7C3EB4DD6F94653F1.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/EC5F579A068CE6CFBF46FDA7C3EB4DD6F94653F1.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 21 Jan 2026 08:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:58:a4:d1:0e:14:bb:bd:65:30:d5:3c:a8:c6:ed:2d:1c:53:e2:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC5F579A068CE6CFBF46FDA7C3EB4DD6F94653F1
        Validity
            Not Before: Jan 15 16:28:07 2026 GMT
            Not After : Jan 14 16:33:07 2027 GMT
        Subject: CN=C01B31C49F08A49E7671F2869045E421C3EC782C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:67:ea:a9:6e:5f:2a:b5:6c:8e:fd:a7:65:25:
                    32:68:09:d1:e2:79:de:2d:a1:53:f0:5c:03:b9:f3:
                    c2:40:9b:81:08:81:a5:bf:38:04:0e:5b:c1:a7:69:
                    9e:77:b0:16:b8:6d:67:ad:53:b0:d0:68:3f:b1:f3:
                    c6:02:54:e0:3c:63:cf:bc:e8:7c:cb:cf:0e:4b:b9:
                    cd:1d:2c:33:1d:53:be:9a:e8:aa:82:e0:24:d8:2f:
                    57:d4:ff:22:2a:f6:9b:16:0b:84:e4:34:68:19:0e:
                    78:c7:f7:f1:d5:ba:7d:8b:25:af:98:9a:2c:89:bc:
                    8a:63:7b:78:3d:08:75:22:6b:71:eb:55:68:6e:d6:
                    37:fc:1d:17:38:63:a1:f2:02:9e:ee:e4:da:0c:a4:
                    64:ad:b2:fa:d1:61:00:83:a0:bb:60:4a:61:80:b3:
                    38:5c:da:77:53:b6:f7:1d:85:44:d0:e3:60:d7:b7:
                    1d:68:b4:78:98:43:00:5b:f1:39:4e:8c:48:28:ec:
                    b6:a4:b0:a0:83:23:f4:83:fe:0b:d7:e9:28:a0:ba:
                    1f:82:65:ee:a0:ea:bd:c2:7c:9d:77:ea:0c:17:9a:
                    e4:fb:a5:c2:0b:45:71:4a:5c:94:f9:1f:5a:55:74:
                    82:a3:10:ad:58:7d:49:5d:c5:49:ab:d5:68:9f:7c:
                    ca:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:1B:31:C4:9F:08:A4:9E:76:71:F2:86:90:45:E4:21:C3:EC:78:2C
            X509v3 Authority Key Identifier:
                keyid:EC:5F:57:9A:06:8C:E6:CF:BF:46:FD:A7:C3:EB:4D:D6:F9:46:53:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/90821899-77a6-43a7-9a82-0a38ff3b4ad0/0/EC5F579A068CE6CFBF46FDA7C3EB4DD6F94653F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/EC5F579A068CE6CFBF46FDA7C3EB4DD6F94653F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/90821899-77a6-43a7-9a82-0a38ff3b4ad0/0/326131343a373538313a333830303a3a2f34302d3438203d3e20313531363733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:3800::/40

    Signature Algorithm: sha256WithRSAEncryption
         26:72:38:3d:74:e4:b2:b5:2c:35:06:f6:f1:7f:51:63:84:6c:
         9a:64:b2:26:6b:1a:8c:9d:ac:b4:5e:5d:5f:5a:b8:db:bf:1a:
         cc:af:5e:86:41:39:04:04:97:7c:8f:d0:7a:ba:48:0b:1f:51:
         e2:17:67:5c:8c:26:9f:83:62:82:7a:ba:bc:de:44:55:93:16:
         ef:5d:fa:b5:da:a0:18:73:de:38:c6:97:83:6a:fb:c6:13:8b:
         39:c2:88:9b:9c:84:39:75:8e:16:7b:75:81:b5:0e:a0:5c:20:
         d2:43:49:10:d2:9c:df:d8:46:73:8a:82:36:ad:72:11:5b:1e:
         dc:f7:98:c3:6b:c7:ce:8c:fc:08:8e:06:f5:aa:66:a1:c7:f9:
         e8:67:aa:ae:53:25:ed:d5:2d:60:97:f8:a1:e9:0c:38:a5:86:
         64:af:03:43:96:35:a8:d8:16:27:ba:93:0c:f0:a0:cf:7e:4a:
         39:e4:ad:71:cb:99:53:a8:74:73:dc:02:0b:30:ba:8d:b6:57:
         1c:70:43:40:ac:55:ae:e4:a0:be:4f:fa:02:50:72:64:d8:52:
         f9:a6:39:e2:dc:19:c3:0b:26:11:fe:9b:51:69:83:a3:8c:da:
         da:a7:dd:76:b5:30:2c:87:72:f5:83:a7:2a:94:32:ee:37:71:
         00:1a:d0:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 01:16:31 2026 by rpki-client