This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rki.plasmanodes.com/repo/plasma-casv/1/326131343a373538333a663830303a3a2f34382d3438203d3e20323032363733.roa
File:                     326131343a373538333a663830303a3a2f34382d3438203d3e20323032363733.roa (raw, json)
Hash identifier:          IkICwXXmYIH53Eafwhe+5p63oc0eGBQuzy6z5GFeHKE=
Subject key identifier:   7D:20:8E:14:A3:8A:CD:B4:75:ED:3B:10:E3:E0:71:74:2C:D9:FC:43
Certificate issuer:       /CN=576B1D30C7D612FE82D2E2C5A78ED4165480F3D9
Certificate serial:       78186A4284EA1893DA19FEC6839C16E4EB29C520
Authority key identifier: 57:6B:1D:30:C7:D6:12:FE:82:D2:E2:C5:A7:8E:D4:16:54:80:F3:D9
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/576B1D30C7D612FE82D2E2C5A78ED4165480F3D9.cer
Subject info access:      rsync://rki.plasmanodes.com/repo/plasma-casv/1/326131343a373538333a663830303a3a2f34382d3438203d3e20323032363733.roa
Signing time:             Fri 05 Dec 2025 16:40:31 +0000
ROA not before:           Fri 05 Dec 2025 16:35:31 +0000
ROA not after:            Fri 04 Dec 2026 16:40:31 +0000
asID:                     202673
IP address blocks:        2a14:7583:f800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rki.plasmanodes.com/repo/plasma-casv/1/576B1D30C7D612FE82D2E2C5A78ED4165480F3D9.crl
                          rsync://rki.plasmanodes.com/repo/plasma-casv/1/576B1D30C7D612FE82D2E2C5A78ED4165480F3D9.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/576B1D30C7D612FE82D2E2C5A78ED4165480F3D9.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Dec 2025 10:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:18:6a:42:84:ea:18:93:da:19:fe:c6:83:9c:16:e4:eb:29:c5:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=576B1D30C7D612FE82D2E2C5A78ED4165480F3D9
        Validity
            Not Before: Dec  5 16:35:31 2025 GMT
            Not After : Dec  4 16:40:31 2026 GMT
        Subject: CN=7D208E14A38ACDB475ED3B10E3E071742CD9FC43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a5:ba:95:cb:76:6f:8a:0f:51:be:18:81:6c:
                    44:01:73:2f:75:9a:e3:21:59:30:dc:db:d0:a8:b6:
                    46:05:9d:ff:31:10:fd:b8:92:fc:4b:81:fc:f4:f4:
                    35:29:4d:e5:2d:92:b5:ac:26:a9:58:66:8b:3c:3a:
                    5a:46:b7:af:91:c3:51:73:3e:95:ed:73:c6:54:24:
                    22:77:85:2b:7a:3e:7a:01:e8:e7:9f:f6:f0:f1:6e:
                    17:47:9e:29:eb:9c:9a:c5:42:09:77:6c:1c:9e:01:
                    91:63:6c:28:fb:9b:d3:8d:af:0d:a0:53:d7:4f:f2:
                    22:9f:e4:7f:e3:84:9c:3b:01:ce:6f:e3:d1:67:93:
                    d2:bd:31:74:dc:a9:83:9f:b7:33:d4:c8:37:11:34:
                    b0:fa:54:3f:2b:93:cd:bf:65:7b:f8:7a:e3:7b:37:
                    fc:b0:29:d6:d5:94:69:2f:51:5e:e4:fc:3b:d5:0b:
                    9c:be:59:eb:ee:3e:e5:39:66:2d:b7:af:14:fe:be:
                    69:ef:d5:47:f0:06:c4:bc:a8:39:66:7d:27:3a:c1:
                    87:16:5c:dc:f7:19:44:1b:6e:f5:75:ef:2b:56:c2:
                    21:f2:05:41:46:ad:4c:e3:56:bc:5b:79:e4:0f:f2:
                    1e:60:34:d1:26:08:76:79:14:1f:c4:d7:fe:af:65:
                    70:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:20:8E:14:A3:8A:CD:B4:75:ED:3B:10:E3:E0:71:74:2C:D9:FC:43
            X509v3 Authority Key Identifier:
                keyid:57:6B:1D:30:C7:D6:12:FE:82:D2:E2:C5:A7:8E:D4:16:54:80:F3:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rki.plasmanodes.com/repo/plasma-casv/1/576B1D30C7D612FE82D2E2C5A78ED4165480F3D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/576B1D30C7D612FE82D2E2C5A78ED4165480F3D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rki.plasmanodes.com/repo/plasma-casv/1/326131343a373538333a663830303a3a2f34382d3438203d3e20323032363733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7583:f800::/48

    Signature Algorithm: sha256WithRSAEncryption
         0f:25:b1:10:63:ff:39:7f:e0:cf:2b:b0:be:e6:02:df:9a:6a:
         02:14:2b:0b:7b:54:0d:c2:61:5e:ce:c3:68:87:3e:26:94:f4:
         ba:cd:a7:03:86:a2:b5:7e:51:ad:de:de:a0:5e:62:0d:24:dd:
         28:51:df:5d:68:f3:c2:1d:12:90:fc:56:1c:04:c3:a6:1b:b4:
         20:36:c2:03:f0:06:66:fa:35:2f:71:82:4b:81:25:9e:cd:ad:
         ac:04:19:b2:5b:fa:5c:c8:e9:4e:5b:19:0c:dc:1b:1c:97:29:
         ae:cc:23:c7:52:76:58:bd:b7:cc:4a:e7:67:91:c0:a7:53:e2:
         43:f7:eb:9d:a9:63:2f:98:c5:a8:2c:7a:85:0c:91:67:34:fa:
         0c:a8:f0:5b:37:7c:ee:b7:6d:f9:6a:dd:7d:86:ce:a7:97:d9:
         dd:98:7b:5c:11:59:11:62:ce:38:a8:e5:e9:97:ed:48:fe:f0:
         a8:f2:0c:fc:54:54:9d:01:50:dd:65:dc:cc:21:f3:9c:5c:af:
         66:61:af:05:b8:65:0d:2b:09:08:4f:59:cf:76:85:c9:7f:3b:
         17:4c:d4:4d:ed:37:5b:e1:2e:85:37:81:81:ef:8e:cd:fc:d8:
         82:97:24:15:f8:77:8b:cf:af:cc:e1:7c:e4:30:d9:4d:d3:62:
         e7:bd:ea:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 18:13:45 2025 by rpki-client