This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rki.plasmanodes.com/repo/plasma-casv/1/326131343a373538333a663830313a3a2f34382d3438203d3e20323032363733.roa
File:                     326131343a373538333a663830313a3a2f34382d3438203d3e20323032363733.roa (raw, json)
Hash identifier:          xOYnFalGv0z3yUWe6ner4v8ODNTTrQtrbhGQRtgoXWc=
Subject key identifier:   D7:4B:26:3F:C1:F3:04:24:C4:26:60:5E:D0:40:EF:4A:70:5F:25:97
Certificate issuer:       /CN=576B1D30C7D612FE82D2E2C5A78ED4165480F3D9
Certificate serial:       363AE371922851C0441FFC0FBD072132699258C5
Authority key identifier: 57:6B:1D:30:C7:D6:12:FE:82:D2:E2:C5:A7:8E:D4:16:54:80:F3:D9
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/576B1D30C7D612FE82D2E2C5A78ED4165480F3D9.cer
Subject info access:      rsync://rki.plasmanodes.com/repo/plasma-casv/1/326131343a373538333a663830313a3a2f34382d3438203d3e20323032363733.roa
Signing time:             Thu 04 Dec 2025 17:32:09 +0000
ROA not before:           Thu 04 Dec 2025 17:27:09 +0000
ROA not after:            Thu 03 Dec 2026 17:32:09 +0000
asID:                     202673
IP address blocks:        2a14:7583:f801::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rki.plasmanodes.com/repo/plasma-casv/1/576B1D30C7D612FE82D2E2C5A78ED4165480F3D9.crl
                          rsync://rki.plasmanodes.com/repo/plasma-casv/1/576B1D30C7D612FE82D2E2C5A78ED4165480F3D9.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/576B1D30C7D612FE82D2E2C5A78ED4165480F3D9.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Dec 2025 10:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:3a:e3:71:92:28:51:c0:44:1f:fc:0f:bd:07:21:32:69:92:58:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=576B1D30C7D612FE82D2E2C5A78ED4165480F3D9
        Validity
            Not Before: Dec  4 17:27:09 2025 GMT
            Not After : Dec  3 17:32:09 2026 GMT
        Subject: CN=D74B263FC1F30424C426605ED040EF4A705F2597
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c9:79:0e:1a:65:53:c3:a3:18:81:cb:a9:c7:
                    8e:9b:aa:26:88:63:83:95:50:31:f3:7a:1c:07:75:
                    81:cd:47:92:71:16:f4:48:cf:02:2a:67:99:ce:42:
                    84:08:95:3e:2c:d7:0d:3f:dc:23:71:97:45:0a:38:
                    f5:98:34:d2:98:d2:60:8d:73:5f:3d:f6:77:3e:2c:
                    5d:bd:bb:13:75:ea:82:8a:fb:90:44:d9:f2:ce:96:
                    6e:4e:12:60:59:01:a8:1f:30:47:47:0b:c1:2a:bc:
                    6d:5f:f6:9d:84:04:ef:04:02:9d:de:40:08:e6:ca:
                    fd:59:71:d6:13:b3:4b:3e:52:dd:75:db:e3:01:2d:
                    57:fc:f7:d4:f8:62:86:10:ec:c3:a9:c4:07:f5:2c:
                    22:55:27:54:7e:14:af:86:44:fd:6f:ae:e8:13:d1:
                    8b:3e:fe:b4:cf:03:6f:fd:05:df:5d:17:dc:01:10:
                    cc:d0:44:04:24:c0:55:e0:85:91:63:87:52:21:02:
                    1c:23:ac:fd:aa:f9:56:c0:3c:3d:ad:86:1f:8b:ba:
                    28:17:a5:cf:f8:66:c9:eb:6a:50:7b:fb:1c:47:c1:
                    10:6e:97:9f:d6:13:2d:dd:2f:eb:18:05:d6:f7:36:
                    6b:3b:f8:b4:f8:dd:a4:a7:5d:27:6e:d0:a1:45:4c:
                    9d:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:4B:26:3F:C1:F3:04:24:C4:26:60:5E:D0:40:EF:4A:70:5F:25:97
            X509v3 Authority Key Identifier:
                keyid:57:6B:1D:30:C7:D6:12:FE:82:D2:E2:C5:A7:8E:D4:16:54:80:F3:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rki.plasmanodes.com/repo/plasma-casv/1/576B1D30C7D612FE82D2E2C5A78ED4165480F3D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/576B1D30C7D612FE82D2E2C5A78ED4165480F3D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rki.plasmanodes.com/repo/plasma-casv/1/326131343a373538333a663830313a3a2f34382d3438203d3e20323032363733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7583:f801::/48

    Signature Algorithm: sha256WithRSAEncryption
         0f:5d:43:66:5d:ec:99:03:d3:3f:27:9f:c2:e5:a3:e4:a8:10:
         2b:26:b0:7e:89:a7:ef:e8:6f:ec:07:07:89:2a:c5:ac:f7:93:
         c4:5c:4b:7d:3a:d7:62:3d:eb:5b:a1:7f:b0:17:5f:21:6f:92:
         9d:86:0c:67:89:5a:c9:8f:c2:19:59:c6:dc:6f:8a:29:db:b2:
         f5:51:eb:36:57:f5:63:7a:a0:6d:50:1f:a1:90:68:bb:7e:0e:
         8b:b5:e2:e7:e1:91:b8:89:a9:e6:4f:3f:74:82:bc:ac:92:a9:
         e4:18:2f:2d:b7:4c:d0:e5:2b:f0:c5:72:60:c3:05:cf:ce:82:
         06:bf:e3:29:95:19:5a:1b:66:61:10:8c:8c:9a:aa:49:80:93:
         5e:b3:05:52:b6:76:a4:5f:b3:49:78:c6:77:44:56:7b:b8:ff:
         a2:42:c0:df:ec:59:f8:b7:80:da:4b:58:c2:d9:c8:3c:5d:cc:
         29:f9:c3:25:54:98:ec:ed:9c:75:78:de:45:d8:e2:51:bb:87:
         41:0e:50:63:63:a1:ea:78:9d:f0:85:76:d4:c0:4f:be:50:21:
         11:55:0b:34:85:78:21:e3:c7:a0:d9:43:e7:7b:09:7f:40:76:
         2a:99:44:0a:9e:d4:ec:cf:2e:1c:16:54:21:9f:e4:6e:a9:fc:
         cd:7d:a5:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 19:34:45 2025 by rpki-client