This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a313a3a2f34382d3438203d3e20323134363330.roa
File:                     326130623a346530373a313a3a2f34382d3438203d3e20323134363330.roa (raw, json)
Hash identifier:          mwj1ixjIvA2OCBrNel9UWgs35Fhi7ylEWMy1CC+A2dY=
Subject key identifier:   A1:72:99:AD:42:6E:81:95:58:BE:18:11:AF:D5:2F:47:53:05:58:A8
Certificate issuer:       /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
Certificate serial:       782E70AE79F7BFE241CB666719D0BA73731F1007
Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a313a3a2f34382d3438203d3e20323134363330.roa
Signing time:             Mon 15 Dec 2025 22:31:52 +0000
ROA not before:           Mon 15 Dec 2025 22:26:52 +0000
ROA not after:            Mon 14 Dec 2026 22:31:52 +0000
asID:                     214630
IP address blocks:        2a0b:4e07:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 19:26:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:2e:70:ae:79:f7:bf:e2:41:cb:66:67:19:d0:ba:73:73:1f:10:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
        Validity
            Not Before: Dec 15 22:26:52 2025 GMT
            Not After : Dec 14 22:31:52 2026 GMT
        Subject: CN=A17299AD426E819558BE1811AFD52F47530558A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:9f:3c:10:1b:f1:b0:d5:2c:55:01:d7:90:ec:
                    e6:ec:fc:4e:9b:60:41:a7:a5:ac:ec:73:1f:c6:34:
                    61:f7:66:1d:65:bd:99:b0:cb:1a:d9:ab:9c:6d:a5:
                    4b:16:22:09:7a:b8:6f:6f:38:76:a6:ba:b0:93:00:
                    bb:34:da:21:01:75:59:af:15:45:a1:0b:de:f9:56:
                    fc:96:ec:40:df:23:d8:26:cb:e7:5a:bf:56:24:e8:
                    6e:e5:e8:6a:7b:33:23:89:4c:49:90:71:1b:f8:0f:
                    71:53:98:2e:9c:6d:e1:c9:49:b0:90:2f:1d:1e:7e:
                    26:9a:98:96:d5:8a:dd:6b:13:84:61:7f:21:25:46:
                    4c:cc:3f:06:a5:dc:36:14:44:b0:fe:48:07:5c:8c:
                    29:d1:19:0c:96:17:7d:af:cf:a8:af:69:f8:fe:7e:
                    46:55:ef:9c:1f:4e:c8:de:f9:c5:c8:79:78:85:81:
                    76:e9:6b:3e:c9:21:ed:95:4d:a1:9e:64:1d:59:1d:
                    a9:eb:cf:c1:29:7e:7d:a6:77:4d:93:64:cb:cd:48:
                    bb:09:33:f3:48:fe:55:5b:c9:e8:61:00:eb:d1:0b:
                    ac:5f:91:3c:37:27:9e:b1:95:41:d2:1e:2a:f8:9f:
                    e1:8e:ce:48:a8:a9:5f:27:52:1a:eb:71:ac:f2:a1:
                    ac:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:72:99:AD:42:6E:81:95:58:BE:18:11:AF:D5:2F:47:53:05:58:A8
            X509v3 Authority Key Identifier:
                keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a313a3a2f34382d3438203d3e20323134363330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4e07:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         39:69:56:41:fd:3d:c8:72:3c:c2:b6:ff:05:fe:16:ad:a7:c0:
         1e:dd:39:93:c8:8f:47:90:36:54:ed:f0:da:61:f6:5c:fa:0c:
         9f:90:27:f0:f3:69:55:d6:a9:3b:e6:c1:12:81:e9:d7:2a:c6:
         45:fb:f5:54:3d:a3:22:5a:b2:2c:c3:5c:16:27:66:db:13:57:
         14:9f:08:58:6e:cd:09:fd:29:04:44:7f:f9:99:11:9f:c3:eb:
         5f:6b:16:38:02:37:4c:af:dd:65:5d:c6:5d:2a:5a:7a:4f:dd:
         3f:64:83:1a:24:fa:8a:83:8d:19:d1:34:39:84:75:02:1f:6b:
         01:58:58:21:2a:19:ab:be:aa:a2:9f:a4:0f:64:36:d1:a3:99:
         7f:d3:9a:2b:fd:a4:be:40:95:31:39:4e:ba:02:51:08:4d:d3:
         9e:f1:5a:db:1b:a5:e5:92:87:8a:38:41:63:43:69:dd:4f:99:
         ba:c0:7e:3c:66:9e:d8:50:3d:d6:5c:dd:26:f9:f1:aa:0d:5c:
         47:2f:45:bb:68:01:34:a3:d3:7d:db:42:d4:24:d2:ed:64:8a:
         c2:4b:33:b8:2d:e2:3b:b4:61:60:df:af:d5:fe:ac:f9:c1:cd:
         f3:95:85:0c:47:41:f0:23:2a:1a:c2:61:47:82:2d:e5:c2:5e:
         69:d6:80:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 13:00:41 2025 by rpki-client