This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a633a3a2f34362d3438203d3e203438373532.roa
File:                     326130623a346530373a633a3a2f34362d3438203d3e203438373532.roa (raw, json)
Hash identifier:          DoY5OhjxZi382N1EkqWebLNVt8JYUpZ+TBVQ4rsXWPI=
Subject key identifier:   B9:C8:7B:15:CC:35:EC:B0:9D:F1:AD:F1:C2:B2:57:BB:9C:D5:D7:E6
Certificate issuer:       /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
Certificate serial:       6F2B78ADFCB58A98F4D1B5E608EAB5CE285A9407
Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a633a3a2f34362d3438203d3e203438373532.roa
Signing time:             Fri 12 Dec 2025 14:19:35 +0000
ROA not before:           Fri 12 Dec 2025 14:14:35 +0000
ROA not after:            Fri 11 Dec 2026 14:19:35 +0000
asID:                     48752
IP address blocks:        2a0b:4e07:c::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Dec 2025 04:35:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:2b:78:ad:fc:b5:8a:98:f4:d1:b5:e6:08:ea:b5:ce:28:5a:94:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
        Validity
            Not Before: Dec 12 14:14:35 2025 GMT
            Not After : Dec 11 14:19:35 2026 GMT
        Subject: CN=B9C87B15CC35ECB09DF1ADF1C2B257BB9CD5D7E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:41:86:1d:6f:ce:cd:73:37:fd:d4:e9:24:de:
                    c6:db:5d:d0:fc:ca:98:c5:c9:76:ac:6d:e7:ad:da:
                    0a:96:be:7a:35:c7:7d:0c:9b:96:3c:32:db:b7:37:
                    b6:d6:ac:23:58:24:32:83:9b:29:98:88:6a:58:fa:
                    4c:9c:87:c8:45:40:0b:b3:5a:31:2c:e3:09:39:e3:
                    a8:79:31:11:3f:5c:cd:4d:6a:5a:08:3a:64:5b:12:
                    0c:d1:42:df:13:6f:04:66:11:46:75:41:a5:77:ac:
                    fd:3f:1c:62:05:3e:fd:9d:c7:4c:9e:15:f2:b3:6c:
                    5a:c5:31:34:c2:ab:63:7e:93:b2:af:7a:41:91:7b:
                    1f:19:ec:fa:51:96:7c:65:cd:6b:6b:04:e4:4d:87:
                    b5:b4:56:65:55:f7:fd:20:48:14:d8:6f:85:bb:97:
                    8b:c5:a2:e7:be:11:d4:e3:69:66:97:8c:b9:4f:74:
                    33:6c:65:b7:9a:f5:ef:f0:e9:ea:18:34:2e:f7:d9:
                    42:f4:8e:f1:2c:9b:86:36:06:93:9d:50:86:28:51:
                    7d:b7:97:6c:3e:74:76:cf:5e:a0:42:04:ed:93:b2:
                    e5:71:de:c3:b8:d4:4e:ff:9b:06:12:52:6d:75:e3:
                    31:59:28:01:2a:f0:90:22:48:a0:eb:e8:e2:38:1a:
                    1e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:C8:7B:15:CC:35:EC:B0:9D:F1:AD:F1:C2:B2:57:BB:9C:D5:D7:E6
            X509v3 Authority Key Identifier:
                keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a633a3a2f34362d3438203d3e203438373532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4e07:c::/46

    Signature Algorithm: sha256WithRSAEncryption
         35:c6:c6:29:b6:0f:98:97:d7:de:61:95:61:01:d6:82:e6:b7:
         7b:3f:b6:73:5f:f1:07:bf:a7:cb:43:b8:f3:a2:88:90:40:81:
         19:a1:fe:63:a2:84:81:ce:ba:66:f6:cc:aa:17:6b:d1:cf:f7:
         3a:b0:e6:db:5f:8b:e8:4e:27:c5:8d:4e:a3:fa:e3:ee:e7:8f:
         70:e5:c6:d6:f7:a2:4c:76:ca:d3:7a:df:2c:2e:b0:79:4d:e0:
         f5:1a:1c:f0:d9:0d:f9:c4:e0:12:f1:59:16:ba:6b:b0:38:a9:
         74:1f:5c:9f:f2:41:ef:2a:b8:12:d9:07:91:99:26:82:20:21:
         75:bb:24:63:ee:5d:e2:85:8f:8e:e6:01:e9:64:bd:1f:c5:23:
         b3:1c:4b:7c:2c:d4:32:20:0f:e0:c9:62:38:39:5c:cb:91:4d:
         32:43:eb:1b:b8:f2:58:dc:77:13:e2:0b:8a:bf:37:71:fb:9e:
         63:17:4d:ed:b4:79:14:8c:d1:f3:d5:71:bf:39:da:cc:e4:a8:
         c8:13:ce:9b:91:fc:8d:89:94:ed:96:f3:63:0b:e2:8c:bd:c1:
         25:e9:07:16:95:d3:ea:8d:42:f9:3a:d9:97:dd:8d:82:42:39:
         9a:b7:db:cb:f2:10:0d:9b:6f:24:1e:a5:79:76:47:cb:9e:be:
         b4:d7:d1:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 20:49:40 2025 by rpki-client