This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a64313a3a2f34382d3438203d3e20323134363330.roa
File:                     326130623a346530373a64313a3a2f34382d3438203d3e20323134363330.roa (raw, json)
Hash identifier:          F3WpCSy42W4WI9eegJ4PsZDAkWxwkanN0QW3/YNnK3w=
Subject key identifier:   EB:27:50:D7:8A:E8:9E:64:6B:AF:63:FF:13:A8:D6:56:13:1E:00:99
Certificate issuer:       /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
Certificate serial:       387CB5B5EEE15622A593A4912401E84F83537E2F
Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a64313a3a2f34382d3438203d3e20323134363330.roa
Signing time:             Mon 15 Dec 2025 21:24:09 +0000
ROA not before:           Mon 15 Dec 2025 21:19:09 +0000
ROA not after:            Mon 14 Dec 2026 21:24:09 +0000
asID:                     214630
IP address blocks:        2a0b:4e07:d1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 19:26:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:7c:b5:b5:ee:e1:56:22:a5:93:a4:91:24:01:e8:4f:83:53:7e:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
        Validity
            Not Before: Dec 15 21:19:09 2025 GMT
            Not After : Dec 14 21:24:09 2026 GMT
        Subject: CN=EB2750D78AE89E646BAF63FF13A8D656131E0099
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:76:d2:da:89:8e:68:c1:38:26:e1:d1:06:2c:
                    82:97:37:71:ee:17:20:51:e0:b9:7e:3f:6a:6b:f5:
                    f1:3d:5f:d4:64:86:e3:f3:62:90:8d:b7:49:50:43:
                    60:d0:83:3b:5d:a6:b7:35:ad:24:09:eb:3a:2d:74:
                    c6:f4:82:a5:85:8a:d5:56:2b:0c:6f:fd:74:cf:69:
                    62:d2:d1:5d:88:13:de:45:e8:00:57:d5:9d:35:46:
                    be:1f:1d:95:90:5d:bb:c9:a6:63:33:19:51:4c:41:
                    3a:5b:f3:ce:80:f5:46:61:9a:54:ac:2e:d1:80:c6:
                    9f:d9:40:91:02:6d:ec:cf:63:31:74:dd:c4:d9:81:
                    8d:e8:3e:42:de:9b:7c:e3:39:06:c4:aa:2d:6a:8f:
                    d0:ed:84:5d:c3:fe:b9:6d:19:18:72:aa:9e:f1:aa:
                    cd:ba:9b:41:e3:b8:54:7a:49:0b:4e:e4:ea:58:5c:
                    63:5f:91:01:4a:de:e6:45:cc:46:91:8c:d6:4c:ba:
                    cc:d8:b1:fd:45:8e:5a:5d:30:e9:19:29:d7:3a:73:
                    32:56:08:7b:63:2e:f3:f6:03:81:cf:07:e8:19:ff:
                    1e:e8:2d:23:50:cb:e6:c7:18:d5:2c:30:0e:f4:92:
                    69:75:8a:97:9c:20:33:f8:d9:34:8b:f3:52:64:39:
                    a6:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:27:50:D7:8A:E8:9E:64:6B:AF:63:FF:13:A8:D6:56:13:1E:00:99
            X509v3 Authority Key Identifier:
                keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a64313a3a2f34382d3438203d3e20323134363330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4e07:d1::/48

    Signature Algorithm: sha256WithRSAEncryption
         21:87:91:a0:23:19:1a:9e:70:5f:65:f5:88:f8:01:70:1e:9f:
         d9:39:a2:af:4c:62:c5:7c:4a:c4:16:90:04:a5:2b:0f:44:de:
         03:4a:74:1f:03:ff:63:28:d6:a8:93:67:51:55:5f:5f:27:b3:
         71:f7:47:5d:ab:db:0e:73:f8:74:ca:3e:ac:46:5a:3c:60:2d:
         d0:db:6c:b9:59:c1:4c:57:dd:f6:b5:d9:76:5f:d4:e3:ff:bb:
         45:52:d6:4e:9b:7b:1e:ad:e1:ec:18:3f:d6:93:7c:ae:ec:b4:
         52:a8:8b:50:b2:ca:75:ce:f5:fe:7b:1d:77:02:94:4a:51:ba:
         2c:8d:6c:7f:c3:f5:af:3f:dc:ad:d9:0a:e1:ee:7f:6a:80:7e:
         59:5b:73:70:64:80:a6:ff:4a:2a:46:af:0c:1a:38:e1:c9:19:
         b1:9a:09:d7:bd:9d:64:a2:5e:58:83:e2:d3:97:9e:1b:3d:45:
         fb:08:ad:b3:55:bd:c1:30:64:ea:65:ad:e8:d7:ba:29:46:61:
         2f:cb:db:13:59:38:71:f9:35:59:70:82:35:32:b5:ab:8a:b2:
         0c:ed:af:34:fc:96:49:c6:f9:10:71:3f:38:6d:c8:fc:18:fc:
         11:9a:4c:29:25:2c:8b:61:16:62:67:21:99:0e:a1:de:77:94:
         b1:35:9e:54
-----BEGIN CERTIFICATE-----
MIIFXDCCBESgAwIBAgIUOHy1te7hViKlk6SRJAHoT4NTfi8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1
Qzk3NzhCRjAeFw0yNTEyMTUyMTE5MDlaFw0yNjEyMTQyMTI0MDlaMDMxMTAvBgNV
BAMTKEVCMjc1MEQ3OEFFODlFNjQ2QkFGNjNGRjEzQThENjU2MTMxRTAwOTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1dtLaiY5owTgm4dEGLIKXN3Hu
FyBR4Ll+P2pr9fE9X9RkhuPzYpCNt0lQQ2DQgztdprc1rSQJ6zotdMb0gqWFitVW
Kwxv/XTPaWLS0V2IE95F6ABX1Z01Rr4fHZWQXbvJpmMzGVFMQTpb886A9UZhmlSs
LtGAxp/ZQJECbezPYzF03cTZgY3oPkLem3zjOQbEqi1qj9DthF3D/rltGRhyqp7x
qs26m0HjuFR6SQtO5OpYXGNfkQFK3uZFzEaRjNZMuszYsf1FjlpdMOkZKdc6czJW
CHtjLvP2A4HPB+gZ/x7oLSNQy+bHGNUsMA70kml1ipecIDP42TSL81JkOaa5AgMB
AAGjggJmMIICYjAdBgNVHQ4EFgQU6ydQ14ronmRrr2P/E6jWVhMeAJkwHwYDVR0j
BBgwFoAUUSTDH8+k6CxND24JowoEpVyXeL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvODFhNDQ1NjY0NThlNDU3OGI2N2VlZDMwNTNmODIwZjUvMS81MTI0QzMxRkNG
QTRFODJDNEQwRjZFMDlBMzBBMDRBNTVDOTc3OEJGLmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5LTBhYjcwZTQ4
MTViYi8wLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu
Y2VyMIGoBggrBgEFBQcBCwSBmzCBmDCBlQYIKwYBBQUHMAuGgYhyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvODFhNDQ1NjY0NThlNDU3OGI2N2Vl
ZDMwNTNmODIwZjUvMS8zMjYxMzA2MjNhMzQ2NTMwMzczYTY0MzEzYTNhMmYzNDM4
MmQzNDM4MjAzZDNlMjAzMjMxMzQzNjMzMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYI
KwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqC04HANEwDQYJ
KoZIhvcNAQELBQADggEBACGHkaAjGRqecF9l9Yj4AXAen9k5oq9MYsV8SsQWkASl
Kw9E3gNKdB8D/2Mo1qiTZ1FVX18ns3H3R12r2w5z+HTKPqxGWjxgLdDbbLlZwUxX
3fa12XZf1OP/u0VS1k6bex6t4ewYP9aTfK7stFKoi1CyynXO9f57HXcClEpRuiyN
bH/D9a8/3K3ZCuHuf2qAfllbc3BkgKb/SipGrwwaOOHJGbGaCde9nWSiXliD4tOX
nhs9RfsIrbNVvcEwZOplrejXuilGYS/L2xNZOHH5NVlwgjUytauKsgztrzT8lknG
+RBxPzhtyPwY/BGaTCklLIthFmJnIZkOod53lLE1nlQ=
-----END CERTIFICATE-----
Generated at Sat Dec 20 13:00:40 2025 by rpki-client