This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS60326.roa
File:                     AS60326.roa (raw, json)
Hash identifier:          b4/yc3FfFTkhYWw+fdhb+lIBxCoL1CD1mRS0eeA6Bgg=
Subject key identifier:   43:0F:B1:76:AF:2E:EC:40:9A:34:7C:11:C9:A5:E3:EC:CD:EF:EB:DA
Certificate issuer:       /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial:       15EC5DF6A9DCD72C19A3B95367300B2F0F162D13
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS60326.roa
Signing time:             Wed 17 Dec 2025 00:48:44 +0000
ROA not before:           Wed 17 Dec 2025 00:43:44 +0000
ROA not after:            Wed 16 Dec 2026 00:48:44 +0000
asID:                     60326
IP address blocks:        2a06:a005:8f0::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 15:46:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:ec:5d:f6:a9:dc:d7:2c:19:a3:b9:53:67:30:0b:2f:0f:16:2d:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
        Validity
            Not Before: Dec 17 00:43:44 2025 GMT
            Not After : Dec 16 00:48:44 2026 GMT
        Subject: CN=430FB176AF2EEC409A347C11C9A5E3ECCDEFEBDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4d:a8:87:f1:da:12:b2:0e:61:fc:ad:c4:23:
                    1b:e3:1a:62:24:47:64:db:0e:3e:5d:01:43:98:32:
                    d6:fb:4e:e8:5a:35:1b:68:b7:8c:cc:7e:f8:22:79:
                    b2:9c:de:ec:9a:b7:b7:aa:73:28:e9:c5:e7:b3:8b:
                    c5:c1:6e:d8:0f:d4:e1:a3:5d:aa:0a:d2:c6:87:c5:
                    f3:b1:ab:4f:a5:59:ee:e8:76:66:d0:b2:60:5a:e9:
                    3a:e9:85:34:5d:6f:85:42:41:bd:17:57:7a:71:75:
                    d2:b1:f6:dc:14:df:4a:bf:b2:18:d0:3a:75:e9:f5:
                    6c:0f:74:a5:ce:bf:e0:c2:2f:f9:73:c9:79:53:aa:
                    2b:a1:c8:c8:77:b3:cd:c7:6d:23:59:d0:be:a3:28:
                    e3:f2:fc:ab:22:64:d1:df:59:79:67:d6:44:1f:83:
                    2b:eb:f6:81:e9:01:ee:2c:af:6f:ad:c7:6d:e7:fd:
                    97:15:2c:a4:e6:c6:6a:e3:d9:c0:a5:07:ab:d2:43:
                    e0:51:2a:c8:c8:1e:5c:ac:27:64:d8:0d:7d:33:db:
                    a4:bc:48:36:ec:02:d6:b2:ff:d5:86:f2:62:70:93:
                    79:43:ad:c1:0f:43:06:f2:40:5d:8f:df:13:9e:1c:
                    56:05:09:64:5e:41:59:f0:8a:88:a7:2e:39:e2:87:
                    8f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:0F:B1:76:AF:2E:EC:40:9A:34:7C:11:C9:A5:E3:EC:CD:EF:EB:DA
            X509v3 Authority Key Identifier:
                keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS60326.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:8f0::/44

    Signature Algorithm: sha256WithRSAEncryption
         65:79:82:9f:91:f5:f5:88:09:06:67:4e:28:f0:df:61:3e:a2:
         8d:fb:20:1f:2f:13:bc:63:81:67:98:f9:45:20:12:e3:4b:e6:
         c1:b3:7e:94:30:4b:fc:92:5e:66:c6:03:c8:e0:c2:7e:4c:7d:
         a1:79:df:ce:8c:11:86:24:1f:bf:c1:9c:41:ae:d3:42:22:aa:
         47:d5:3e:17:f5:a6:15:a0:7b:e3:c5:12:eb:ad:f9:16:ba:43:
         ee:39:fd:b7:02:fa:8d:de:bc:97:1d:ea:cb:68:7d:9e:6c:69:
         b2:ff:f9:f7:48:d8:34:18:ce:ad:1d:00:67:1e:8d:8f:43:aa:
         c0:60:10:56:9d:f3:5e:7f:74:9a:95:77:b8:8e:59:32:3c:62:
         fd:b3:f6:91:b0:14:40:4c:86:be:e8:a1:92:18:8c:d5:bb:91:
         27:c1:7e:3e:10:18:9b:ac:73:94:ee:82:01:8d:dc:52:f6:3e:
         1b:61:b9:a3:24:f1:e0:37:e3:91:5a:08:71:5c:45:d8:55:55:
         48:a1:05:2f:0a:3a:71:02:97:0a:fc:3e:de:e9:ea:b1:79:4b:
         5f:7d:9e:b7:93:b0:a1:08:a0:52:43:92:75:80:34:27:8a:f6:
         89:c8:f1:94:fa:2e:4b:dd:ac:cb:1d:19:e2:84:d0:01:2d:47:
         3a:e9:af:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 01:16:07 2025 by rpki-client