This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.warpnet.xyz/repo/warpnet/0/326130343a356138303a61633a3a2f34382d3438203d3e20313939393138.roa
File:                     326130343a356138303a61633a3a2f34382d3438203d3e20313939393138.roa (raw, json)
Hash identifier:          /iF6AP4OD7wuSl2Npia/brJNrNh9Rp+q+qHrWE7r8NI=
Subject key identifier:   6B:BF:45:6D:CA:C6:E4:03:DD:57:61:AF:42:EB:AC:CE:08:40:6A:C8
Certificate issuer:       /CN=b4b74ed94183cc06a35c95c5b7096b7c0ef04944
Certificate serial:       10A634D144899EA272EA783B213436CBE17EFE1D
Authority key identifier: B4:B7:4E:D9:41:83:CC:06:A3:5C:95:C5:B7:09:6B:7C:0E:F0:49:44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tLdO2UGDzAajXJXFtwlrfA7wSUQ.cer
Subject info access:      rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/326130343a356138303a61633a3a2f34382d3438203d3e20313939393138.roa
Signing time:             Tue 30 Dec 2025 10:50:16 +0000
ROA not before:           Tue 30 Dec 2025 10:45:16 +0000
ROA not after:            Tue 29 Dec 2026 10:50:16 +0000
asID:                     199918
IP address blocks:        2a04:5a80:ac::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/B4B74ED94183CC06A35C95C5B7096B7C0EF04944.crl
                          rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/B4B74ED94183CC06A35C95C5B7096B7C0EF04944.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tLdO2UGDzAajXJXFtwlrfA7wSUQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 Jan 2026 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:a6:34:d1:44:89:9e:a2:72:ea:78:3b:21:34:36:cb:e1:7e:fe:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4b74ed94183cc06a35c95c5b7096b7c0ef04944
        Validity
            Not Before: Dec 30 10:45:16 2025 GMT
            Not After : Dec 29 10:50:16 2026 GMT
        Subject: CN=6BBF456DCAC6E403DD5761AF42EBACCE08406AC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:75:bf:f2:7a:1b:dc:a2:df:c4:43:80:bb:bb:
                    e4:77:1a:d5:04:1d:51:93:5c:d3:d7:0d:92:50:30:
                    57:cc:ea:03:18:d7:43:f5:c6:61:ba:c5:4a:64:0f:
                    1f:1b:92:73:fd:99:37:30:e7:87:4f:15:dd:e9:cf:
                    e0:d7:8a:3d:4c:cf:ea:bb:07:10:a8:65:33:f5:f2:
                    35:9d:a8:e3:1a:32:78:c8:4f:eb:26:69:a4:5c:d6:
                    d7:02:05:92:71:f1:0b:67:41:57:9a:90:db:f3:8d:
                    05:07:c2:8f:4a:0b:88:f9:d0:43:b8:96:04:6b:c1:
                    8d:2f:d0:2a:dd:2f:b8:dc:50:0a:e0:1e:11:f7:13:
                    1e:ba:3c:6b:b2:0c:38:2f:2e:90:e5:10:b8:5e:be:
                    89:3d:cb:40:10:d5:92:d0:24:29:1d:05:4d:0e:42:
                    b7:24:58:0b:4e:64:2c:2f:3b:00:4d:20:fc:ab:65:
                    0d:6c:a6:bd:9e:1a:15:91:54:ee:ec:d8:9e:12:ac:
                    3e:91:11:1c:f3:98:b1:ab:e8:aa:63:09:8b:ca:1c:
                    d5:c2:3d:55:e0:88:01:5c:1b:12:3c:a8:55:85:4f:
                    5d:80:5d:7a:1c:20:d1:25:7a:03:88:8b:3d:6b:76:
                    a1:0e:b7:58:00:5c:49:f2:fa:d0:c0:37:0f:79:d8:
                    9f:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:BF:45:6D:CA:C6:E4:03:DD:57:61:AF:42:EB:AC:CE:08:40:6A:C8
            X509v3 Authority Key Identifier:
                keyid:B4:B7:4E:D9:41:83:CC:06:A3:5C:95:C5:B7:09:6B:7C:0E:F0:49:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/B4B74ED94183CC06A35C95C5B7096B7C0EF04944.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tLdO2UGDzAajXJXFtwlrfA7wSUQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/326130343a356138303a61633a3a2f34382d3438203d3e20313939393138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a04:5a80:ac::/48

    Signature Algorithm: sha256WithRSAEncryption
         21:fe:87:86:c6:9a:d4:f2:c3:08:10:17:4d:e2:d5:f6:ca:6f:
         7b:b9:dd:07:c1:84:0d:b6:74:db:89:dc:ca:18:4b:fa:59:c2:
         dd:61:43:a9:5a:7e:1b:52:c2:27:61:85:96:19:4b:37:b1:dc:
         e0:ab:d2:62:ac:5d:da:bb:d3:df:2b:e2:f2:24:65:be:b2:48:
         22:60:aa:65:4d:9d:a3:af:2d:4e:66:6e:67:95:73:a3:10:1d:
         5f:74:4a:48:a3:af:91:7f:98:a1:16:38:14:3f:d3:89:31:00:
         20:1e:59:76:80:8c:53:5d:b2:cb:38:a7:2a:e8:ed:5b:87:7d:
         ac:70:65:0d:23:35:e7:3d:14:ff:be:52:1c:e5:dd:cb:6f:65:
         5b:60:45:2d:f7:22:67:c6:ec:15:1c:ea:d9:ba:a6:b7:97:a3:
         fa:1f:1f:a2:86:3a:d3:b2:27:22:de:fd:2b:9f:84:28:5d:55:
         20:85:ac:a1:48:4c:c4:68:70:5f:eb:eb:b2:e9:65:4b:f6:1c:
         c3:71:c3:84:e1:1a:d5:c6:ff:d4:3a:34:e1:42:82:36:a1:78:
         fe:d4:29:ca:59:39:3d:18:6d:61:51:84:33:d2:b8:99:1f:5a:
         8c:55:0c:e5:f2:9d:4d:05:d4:72:24:b9:97:d6:8d:f1:18:70:
         56:d6:d1:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 5 19:15:02 2026 by rpki-client