This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.avsisp.com/repo/AVSISP/0/326131343a373538333a3730303a3a2f34302d3430203d3e20323130343634.roa
File:                     326131343a373538333a3730303a3a2f34302d3430203d3e20323130343634.roa (raw, json)
Hash identifier:          +QJa85lXutaYGD3OTb0UoXLTx903qaGvpSr+nLgJI4g=
Subject key identifier:   1B:13:CE:CD:90:12:3D:E3:50:9E:E0:EE:24:F8:FC:E2:B5:08:AE:75
Certificate issuer:       /CN=A609E97AC39E3F53678C0C9422F89947B6146002
Certificate serial:       215EFDD1EA5E0F90733D42C43BD2574DA6E7DAAA
Authority key identifier: A6:09:E9:7A:C3:9E:3F:53:67:8C:0C:94:22:F8:99:47:B6:14:60:02
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A609E97AC39E3F53678C0C9422F89947B6146002.cer
Subject info access:      rsync://rpki.avsisp.com/repo/AVSISP/0/326131343a373538333a3730303a3a2f34302d3430203d3e20323130343634.roa
Signing time:             Sun 14 Dec 2025 19:16:09 +0000
ROA not before:           Sun 14 Dec 2025 19:11:09 +0000
ROA not after:            Sun 13 Dec 2026 19:16:09 +0000
asID:                     210464
IP address blocks:        2a14:7583:700::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.avsisp.com/repo/AVSISP/0/A609E97AC39E3F53678C0C9422F89947B6146002.crl
                          rsync://rpki.avsisp.com/repo/AVSISP/0/A609E97AC39E3F53678C0C9422F89947B6146002.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A609E97AC39E3F53678C0C9422F89947B6146002.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 07:37:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:5e:fd:d1:ea:5e:0f:90:73:3d:42:c4:3b:d2:57:4d:a6:e7:da:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A609E97AC39E3F53678C0C9422F89947B6146002
        Validity
            Not Before: Dec 14 19:11:09 2025 GMT
            Not After : Dec 13 19:16:09 2026 GMT
        Subject: CN=1B13CECD90123DE3509EE0EE24F8FCE2B508AE75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:cb:f2:15:97:7f:5d:87:77:a7:3c:ee:60:a8:
                    57:37:13:34:0a:28:e9:9d:17:75:77:7a:ff:4c:9c:
                    a9:0b:3f:43:6c:92:9d:88:b7:09:e7:68:4f:03:07:
                    0d:67:79:47:4e:90:7b:ca:95:08:fa:5f:53:5c:16:
                    b2:04:13:13:b5:63:51:6c:c1:8b:1e:e6:bf:2e:5b:
                    b7:93:da:96:9e:61:63:cf:64:aa:6d:db:62:3a:7e:
                    1d:bf:01:da:f7:ed:6f:ac:38:97:52:c2:c8:e2:a1:
                    79:7d:1b:e9:a6:a4:0e:cb:7e:a1:5e:8c:38:24:9e:
                    c1:96:a2:b1:30:dc:35:2e:9d:28:7f:a9:b2:ec:c6:
                    42:bf:e1:90:87:f2:68:b1:63:b5:92:77:f3:70:87:
                    66:f8:e3:89:d9:75:63:e1:97:1e:01:80:0b:0f:b9:
                    4f:b5:25:e7:a0:60:44:f7:e2:b4:d6:63:c8:9c:ff:
                    03:e9:62:5f:2c:fd:ef:39:89:dd:3e:37:12:ce:46:
                    2a:03:2e:1f:aa:13:b8:c2:69:2c:5c:fd:dd:13:62:
                    c1:2c:6f:6e:4b:dd:d0:92:3f:20:86:0e:cc:c4:88:
                    08:33:09:c3:ca:28:8f:e7:74:4a:7a:2b:e2:fb:2d:
                    6f:9c:1f:05:29:e5:47:37:b6:ed:0a:60:ad:ba:ca:
                    bb:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:13:CE:CD:90:12:3D:E3:50:9E:E0:EE:24:F8:FC:E2:B5:08:AE:75
            X509v3 Authority Key Identifier:
                keyid:A6:09:E9:7A:C3:9E:3F:53:67:8C:0C:94:22:F8:99:47:B6:14:60:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.avsisp.com/repo/AVSISP/0/A609E97AC39E3F53678C0C9422F89947B6146002.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A609E97AC39E3F53678C0C9422F89947B6146002.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.avsisp.com/repo/AVSISP/0/326131343a373538333a3730303a3a2f34302d3430203d3e20323130343634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7583:700::/40

    Signature Algorithm: sha256WithRSAEncryption
         6c:9d:2f:e9:0b:69:7e:9b:e6:59:a0:b6:f4:a7:e8:c3:f0:05:
         f4:74:20:1f:5f:be:77:ae:d8:16:a3:b2:38:43:62:52:0e:24:
         eb:44:c0:56:c4:b7:be:49:8b:5e:b0:8b:9c:70:96:00:42:55:
         e6:e4:85:22:c0:45:09:9a:42:e0:47:33:6f:de:75:47:32:55:
         85:c3:5e:68:19:52:3a:fe:ba:61:c2:97:b3:bf:1e:19:4e:47:
         6a:fe:e1:36:b0:bc:91:63:f1:c1:9c:b9:1d:cc:48:b8:dd:75:
         f2:ee:74:6c:c4:93:e7:fa:de:6b:c6:98:3d:4d:01:5c:fb:40:
         23:0e:ab:9a:42:14:b8:e9:4d:87:0a:ce:e7:d0:7b:3b:3f:49:
         33:ac:ea:9a:02:11:a3:9a:10:94:36:6c:b4:25:0e:14:34:4f:
         90:09:44:06:14:9f:6c:3e:14:71:9b:be:6e:5a:43:9d:58:97:
         fa:cb:4d:ab:29:9a:e1:af:1c:c4:a8:a4:23:54:cf:f8:01:18:
         10:b5:d2:f4:99:5c:6c:bb:86:6c:c3:b5:37:fd:25:8a:8f:47:
         13:e4:9b:f1:18:e9:fe:f2:0a:e4:5d:01:17:62:26:e5:2c:6d:
         77:f8:48:5f:62:03:29:bd:56:80:dd:9c:49:b4:80:14:db:d9:
         c0:04:b6:fa
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgIUIV790epeD5BzPULEO9JXTabn2qowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTYwOUU5N0FDMzlFM0Y1MzY3OEMwQzk0MjJGODk5NDdC
NjE0NjAwMjAeFw0yNTEyMTQxOTExMDlaFw0yNjEyMTMxOTE2MDlaMDMxMTAvBgNV
BAMTKDFCMTNDRUNEOTAxMjNERTM1MDlFRTBFRTI0RjhGQ0UyQjUwOEFFNzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAy/IVl39dh3enPO5gqFc3EzQK
KOmdF3V3ev9MnKkLP0Nskp2ItwnnaE8DBw1neUdOkHvKlQj6X1NcFrIEExO1Y1Fs
wYse5r8uW7eT2paeYWPPZKpt22I6fh2/Adr37W+sOJdSwsjioXl9G+mmpA7LfqFe
jDgknsGWorEw3DUunSh/qbLsxkK/4ZCH8mixY7WSd/Nwh2b444nZdWPhlx4BgAsP
uU+1JeegYET34rTWY8ic/wPpYl8s/e85id0+NxLORioDLh+qE7jCaSxc/d0TYsEs
b25L3dCSPyCGDszEiAgzCcPKKI/ndEp6K+L7LW+cHwUp5Uc3tu0KYK26yrs9AgMB
AAGjggIeMIICGjAdBgNVHQ4EFgQUGxPOzZASPeNQnuDuJPj84rUIrnUwHwYDVR0j
BBgwFoAUpgnpesOeP1NnjAyUIviZR7YUYAIwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud
HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraS5hdnNpc3AuY29tL3JlcG8vQVZTSVNQ
LzAvQTYwOUU5N0FDMzlFM0Y1MzY3OEMwQzk0MjJGODk5NDdCNjE0NjAwMi5jcmww
gZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5w
YWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQyOTkt
YjA3OS0zMDllZDk3ZjM4MjQvMC9BNjA5RTk3QUMzOUUzRjUzNjc4QzBDOTQyMkY4
OTk0N0I2MTQ2MDAyLmNlcjCBhAYIKwYBBQUHAQsEeDB2MHQGCCsGAQUFBzALhmhy
c3luYzovL3Jwa2kuYXZzaXNwLmNvbS9yZXBvL0FWU0lTUC8wLzMyNjEzMTM0M2Ez
NzM1MzgzMzNhMzczMDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIwMzIzMTMwMzQz
NjM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/
BBIwEDAOBAIAAjAIAwYAKhR1gwcwDQYJKoZIhvcNAQELBQADggEBAGydL+kLaX6b
5lmgtvSn6MPwBfR0IB9fvneu2BajsjhDYlIOJOtEwFbEt75Ji16wi5xwlgBCVebk
hSLARQmaQuBHM2/edUcyVYXDXmgZUjr+umHCl7O/HhlOR2r+4TawvJFj8cGcuR3M
SLjddfLudGzEk+f63mvGmD1NAVz7QCMOq5pCFLjpTYcKzufQezs/STOs6poCEaOa
EJQ2bLQlDhQ0T5AJRAYUn2w+FHGbvm5aQ51Yl/rLTaspmuGvHMSopCNUz/gBGBC1
0vSZXGy7hmzDtTf9JYqPRxPkm/EY6f7yCuRdARdiJuUsbXf4SF9iAym9VoDdnEm0
gBTb2cAEtvo=
-----END CERTIFICATE-----
Generated at Sat Dec 20 14:06:24 2025 by rpki-client