This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.avsisp.com/repo/AVSISP/0/326131343a373538333a3930303a3a2f34302d3430203d3e20323130343634.roa
File:                     326131343a373538333a3930303a3a2f34302d3430203d3e20323130343634.roa (raw, json)
Hash identifier:          VFiJ4W9ZLKdE30mlgggk+678HfUJtZiMs/6T/WIzp3Y=
Subject key identifier:   36:8F:34:35:45:5F:74:AC:54:D9:24:86:49:3F:84:DC:F3:FD:78:5C
Certificate issuer:       /CN=A609E97AC39E3F53678C0C9422F89947B6146002
Certificate serial:       2269F555D2AE24FDE4FB5605D1F7B96BEDF02ADD
Authority key identifier: A6:09:E9:7A:C3:9E:3F:53:67:8C:0C:94:22:F8:99:47:B6:14:60:02
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A609E97AC39E3F53678C0C9422F89947B6146002.cer
Subject info access:      rsync://rpki.avsisp.com/repo/AVSISP/0/326131343a373538333a3930303a3a2f34302d3430203d3e20323130343634.roa
Signing time:             Sun 14 Dec 2025 19:17:10 +0000
ROA not before:           Sun 14 Dec 2025 19:12:10 +0000
ROA not after:            Sun 13 Dec 2026 19:17:10 +0000
asID:                     210464
IP address blocks:        2a14:7583:900::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.avsisp.com/repo/AVSISP/0/A609E97AC39E3F53678C0C9422F89947B6146002.crl
                          rsync://rpki.avsisp.com/repo/AVSISP/0/A609E97AC39E3F53678C0C9422F89947B6146002.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A609E97AC39E3F53678C0C9422F89947B6146002.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 07:37:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:69:f5:55:d2:ae:24:fd:e4:fb:56:05:d1:f7:b9:6b:ed:f0:2a:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A609E97AC39E3F53678C0C9422F89947B6146002
        Validity
            Not Before: Dec 14 19:12:10 2025 GMT
            Not After : Dec 13 19:17:10 2026 GMT
        Subject: CN=368F3435455F74AC54D92486493F84DCF3FD785C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e5:ac:49:60:96:6e:3c:6a:6c:53:26:6f:17:
                    b8:26:5d:61:50:18:7a:b0:79:fa:bd:98:1a:cd:6c:
                    be:34:bf:b0:e7:ae:00:90:e5:8e:3d:c6:8f:8e:27:
                    05:f4:bf:f7:83:ef:7c:66:e2:2c:5e:21:75:f9:2c:
                    9c:57:b1:a0:65:7f:89:0e:f4:48:47:bb:74:0b:45:
                    4c:8e:09:ea:bb:90:bf:5f:8a:59:16:f6:b2:22:23:
                    9f:6e:b1:cd:09:b9:e8:17:a0:bc:e4:b4:2f:1e:3b:
                    81:41:6c:85:8a:1d:be:c0:4c:27:5c:08:7c:7b:33:
                    d1:54:f8:22:a0:81:de:c8:f8:bf:3c:f6:6a:1b:6a:
                    98:ff:76:10:7a:f8:94:a1:01:02:03:68:5d:ab:94:
                    2c:4c:5f:56:2a:19:79:6a:16:59:31:e0:0a:f5:04:
                    d3:20:06:05:95:cf:06:43:77:94:de:36:2c:2b:50:
                    a2:f6:2e:af:3e:1c:8e:75:5b:ab:2b:5c:cb:f0:10:
                    fc:f8:b7:c7:d4:33:97:2a:2a:0c:6a:13:f0:b6:4d:
                    6e:0b:8b:c0:12:1e:6a:97:bc:b7:08:0c:1d:be:9f:
                    81:c5:3f:35:68:a0:b8:ce:50:b0:95:b1:e1:86:89:
                    2e:29:1d:48:f1:51:81:09:18:b6:90:ef:d9:f6:a8:
                    98:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:8F:34:35:45:5F:74:AC:54:D9:24:86:49:3F:84:DC:F3:FD:78:5C
            X509v3 Authority Key Identifier:
                keyid:A6:09:E9:7A:C3:9E:3F:53:67:8C:0C:94:22:F8:99:47:B6:14:60:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.avsisp.com/repo/AVSISP/0/A609E97AC39E3F53678C0C9422F89947B6146002.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A609E97AC39E3F53678C0C9422F89947B6146002.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.avsisp.com/repo/AVSISP/0/326131343a373538333a3930303a3a2f34302d3430203d3e20323130343634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7583:900::/40

    Signature Algorithm: sha256WithRSAEncryption
         5c:e4:f6:e3:fa:47:d0:68:fa:e3:71:04:ee:7e:be:66:5d:f8:
         ee:4b:6d:b8:11:9e:22:ac:6f:aa:41:85:1b:05:10:53:5f:86:
         b7:fc:1f:38:5d:08:5d:67:b1:57:b3:1b:39:c8:e0:22:ea:7c:
         bf:db:b9:fa:a9:55:d3:e9:68:75:03:bb:33:ac:ed:46:da:69:
         6b:5e:4a:ec:8f:64:61:da:f0:bf:35:ef:8d:48:cc:9f:9e:e2:
         d7:63:2c:11:28:ad:4a:62:bc:7f:36:d8:05:e5:b1:13:14:0b:
         42:1f:bd:c1:af:a9:99:05:59:78:4d:bb:11:2a:c0:be:95:10:
         ed:4d:23:14:aa:50:11:a3:49:2d:62:a5:e6:8d:76:3d:14:b2:
         08:3c:e2:8b:c5:6f:ff:46:5c:39:29:5d:64:c8:b6:cd:ef:b5:
         df:9a:3e:ca:9d:f5:46:7d:97:69:14:04:b5:4c:6b:92:05:eb:
         21:a6:2c:bd:a8:74:d8:49:9c:dc:ce:57:3b:a2:ee:7e:8b:7d:
         15:4f:cb:ef:80:c1:55:4f:2c:32:98:fe:0c:5e:af:ac:fa:73:
         b4:f7:f9:a5:19:d2:18:14:6d:a2:4b:ce:b2:b9:a7:5b:b7:40:
         2b:1b:38:17:f4:b9:77:af:06:18:62:00:27:02:27:ce:e2:01:
         01:1c:b2:5c
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgIUImn1VdKuJP3k+1YF0fe5a+3wKt0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTYwOUU5N0FDMzlFM0Y1MzY3OEMwQzk0MjJGODk5NDdC
NjE0NjAwMjAeFw0yNTEyMTQxOTEyMTBaFw0yNjEyMTMxOTE3MTBaMDMxMTAvBgNV
BAMTKDM2OEYzNDM1NDU1Rjc0QUM1NEQ5MjQ4NjQ5M0Y4NERDRjNGRDc4NUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx5axJYJZuPGpsUyZvF7gmXWFQ
GHqwefq9mBrNbL40v7DnrgCQ5Y49xo+OJwX0v/eD73xm4ixeIXX5LJxXsaBlf4kO
9EhHu3QLRUyOCeq7kL9filkW9rIiI59usc0JuegXoLzktC8eO4FBbIWKHb7ATCdc
CHx7M9FU+CKggd7I+L889mobapj/dhB6+JShAQIDaF2rlCxMX1YqGXlqFlkx4Ar1
BNMgBgWVzwZDd5TeNiwrUKL2Lq8+HI51W6srXMvwEPz4t8fUM5cqKgxqE/C2TW4L
i8ASHmqXvLcIDB2+n4HFPzVooLjOULCVseGGiS4pHUjxUYEJGLaQ79n2qJhpAgMB
AAGjggIeMIICGjAdBgNVHQ4EFgQUNo80NUVfdKxU2SSGST+E3PP9eFwwHwYDVR0j
BBgwFoAUpgnpesOeP1NnjAyUIviZR7YUYAIwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud
HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraS5hdnNpc3AuY29tL3JlcG8vQVZTSVNQ
LzAvQTYwOUU5N0FDMzlFM0Y1MzY3OEMwQzk0MjJGODk5NDdCNjE0NjAwMi5jcmww
gZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5w
YWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQyOTkt
YjA3OS0zMDllZDk3ZjM4MjQvMC9BNjA5RTk3QUMzOUUzRjUzNjc4QzBDOTQyMkY4
OTk0N0I2MTQ2MDAyLmNlcjCBhAYIKwYBBQUHAQsEeDB2MHQGCCsGAQUFBzALhmhy
c3luYzovL3Jwa2kuYXZzaXNwLmNvbS9yZXBvL0FWU0lTUC8wLzMyNjEzMTM0M2Ez
NzM1MzgzMzNhMzkzMDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIwMzIzMTMwMzQz
NjM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/
BBIwEDAOBAIAAjAIAwYAKhR1gwkwDQYJKoZIhvcNAQELBQADggEBAFzk9uP6R9Bo
+uNxBO5+vmZd+O5LbbgRniKsb6pBhRsFEFNfhrf8HzhdCF1nsVezGznI4CLqfL/b
ufqpVdPpaHUDuzOs7UbaaWteSuyPZGHa8L81741IzJ+e4tdjLBEorUpivH822AXl
sRMUC0IfvcGvqZkFWXhNuxEqwL6VEO1NIxSqUBGjSS1ipeaNdj0Usgg84ovFb/9G
XDkpXWTIts3vtd+aPsqd9UZ9l2kUBLVMa5IF6yGmLL2odNhJnNzOVzui7n6LfRVP
y++AwVVPLDKY/gxer6z6c7T3+aUZ0hgUbaJLzrK5p1u3QCsbOBf0uXevBhhiACcC
J87iAQEcslw=
-----END CERTIFICATE-----
Generated at Sat Dec 20 14:06:23 2025 by rpki-client