This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.avsisp.com/repo/AVSISP/0/326131343a373538333a6230303a3a2f34302d3430203d3e20323130343634.roa
File:                     326131343a373538333a6230303a3a2f34302d3430203d3e20323130343634.roa (raw, json)
Hash identifier:          BdqCuY29pkjqPpQnJRfVuCBZhAWV8h5UK3xwa1RL5Gc=
Subject key identifier:   10:E8:D5:C1:18:DA:A2:D8:9F:48:26:B9:A6:0D:08:CA:92:17:4A:FD
Certificate issuer:       /CN=A609E97AC39E3F53678C0C9422F89947B6146002
Certificate serial:       51FBB8BB98DF1BAF8A69116048310B3203A1F64E
Authority key identifier: A6:09:E9:7A:C3:9E:3F:53:67:8C:0C:94:22:F8:99:47:B6:14:60:02
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A609E97AC39E3F53678C0C9422F89947B6146002.cer
Subject info access:      rsync://rpki.avsisp.com/repo/AVSISP/0/326131343a373538333a6230303a3a2f34302d3430203d3e20323130343634.roa
Signing time:             Sun 14 Dec 2025 19:17:29 +0000
ROA not before:           Sun 14 Dec 2025 19:12:29 +0000
ROA not after:            Sun 13 Dec 2026 19:17:29 +0000
asID:                     210464
IP address blocks:        2a14:7583:b00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.avsisp.com/repo/AVSISP/0/A609E97AC39E3F53678C0C9422F89947B6146002.crl
                          rsync://rpki.avsisp.com/repo/AVSISP/0/A609E97AC39E3F53678C0C9422F89947B6146002.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A609E97AC39E3F53678C0C9422F89947B6146002.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 07:37:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:fb:b8:bb:98:df:1b:af:8a:69:11:60:48:31:0b:32:03:a1:f6:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A609E97AC39E3F53678C0C9422F89947B6146002
        Validity
            Not Before: Dec 14 19:12:29 2025 GMT
            Not After : Dec 13 19:17:29 2026 GMT
        Subject: CN=10E8D5C118DAA2D89F4826B9A60D08CA92174AFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:1f:59:7f:e7:57:89:41:9f:b5:35:95:c4:eb:
                    cd:3b:47:45:55:a9:bf:2b:93:d3:16:a0:59:48:fa:
                    6f:2e:04:75:b6:5f:cb:2d:b7:ba:72:57:47:6f:4e:
                    ad:fa:2c:df:d0:59:93:79:dc:f9:08:5d:6d:d0:1d:
                    c2:eb:1a:67:f6:e6:47:a0:91:8c:ff:eb:29:80:2a:
                    06:12:49:6c:b4:74:3a:1d:64:59:f7:81:15:ee:a7:
                    a8:cc:42:31:e2:56:de:a1:91:02:16:05:e3:fe:a7:
                    f8:8e:dc:98:84:3d:6b:d8:b2:1c:51:ae:25:b7:9f:
                    ad:d8:5c:20:79:34:78:09:d4:5c:b2:43:ba:14:aa:
                    56:95:9b:37:b1:10:2a:36:0e:3c:57:c6:53:34:90:
                    59:d3:b2:f4:01:76:f8:09:75:1b:3a:02:bf:33:0c:
                    04:51:96:86:f1:f4:25:f7:fe:d2:53:e8:d8:be:06:
                    2e:48:76:c4:44:8d:90:6b:b0:10:b2:4f:99:04:74:
                    47:e5:db:6c:0a:3d:7f:84:c6:0b:99:7a:b9:0c:eb:
                    ea:f9:82:c0:3b:02:c6:a9:90:40:dd:e8:dd:37:b1:
                    d6:fb:05:89:4b:33:07:f0:a1:87:40:29:c9:de:85:
                    b6:66:47:3c:a0:db:05:07:71:e0:0b:57:70:77:2a:
                    a4:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:E8:D5:C1:18:DA:A2:D8:9F:48:26:B9:A6:0D:08:CA:92:17:4A:FD
            X509v3 Authority Key Identifier:
                keyid:A6:09:E9:7A:C3:9E:3F:53:67:8C:0C:94:22:F8:99:47:B6:14:60:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.avsisp.com/repo/AVSISP/0/A609E97AC39E3F53678C0C9422F89947B6146002.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A609E97AC39E3F53678C0C9422F89947B6146002.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.avsisp.com/repo/AVSISP/0/326131343a373538333a6230303a3a2f34302d3430203d3e20323130343634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7583:b00::/40

    Signature Algorithm: sha256WithRSAEncryption
         b5:e2:9b:20:ad:0a:4a:b8:a6:ec:d1:5d:eb:40:7d:ec:90:0f:
         0b:6e:89:99:f6:ab:c1:ab:fc:9c:a0:60:87:97:dd:e4:0b:f4:
         9a:d1:ab:1a:52:f3:97:62:86:8d:ae:96:f1:2d:6b:12:6b:14:
         80:16:0f:a8:c6:5e:3f:3c:e4:d5:49:72:bf:b1:d7:3e:48:00:
         7f:64:35:c8:5d:d1:58:5d:a0:94:fd:1a:6d:bc:47:5b:78:f0:
         c1:04:a7:15:26:81:31:03:27:3f:f6:34:46:5b:5f:b2:5b:5d:
         c6:42:5a:1e:f7:24:06:15:5d:90:47:bd:9d:19:8d:21:01:f0:
         ab:3b:c2:bc:46:09:3a:79:c4:66:94:21:34:a2:25:94:7c:9c:
         82:c3:20:c2:be:54:05:e4:cb:97:fa:ad:bd:bb:c8:67:42:99:
         6f:2c:e4:31:03:7c:f3:33:90:35:4b:7e:87:8f:53:56:71:d0:
         1e:b9:77:03:df:7a:22:ec:85:17:f3:41:92:61:bb:82:71:ed:
         aa:9e:69:0b:5a:19:d5:5d:53:77:3c:57:b4:61:ad:df:26:ce:
         32:8c:ec:71:21:c1:92:66:bf:ef:0d:37:3d:62:6a:77:95:81:
         c5:0a:14:96:9d:50:8e:75:66:4d:32:a6:91:13:db:11:18:88:
         03:b9:21:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 14:06:24 2025 by rpki-client