This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.avsisp.com/repo/AVSISP/0/326131343a373538333a6430303a3a2f34302d3430203d3e20323130343634.roa
File:                     326131343a373538333a6430303a3a2f34302d3430203d3e20323130343634.roa (raw, json)
Hash identifier:          ce8Nm82ycPW3eHRXTUdgrZjIqlZVJYRklHxCULXihlk=
Subject key identifier:   8C:65:6A:A5:E3:C5:3C:26:E4:3E:A5:BB:0A:69:83:D5:9F:45:CC:ED
Certificate issuer:       /CN=A609E97AC39E3F53678C0C9422F89947B6146002
Certificate serial:       4E602C307FD81130B1639248C0955BDF14148FB9
Authority key identifier: A6:09:E9:7A:C3:9E:3F:53:67:8C:0C:94:22:F8:99:47:B6:14:60:02
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A609E97AC39E3F53678C0C9422F89947B6146002.cer
Subject info access:      rsync://rpki.avsisp.com/repo/AVSISP/0/326131343a373538333a6430303a3a2f34302d3430203d3e20323130343634.roa
Signing time:             Sun 14 Dec 2025 19:17:50 +0000
ROA not before:           Sun 14 Dec 2025 19:12:50 +0000
ROA not after:            Sun 13 Dec 2026 19:17:50 +0000
asID:                     210464
IP address blocks:        2a14:7583:d00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.avsisp.com/repo/AVSISP/0/A609E97AC39E3F53678C0C9422F89947B6146002.crl
                          rsync://rpki.avsisp.com/repo/AVSISP/0/A609E97AC39E3F53678C0C9422F89947B6146002.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A609E97AC39E3F53678C0C9422F89947B6146002.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 07:37:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:60:2c:30:7f:d8:11:30:b1:63:92:48:c0:95:5b:df:14:14:8f:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A609E97AC39E3F53678C0C9422F89947B6146002
        Validity
            Not Before: Dec 14 19:12:50 2025 GMT
            Not After : Dec 13 19:17:50 2026 GMT
        Subject: CN=8C656AA5E3C53C26E43EA5BB0A6983D59F45CCED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:9c:96:96:e8:c0:5e:30:0c:79:01:5f:ef:1a:
                    bb:30:11:fb:56:c8:8f:51:41:64:7b:a9:7f:8d:03:
                    d3:54:e1:8e:9f:4e:fb:ad:42:0e:a8:15:22:f3:83:
                    8a:12:79:b0:0f:69:aa:94:78:e5:7d:3b:e9:50:97:
                    2e:5c:98:39:c3:32:bb:99:ea:18:e1:81:95:43:a5:
                    7d:3c:32:a6:a8:3f:96:00:33:b9:81:23:7e:3c:b7:
                    4e:16:0f:b8:52:92:2c:e0:e3:38:1d:b5:33:ae:79:
                    bc:4e:c1:16:ed:04:38:5b:77:62:c9:44:0d:c3:d9:
                    be:96:c6:94:33:5c:1a:e7:d6:00:00:be:fa:08:19:
                    c3:db:45:8e:99:71:6a:74:be:88:89:2e:95:44:b0:
                    6f:02:8f:35:7f:3d:79:ba:5a:1e:04:a2:30:f4:e6:
                    14:d9:25:df:dc:4b:86:9b:5e:e5:31:38:45:24:b4:
                    94:1e:f4:6f:fa:31:a5:a2:ee:32:21:d0:8b:46:1a:
                    6f:e1:e7:83:f5:9d:24:b5:88:5f:d7:47:e2:50:1a:
                    d6:e7:45:a9:c3:75:7a:39:f8:bb:67:07:4d:3b:a4:
                    68:60:2f:b4:b3:82:c7:c2:fa:74:60:7d:48:f6:17:
                    48:24:23:7d:81:aa:40:00:5c:6c:c4:25:0b:3b:1d:
                    61:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:65:6A:A5:E3:C5:3C:26:E4:3E:A5:BB:0A:69:83:D5:9F:45:CC:ED
            X509v3 Authority Key Identifier:
                keyid:A6:09:E9:7A:C3:9E:3F:53:67:8C:0C:94:22:F8:99:47:B6:14:60:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.avsisp.com/repo/AVSISP/0/A609E97AC39E3F53678C0C9422F89947B6146002.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A609E97AC39E3F53678C0C9422F89947B6146002.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.avsisp.com/repo/AVSISP/0/326131343a373538333a6430303a3a2f34302d3430203d3e20323130343634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7583:d00::/40

    Signature Algorithm: sha256WithRSAEncryption
         59:dd:ca:4a:86:dc:99:13:8b:7b:e7:1f:ed:10:51:26:de:82:
         83:71:5e:0d:1e:e6:be:24:5e:64:e8:8f:2c:6a:97:01:ce:36:
         e0:7c:c9:57:bd:39:62:2c:0c:64:de:ae:5e:91:67:01:ac:91:
         96:dc:8b:c0:da:12:16:84:de:11:21:1a:b0:2c:59:aa:7d:ec:
         24:14:e7:d2:ec:f3:68:64:09:da:4b:31:ee:26:80:54:c5:ce:
         d9:fb:dd:58:ec:e3:2b:d9:e6:1a:f4:58:fe:07:09:1b:e3:39:
         17:b8:6c:50:fc:03:4a:73:47:84:f8:ea:4b:2d:72:b9:f1:8f:
         9d:6e:f1:83:b6:46:86:18:1c:92:a4:ae:95:a2:3e:b7:ba:67:
         f9:ea:11:00:75:ee:db:bc:35:86:df:4f:74:42:d8:4c:33:4d:
         e0:c5:19:fb:08:0f:47:18:ce:86:10:14:fb:cf:f4:9a:64:86:
         75:86:3e:fb:e3:0e:d2:c9:c1:f4:71:96:1c:30:6f:13:09:4a:
         9c:60:9c:2f:a4:4e:c4:b6:0c:77:74:72:a9:f6:ec:df:c2:18:
         18:b5:b0:e8:a0:1f:e9:d9:78:23:a4:23:56:3d:99:a2:12:4d:
         de:2c:03:78:f2:f3:3e:2e:31:c4:ce:5d:59:9e:c2:5b:76:dc:
         e7:9a:cf:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 14:06:24 2025 by rpki-client