This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/326131343a373538303a356630303a3a2f34342d3438203d3e20323134333434.roa
File:                     326131343a373538303a356630303a3a2f34342d3438203d3e20323134333434.roa (raw, json)
Hash identifier:          Sn4KhjCntbzVPIkElLbIV6FaWF4/5ZJdJ7Dlp6E3QBA=
Subject key identifier:   DF:54:99:C9:40:CB:72:26:DD:19:39:47:60:AE:CC:49:86:C2:7C:14
Certificate issuer:       /CN=87A4C84D4366DBB15A9090A55AA2DCEBA8723945
Certificate serial:       4F5636280E74F0B8DA33EDC2472E371E7129A7D8
Authority key identifier: 87:A4:C8:4D:43:66:DB:B1:5A:90:90:A5:5A:A2:DC:EB:A8:72:39:45
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/326131343a373538303a356630303a3a2f34342d3438203d3e20323134333434.roa
Signing time:             Mon 28 Apr 2025 16:22:47 +0000
ROA not before:           Mon 28 Apr 2025 16:17:47 +0000
ROA not after:            Mon 27 Apr 2026 16:22:47 +0000
asID:                     214344
IP address blocks:        2a14:7580:5f00::/44 maxlen: 48
Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:56:36:28:0e:74:f0:b8:da:33:ed:c2:47:2e:37:1e:71:29:a7:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87A4C84D4366DBB15A9090A55AA2DCEBA8723945
        Validity
            Not Before: Apr 28 16:17:47 2025 GMT
            Not After : Apr 27 16:22:47 2026 GMT
        Subject: CN=DF5499C940CB7226DD19394760AECC4986C27C14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ef:ca:f5:c0:5e:30:89:3f:11:95:70:ec:78:
                    3a:ac:86:75:44:a0:a9:15:7f:a8:04:dd:69:24:2e:
                    9e:37:74:30:e6:23:51:7b:74:8c:8c:a9:73:5a:66:
                    3a:ab:4e:84:d6:98:70:f1:54:bd:d3:09:e0:c3:04:
                    bc:15:b2:72:45:37:8b:7e:26:b5:9e:63:ae:12:7a:
                    3c:e8:54:9d:4d:49:0a:a7:37:2d:ba:36:f9:98:5b:
                    d7:f6:1c:74:cf:ae:ca:9f:40:ac:84:22:74:66:22:
                    b7:a2:42:c1:8c:23:16:35:bb:ad:6e:e4:ca:4d:fe:
                    23:91:8a:6c:4c:09:ac:0a:89:50:7c:1c:7c:62:d3:
                    ee:b3:ae:f1:66:41:5b:4e:f6:fe:a1:cb:d9:e5:aa:
                    b4:db:4f:5c:86:bd:0e:ae:db:b2:c4:e8:7a:6c:bc:
                    e0:47:3c:b3:b9:e1:89:7f:a6:18:f3:d3:3a:70:df:
                    e0:97:7c:12:57:e3:bb:11:fa:7b:05:06:6e:47:5d:
                    72:cd:43:a0:46:5c:3f:91:bb:e9:3b:81:7b:97:42:
                    b2:a8:52:df:73:b9:10:55:1a:e3:22:66:e0:ae:d9:
                    16:8d:d6:82:c4:4c:ed:78:88:7a:a2:36:24:f4:9f:
                    7a:cd:20:4b:de:26:e2:c4:30:ff:e7:79:e3:06:b7:
                    9c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:54:99:C9:40:CB:72:26:DD:19:39:47:60:AE:CC:49:86:C2:7C:14
            X509v3 Authority Key Identifier:
                keyid:87:A4:C8:4D:43:66:DB:B1:5A:90:90:A5:5A:A2:DC:EB:A8:72:39:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/326131343a373538303a356630303a3a2f34342d3438203d3e20323134333434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7580:5f00::/44

    Signature Algorithm: sha256WithRSAEncryption
         9d:27:09:d0:fb:36:72:d6:6e:f0:85:84:4f:b8:2c:0e:90:cb:
         c2:b2:82:5b:9d:56:dc:46:a0:ca:22:a1:3b:6b:08:54:85:41:
         04:bb:10:37:3b:64:97:f2:d6:32:af:f3:6f:97:71:98:ed:00:
         c5:a8:c5:4a:8b:30:f1:e1:4c:c6:77:97:98:65:57:d7:f5:7a:
         d1:f3:1b:e7:7e:f1:e2:6f:e3:0d:82:40:3a:48:e2:5f:0c:07:
         6a:c6:0d:22:ec:ed:aa:e9:e1:73:ce:49:2c:cc:d8:9e:e7:72:
         33:da:b8:ab:6b:0a:a6:67:b7:1b:08:23:20:c0:64:b4:1e:cb:
         12:91:dd:6f:49:40:96:55:8a:d3:13:74:26:a9:ea:77:98:34:
         67:87:ae:53:6d:01:6d:d3:73:4a:87:56:10:fe:7e:b9:6e:96:
         53:cc:ee:7e:4d:85:76:aa:11:ca:e3:3f:d7:2e:07:39:47:70:
         57:c5:59:d4:bc:eb:23:1f:a7:40:21:19:e2:bc:37:06:9e:5d:
         03:e9:f5:79:94:ad:0d:ee:e2:31:b4:35:93:08:9c:3f:db:83:
         0f:db:6a:29:d0:e1:50:2e:34:a8:3f:6b:63:dd:a7:0e:08:37:
         c2:26:8b:db:ac:cc:66:4a:75:5c:f8:4b:54:82:db:88:aa:18:
         cf:ff:02:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----