This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/326130353a646663313a383130303a3a2f34302d3438203d3e20323131343331.roa
File:                     326130353a646663313a383130303a3a2f34302d3438203d3e20323131343331.roa (raw, json)
Hash identifier:          IJWnIfIqrQT/KRXbAy3Xfm9Y9DxNBR6JISgHxbdVPos=
Subject key identifier:   22:05:58:69:47:AC:39:62:E0:27:A0:58:35:64:F5:2C:DE:C4:EC:8B
Certificate issuer:       /CN=3C19D9EE5EB020A8652D685987FECF2A76BB0277
Certificate serial:       25731B08BEBD0B40F23A3AB240D5159187596A46
Authority key identifier: 3C:19:D9:EE:5E:B0:20:A8:65:2D:68:59:87:FE:CF:2A:76:BB:02:77
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/3C19D9EE5EB020A8652D685987FECF2A76BB0277.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/326130353a646663313a383130303a3a2f34302d3438203d3e20323131343331.roa
Signing time:             Mon 22 Dec 2025 17:17:59 +0000
ROA not before:           Mon 22 Dec 2025 17:12:59 +0000
ROA not after:            Mon 21 Dec 2026 17:17:59 +0000
asID:                     211431
IP address blocks:        2a05:dfc1:8100::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/3C19D9EE5EB020A8652D685987FECF2A76BB0277.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Dec 2025 03:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:73:1b:08:be:bd:0b:40:f2:3a:3a:b2:40:d5:15:91:87:59:6a:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C19D9EE5EB020A8652D685987FECF2A76BB0277
        Validity
            Not Before: Dec 22 17:12:59 2025 GMT
            Not After : Dec 21 17:17:59 2026 GMT
        Subject: CN=2205586947AC3962E027A0583564F52CDEC4EC8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:03:a2:c0:aa:ab:85:80:1a:a4:e1:17:fb:c2:
                    0f:a9:c6:16:03:dc:90:b2:de:2a:75:f8:22:f3:06:
                    33:17:f8:3b:a7:74:6e:ce:e2:76:ea:54:b7:4c:03:
                    91:28:da:f8:a1:9d:22:26:f8:8a:94:6f:c0:14:6f:
                    e5:c8:05:32:68:9e:ed:82:71:80:35:12:72:aa:26:
                    d5:f4:32:ac:29:cc:4b:53:39:16:3c:4d:6c:ca:36:
                    95:33:25:f0:54:2e:22:8b:a1:5c:c5:a9:2a:78:06:
                    e2:dd:1d:f3:e9:fb:bb:13:dc:d5:9c:d4:65:71:87:
                    06:14:41:6f:c7:b9:3d:73:f9:db:7b:80:2f:48:92:
                    5e:fb:26:38:71:4f:63:d7:c6:24:1f:e0:d1:e0:54:
                    44:7d:c0:91:eb:3d:87:d3:5b:b5:51:89:32:8a:3d:
                    7b:9b:4b:a9:a9:00:a7:cc:ca:b3:d5:bd:38:ba:b9:
                    22:05:8f:88:39:49:2b:3e:56:74:8d:27:d0:9b:b1:
                    cf:ef:fc:23:f5:26:79:12:51:44:3d:12:66:6c:ae:
                    1b:0d:50:18:2d:3d:73:1e:25:a2:ed:53:c9:f0:f9:
                    21:62:df:7c:00:74:0d:6d:ee:a1:1e:e7:70:15:68:
                    ce:3d:0a:b1:49:d2:4d:1a:16:99:42:1b:e4:a2:c6:
                    6b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:05:58:69:47:AC:39:62:E0:27:A0:58:35:64:F5:2C:DE:C4:EC:8B
            X509v3 Authority Key Identifier:
                keyid:3C:19:D9:EE:5E:B0:20:A8:65:2D:68:59:87:FE:CF:2A:76:BB:02:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/3C19D9EE5EB020A8652D685987FECF2A76BB0277.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/326130353a646663313a383130303a3a2f34302d3438203d3e20323131343331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:8100::/40

    Signature Algorithm: sha256WithRSAEncryption
         44:9c:42:3a:f4:c6:cd:16:b2:2d:ed:a9:41:63:48:f2:a6:c8:
         9f:ce:72:17:6d:d5:61:0d:c4:52:c3:e3:d4:65:1d:6a:3d:95:
         0f:39:e6:b9:4e:30:9f:35:5c:a2:ea:23:b7:00:7b:ce:0c:d4:
         44:2b:8d:53:9b:15:2d:46:f3:85:00:15:99:df:08:4a:3a:96:
         c5:da:7d:41:43:86:5c:99:ac:2e:a3:ec:c9:c6:07:b4:5c:e4:
         0a:07:12:72:17:af:25:41:72:8a:91:e8:67:8d:8b:d5:48:e2:
         b1:de:44:a4:95:2e:c5:bd:ab:05:ea:61:ca:f8:2b:63:a0:a6:
         b8:ed:a7:e4:31:9d:96:1b:00:f4:b4:ba:d3:09:7a:a0:87:e8:
         3a:1e:6e:32:e8:40:2b:50:cb:14:ad:60:57:e6:fb:a6:91:5a:
         49:55:64:d9:9c:f4:9b:a1:aa:d4:44:81:92:5d:a7:73:e0:8a:
         63:58:9f:63:39:6e:16:24:00:fb:05:b7:b0:47:c1:6d:ae:49:
         6a:90:07:f1:73:d5:a2:8f:c1:ce:6c:46:f3:e9:44:03:ad:ad:
         f8:dd:31:c1:56:97:16:16:c0:eb:df:23:89:a8:3e:f5:9b:81:
         1b:b0:68:56:7c:4a:7f:13:da:b0:d2:47:79:b9:7b:d0:2f:c3:
         c6:99:12:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 12:35:30 2025 by rpki-client