This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538303a393130303a3a2f34302d3438203d3e20323136323939.roa
File:                     326131343a373538303a393130303a3a2f34302d3438203d3e20323136323939.roa (raw, json)
Hash identifier:          oSSqyLqVAW+f2WyJqFYwmR+I6s1qHBtpsY3OEgsYWrE=
Subject key identifier:   C6:C7:41:4B:66:A9:78:D0:38:19:78:79:EB:1F:3A:52:D1:4C:05:F7
Certificate issuer:       /CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A
Certificate serial:       77682B6B13C13BCB76453683D1418BBD6CC1264E
Authority key identifier: F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538303a393130303a3a2f34302d3438203d3e20323136323939.roa
Signing time:             Mon 15 Sep 2025 15:23:00 +0000
ROA not before:           Mon 15 Sep 2025 15:18:00 +0000
ROA not after:            Mon 14 Sep 2026 15:23:00 +0000
asID:                     216299
IP address blocks:        2a14:7580:9100::/40 maxlen: 48
Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:68:2b:6b:13:c1:3b:cb:76:45:36:83:d1:41:8b:bd:6c:c1:26:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A
        Validity
            Not Before: Sep 15 15:18:00 2025 GMT
            Not After : Sep 14 15:23:00 2026 GMT
        Subject: CN=C6C7414B66A978D038197879EB1F3A52D14C05F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:71:76:96:5a:9c:d6:73:95:6d:ae:96:14:cd:
                    21:91:83:c6:7c:06:30:c7:6b:cb:a1:c1:66:6a:25:
                    57:5a:7b:27:8e:4c:c0:07:cc:d4:cc:63:e9:a6:25:
                    a3:e7:f6:1f:e3:e6:29:90:52:16:ac:17:d4:7d:6f:
                    b0:ef:b0:67:02:7c:cf:e2:80:90:0f:a4:f8:d8:e2:
                    b7:97:3e:c9:18:14:bd:1d:90:f6:78:db:17:47:46:
                    73:35:60:9b:82:e1:b8:61:d8:35:ff:84:bb:25:ad:
                    36:a7:d9:a6:9c:1d:32:c1:79:1a:0e:3c:db:74:3c:
                    b8:34:71:af:c2:2d:83:fe:db:36:76:42:4b:34:81:
                    7b:fa:3c:fd:cd:bc:ab:ad:e0:4e:f8:a9:6a:40:ad:
                    6d:cd:18:07:a7:25:15:e7:0e:1f:78:0b:64:7b:9a:
                    e8:65:1d:bd:40:0c:e3:a5:55:a0:7e:33:0e:f4:ae:
                    8c:50:b5:b1:15:c0:a3:4b:d9:c7:a5:28:3d:b0:90:
                    60:b4:a5:a5:ab:28:37:36:52:d6:c0:0a:15:3b:10:
                    9c:01:54:15:39:3f:ce:00:b7:14:f4:8d:a6:a2:e2:
                    15:3a:59:81:07:e7:5e:79:6e:fa:a8:0f:27:1a:37:
                    bc:ad:8f:7c:7b:ee:f9:06:e0:49:57:03:a0:6b:5b:
                    06:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:C7:41:4B:66:A9:78:D0:38:19:78:79:EB:1F:3A:52:D1:4C:05:F7
            X509v3 Authority Key Identifier:
                keyid:F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/326131343a373538303a393130303a3a2f34302d3438203d3e20323136323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7580:9100::/40

    Signature Algorithm: sha256WithRSAEncryption
         4c:42:19:d0:8e:b0:ef:dd:36:9c:f3:ce:c9:e2:68:4d:cd:f5:
         ce:f4:d0:60:76:b7:ee:ac:c1:18:b1:59:04:33:d6:40:91:57:
         ff:85:50:a8:de:c6:5e:b4:3e:84:32:0f:64:b8:32:ff:59:c5:
         2f:be:1c:ac:51:a9:52:c0:1a:d8:a5:f8:55:26:94:a0:14:f9:
         8f:5b:75:9c:78:a9:65:a7:ce:12:cb:cc:af:77:a5:82:24:25:
         78:9c:55:9a:0d:91:46:91:51:bc:95:1f:c6:3f:ff:ae:78:6a:
         3d:ed:d5:64:99:30:42:d3:a5:26:6e:30:e9:3a:90:8b:71:0e:
         e6:de:73:df:c1:e8:e1:b5:52:e6:00:87:f9:b6:14:03:99:91:
         f1:5e:c9:bf:d2:45:a7:70:3d:b5:b7:d2:b1:42:b6:20:de:0f:
         2d:dd:ec:37:9c:06:85:df:53:d2:d6:24:c4:66:7c:55:75:a7:
         81:39:6a:ab:55:d3:ac:aa:0e:51:22:68:36:e2:42:10:66:76:
         68:e0:1e:e1:2c:cc:f8:9b:03:95:e7:ef:a7:bd:f9:63:14:18:
         2f:47:72:b8:a9:36:f2:52:52:05:a6:d5:8a:5e:76:7a:17:8e:
         0a:13:f8:07:23:a1:90:e5:b6:19:f2:d8:67:5b:dd:d0:4e:8c:
         7a:d8:0a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----