This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/323630323a663932613a613437363a3a2f34382d3438203d3e20323135313732.roa
File:                     323630323a663932613a613437363a3a2f34382d3438203d3e20323135313732.roa (raw, json)
Hash identifier:          ZJcY5ZQCl3UQTw0Ssz2Tf/Vt1Fzb/TisP8Zwf+FRylE=
Subject key identifier:   D4:04:79:B1:0F:46:26:46:54:4F:EC:B7:51:05:AE:30:71:EF:F5:9F
Certificate issuer:       /CN=a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d
Certificate serial:       5F2914506CE7C05F3544B934D220D12AFE85DEE4
Authority key identifier: DE:F9:CF:6D:4F:F8:42:24:03:A0:B6:5E:13:9A:B5:3C:60:8B:92:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/323630323a663932613a613437363a3a2f34382d3438203d3e20323135313732.roa
Signing time:             Sun 21 Dec 2025 14:55:55 +0000
ROA not before:           Sun 21 Dec 2025 14:50:55 +0000
ROA not after:            Sun 20 Dec 2026 14:55:55 +0000
asID:                     215172
IP address blocks:        2602:f92a:a476::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/DEF9CF6D4FF8422403A0B65E139AB53C608B9212.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/DEF9CF6D4FF8422403A0B65E139AB53C608B9212.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 24 Dec 2025 05:42:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:29:14:50:6c:e7:c0:5f:35:44:b9:34:d2:20:d1:2a:fe:85:de:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d
        Validity
            Not Before: Dec 21 14:50:55 2025 GMT
            Not After : Dec 20 14:55:55 2026 GMT
        Subject: CN=D40479B10F462646544FECB75105AE3071EFF59F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:38:3b:3c:c1:43:0c:5a:7e:ea:f5:4f:cc:53:
                    a3:c5:cb:63:cf:43:b0:c4:20:71:29:24:e0:42:6c:
                    b8:7e:ae:90:7f:45:e0:ec:04:1a:3a:73:98:04:0d:
                    cd:cd:3f:09:8c:5e:e0:28:05:05:be:fe:09:fa:ab:
                    d4:6c:7a:fe:cf:82:2d:69:cf:e8:81:fd:ba:38:53:
                    d1:aa:76:85:6a:14:26:b7:24:63:95:aa:ca:e5:4e:
                    c3:19:d5:3d:fa:12:8c:16:4f:3b:3b:7d:28:66:fe:
                    40:75:0d:8f:5b:b2:7b:01:b8:e7:1d:0d:24:b3:98:
                    ae:29:80:e3:a9:5b:05:3c:45:52:9c:d2:a2:20:4d:
                    fa:5a:4d:47:bf:31:df:20:8f:81:30:e6:df:c9:56:
                    82:43:dc:d8:03:b9:fc:1e:51:8c:20:27:ac:b5:6d:
                    8e:3c:36:47:e7:d9:d2:54:a4:4e:50:55:06:ad:7b:
                    74:c1:2c:f2:a5:c8:a1:76:6a:fd:66:bf:06:4c:91:
                    a6:dc:57:01:31:2e:66:c6:45:bb:71:45:5f:70:ea:
                    b3:5c:8d:42:fc:7d:c0:96:75:33:f0:c9:c7:0f:a6:
                    ea:2c:ee:0d:de:63:87:11:f4:cf:67:80:61:d8:1e:
                    f0:ef:65:ce:a0:cd:ee:14:b9:60:b9:0d:05:9d:cb:
                    48:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:04:79:B1:0F:46:26:46:54:4F:EC:B7:51:05:AE:30:71:EF:F5:9F
            X509v3 Authority Key Identifier:
                keyid:DE:F9:CF:6D:4F:F8:42:24:03:A0:B6:5E:13:9A:B5:3C:60:8B:92:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/DEF9CF6D4FF8422403A0B65E139AB53C608B9212.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/323630323a663932613a613437363a3a2f34382d3438203d3e20323135313732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f92a:a476::/48

    Signature Algorithm: sha256WithRSAEncryption
         52:09:77:f7:c5:74:bb:e6:d0:ce:4f:4c:fc:50:cf:bd:38:c2:
         87:a9:2c:57:d3:8e:d5:33:f6:5d:0d:61:42:2b:c6:e2:2f:ab:
         c7:07:4c:56:48:e5:82:40:4e:f4:d3:62:40:70:b1:00:c5:be:
         c9:12:c3:62:9a:9a:e4:fd:1d:af:06:ce:a7:dc:05:dd:92:2c:
         eb:5b:bb:fe:4f:e5:f2:b4:25:19:88:4f:80:30:b6:e8:eb:6a:
         bf:79:ba:46:d3:fd:56:3e:ce:19:75:2d:8d:c3:96:ee:71:dc:
         c3:25:bf:5d:92:fa:d4:d8:51:59:81:1c:65:03:13:ee:38:17:
         2b:fa:a2:e0:c7:4c:40:c6:79:1b:4b:33:10:d5:c5:ee:39:07:
         a1:71:5b:84:09:cb:71:c7:6c:68:54:ec:f0:3a:1c:2b:35:53:
         1c:69:41:3d:33:76:8b:5b:e1:fe:5e:d0:a3:a5:8f:9b:d2:32:
         41:52:2f:72:8e:c1:3b:b5:09:d4:28:96:a8:16:5d:07:72:dd:
         05:aa:a5:90:26:8c:0d:c8:d0:66:eb:23:67:15:60:43:d8:2a:
         10:b5:a0:17:64:7e:db:00:70:e2:dd:eb:b9:2c:3d:49:00:56:
         4a:1a:e0:d2:ec:33:7c:6c:51:11:a7:71:85:f3:96:f6:eb:63:
         30:cc:9c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 12:35:31 2025 by rpki-client