This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo.rpki.space/repo/Netiface/1/32332e3137362e3138342e302f32342d3234203d3e203336363830.roa
File:                     32332e3137362e3138342e302f32342d3234203d3e203336363830.roa (raw, json)
Hash identifier:          +yEdWU5TNDjeghSMhaIK5rWO0od+p+kTCF0W9P9lb2I=
Subject key identifier:   22:FB:D3:EA:97:FA:EB:5D:E4:05:40:3C:C4:84:D7:DE:E0:C1:BE:0F
Certificate issuer:       /CN=2b75ca250fc63c6c47d032638bcecc49f4b5fb715ec6dfe8c8
Certificate serial:       204741BE464F88074F75EA06F2034F2C92D7ACA6
Authority key identifier: FB:F7:8E:5D:A5:B5:D6:AD:4E:2F:93:26:34:20:6B:13:3C:CB:FD:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/04b24da1-11ab-48ad-a03f-6b7832a569c8/2b75ca250fc63c6c47d032638bcecc49f4b5fb715ec6dfe8c8.cer
Subject info access:      rsync://repo.rpki.space/repo/Netiface/1/32332e3137362e3138342e302f32342d3234203d3e203336363830.roa
Signing time:             Mon 17 Nov 2025 10:40:59 +0000
ROA not before:           Mon 17 Nov 2025 10:35:59 +0000
ROA not after:            Mon 16 Nov 2026 10:40:59 +0000
asID:                     36680
IP address blocks:        23.176.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo.rpki.space/repo/Netiface/1/FBF78E5DA5B5D6AD4E2F932634206B133CCBFD25.crl
                          rsync://repo.rpki.space/repo/Netiface/1/FBF78E5DA5B5D6AD4E2F932634206B133CCBFD25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/04b24da1-11ab-48ad-a03f-6b7832a569c8/2b75ca250fc63c6c47d032638bcecc49f4b5fb715ec6dfe8c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/04b24da1-11ab-48ad-a03f-6b7832a569c8/04b24da1-11ab-48ad-a03f-6b7832a569c8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/04b24da1-11ab-48ad-a03f-6b7832a569c8/04b24da1-11ab-48ad-a03f-6b7832a569c8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/04b24da1-11ab-48ad-a03f-6b7832a569c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 07:18:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:47:41:be:46:4f:88:07:4f:75:ea:06:f2:03:4f:2c:92:d7:ac:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b75ca250fc63c6c47d032638bcecc49f4b5fb715ec6dfe8c8
        Validity
            Not Before: Nov 17 10:35:59 2025 GMT
            Not After : Nov 16 10:40:59 2026 GMT
        Subject: CN=22FBD3EA97FAEB5DE405403CC484D7DEE0C1BE0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:4c:94:83:29:5e:7c:58:8a:3d:36:88:fd:ac:
                    5e:24:f3:39:cf:c4:5d:9a:3e:cf:49:6d:fe:ed:7b:
                    dd:cf:49:ed:0a:e5:2d:32:66:1d:7e:93:8e:83:cf:
                    2a:eb:39:b2:4e:e2:70:3d:22:8d:e3:34:7f:9e:20:
                    f3:9c:78:e5:d4:d7:59:32:6b:4e:b2:e0:d6:bb:69:
                    bd:73:a7:4a:23:ea:7b:36:57:68:d7:bf:49:73:6b:
                    85:6f:33:9e:73:b6:53:7b:cf:ba:02:87:9d:9c:98:
                    22:07:97:34:39:1b:41:df:74:eb:cf:e2:79:5b:5e:
                    fc:19:49:ce:5f:f1:dc:41:75:4e:51:29:f6:c9:da:
                    69:98:b1:04:5f:7c:72:56:81:f6:d4:f5:e1:3f:7c:
                    e9:3c:e5:df:e2:53:b5:27:27:ea:61:6a:c7:e5:9f:
                    8e:b5:9e:64:5d:48:40:07:02:bf:ee:da:d7:61:56:
                    4b:61:47:a9:f4:1d:b4:47:ee:2c:8e:f1:98:2f:e0:
                    ec:2a:75:6e:db:9b:13:bc:d6:cb:65:86:2c:ec:fa:
                    c5:29:8c:45:6d:46:ce:fa:62:bc:ce:44:c8:66:3d:
                    ca:90:d1:27:0f:6e:d3:82:db:c0:cf:24:f0:da:ff:
                    ba:89:1a:af:52:e3:89:45:6b:4e:d4:8e:38:18:5d:
                    a7:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:FB:D3:EA:97:FA:EB:5D:E4:05:40:3C:C4:84:D7:DE:E0:C1:BE:0F
            X509v3 Authority Key Identifier:
                keyid:FB:F7:8E:5D:A5:B5:D6:AD:4E:2F:93:26:34:20:6B:13:3C:CB:FD:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo.rpki.space/repo/Netiface/1/FBF78E5DA5B5D6AD4E2F932634206B133CCBFD25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/04b24da1-11ab-48ad-a03f-6b7832a569c8/2b75ca250fc63c6c47d032638bcecc49f4b5fb715ec6dfe8c8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo.rpki.space/repo/Netiface/1/32332e3137362e3138342e302f32342d3234203d3e203336363830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.176.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:e2:06:ff:4f:95:84:a1:f3:13:fa:3c:2e:0a:dd:33:76:5b:
         b0:1e:84:5c:00:43:a9:92:51:8c:e2:be:77:90:6e:39:6f:7e:
         83:77:10:38:b1:59:9e:3c:6f:29:f2:62:c3:58:08:c6:46:32:
         43:98:9e:22:e7:bd:08:4d:e5:07:2d:9d:7c:39:83:61:bb:bf:
         78:b0:ec:f9:da:f9:c6:0f:8e:ae:5b:96:87:8a:62:30:a3:0a:
         86:15:c8:95:95:7b:c9:11:30:a9:85:fe:43:1e:d5:d1:5d:03:
         1e:c2:09:f4:8a:b8:80:1a:98:0a:f4:1a:e3:62:a5:36:a9:3c:
         bf:17:ea:dd:f9:0d:d4:13:01:6b:6b:0e:2d:29:28:22:7d:fa:
         3c:67:5d:27:b8:f4:08:68:b0:f8:85:be:3e:02:f0:7b:e6:e7:
         6e:0c:02:c9:0b:d4:74:f0:2a:95:22:89:e1:de:56:72:0c:06:
         52:5d:62:23:71:8a:9c:d2:45:47:c3:4c:c5:af:98:59:ef:3c:
         55:61:d1:1f:d7:c3:a3:c8:15:4e:20:a6:b3:ec:32:f1:5d:e3:
         83:ba:75:75:9f:12:50:0c:63:b1:8e:17:bd:a2:af:fd:f3:48:
         55:ef:c1:cb:4b:12:8c:9d:e4:80:92:56:77:71:c8:ee:ab:8d:
         3f:42:88:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:49:33 2025 by rpki-client