This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/326131313a663263303a666665303a3a2f34382d3438203d3e20323134373439.roa
File:                     326131313a663263303a666665303a3a2f34382d3438203d3e20323134373439.roa (raw, json)
Hash identifier:          1GvfKtWMgom1LeK1xMf1awTIi3U4xQIJrbQco2SMjvs=
Subject key identifier:   FE:04:AB:62:7E:0C:75:7B:8F:D1:76:56:45:89:07:63:07:B8:64:33
Certificate issuer:       /CN=2B3B97334DA06978185DAC76A2F3EA3585E8231E
Certificate serial:       7D94732560BBBCE4963CDC42A956E71891DF532B
Authority key identifier: 2B:3B:97:33:4D:A0:69:78:18:5D:AC:76:A2:F3:EA:35:85:E8:23:1E
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/2B3B97334DA06978185DAC76A2F3EA3585E8231E.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/326131313a663263303a666665303a3a2f34382d3438203d3e20323134373439.roa
Signing time:             Sun 23 Nov 2025 14:36:49 +0000
ROA not before:           Sun 23 Nov 2025 14:31:49 +0000
ROA not after:            Sun 22 Nov 2026 14:36:49 +0000
asID:                     214749
IP address blocks:        2a11:f2c0:ffe0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/2B3B97334DA06978185DAC76A2F3EA3585E8231E.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/2B3B97334DA06978185DAC76A2F3EA3585E8231E.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/2B3B97334DA06978185DAC76A2F3EA3585E8231E.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 16:02:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:94:73:25:60:bb:bc:e4:96:3c:dc:42:a9:56:e7:18:91:df:53:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B3B97334DA06978185DAC76A2F3EA3585E8231E
        Validity
            Not Before: Nov 23 14:31:49 2025 GMT
            Not After : Nov 22 14:36:49 2026 GMT
        Subject: CN=FE04AB627E0C757B8FD176564589076307B86433
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:8f:6e:2b:7a:09:42:4b:c7:2f:02:25:2e:4e:
                    11:41:96:2e:e2:f2:08:06:d0:95:79:6d:b6:b4:e4:
                    92:59:22:d3:35:4b:5a:66:a6:20:e1:22:a6:33:2f:
                    f3:5c:66:10:3a:8a:61:f2:ff:cd:41:30:ad:c9:81:
                    6f:73:c3:26:1b:ad:50:2d:1a:58:d6:7a:2a:75:63:
                    c8:f7:a2:b5:30:53:93:2b:b2:01:f8:9b:14:52:7d:
                    36:6f:a0:34:15:af:64:4b:3d:cf:72:56:81:f4:a3:
                    da:cb:7b:58:cd:05:b7:41:a7:17:48:fc:b3:c7:75:
                    b2:4f:c4:a5:f9:bf:13:34:3f:0c:38:9b:1a:29:fe:
                    ac:5d:91:f4:e9:a3:9c:b8:73:34:3b:ea:19:91:10:
                    8d:fc:fa:f7:3b:c3:ef:d4:4d:44:6a:ed:29:65:e6:
                    d2:f2:11:d7:6c:67:f1:c5:3b:c7:c1:48:3b:43:26:
                    c7:3b:a1:09:3a:39:c4:7c:53:d1:4b:d2:ae:37:56:
                    5f:2f:f3:c8:4b:f9:b3:53:e3:d2:bf:8e:78:4b:ed:
                    a9:7a:2d:7a:48:f0:a6:0e:70:c0:f1:34:d1:34:bc:
                    e2:c8:12:3d:8c:dc:d5:17:30:97:1c:fe:5a:f7:2e:
                    4c:9e:cd:f3:dc:3d:de:ad:0e:33:a9:6f:85:65:ec:
                    2d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:04:AB:62:7E:0C:75:7B:8F:D1:76:56:45:89:07:63:07:B8:64:33
            X509v3 Authority Key Identifier:
                keyid:2B:3B:97:33:4D:A0:69:78:18:5D:AC:76:A2:F3:EA:35:85:E8:23:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/2B3B97334DA06978185DAC76A2F3EA3585E8231E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/2B3B97334DA06978185DAC76A2F3EA3585E8231E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/326131313a663263303a666665303a3a2f34382d3438203d3e20323134373439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:f2c0:ffe0::/48

    Signature Algorithm: sha256WithRSAEncryption
         92:e3:6b:51:99:8e:e8:ab:8d:fd:ed:e5:c7:cf:7e:8a:a5:c5:
         34:29:08:e2:72:3a:aa:75:4b:e1:c0:a0:bf:8e:db:5c:9c:3f:
         e8:ec:2a:c2:01:68:51:9b:51:97:70:8e:8f:1e:c8:f4:ec:f7:
         88:14:d0:4f:43:48:e9:fa:46:f0:2b:f6:43:37:cf:35:5d:ce:
         5e:fd:dd:9e:41:dd:8f:54:57:5e:58:cb:5e:ac:15:a2:a1:05:
         fb:fb:57:07:de:f8:e0:8a:3c:58:93:57:4d:b0:8b:18:75:dd:
         92:df:d0:bc:2e:44:f0:41:f0:ec:82:bc:7e:6e:5c:f8:ea:e8:
         d3:63:01:73:01:3f:40:18:07:e9:64:de:bd:35:b7:f9:ed:71:
         f2:fe:67:25:0f:53:69:35:dc:3e:05:42:6c:3f:83:87:af:a9:
         a5:82:49:f5:13:18:58:8c:c3:86:20:44:ef:4f:48:d0:bc:50:
         9d:46:d2:44:48:e7:68:ca:4c:af:8f:a6:21:ce:e0:84:fb:4e:
         03:e6:56:d5:91:1a:a7:f4:f2:c4:9d:b5:0b:06:7d:de:59:82:
         41:bb:61:6b:12:9e:2e:f6:b4:fb:e9:29:04:37:b2:d2:9e:5f:
         98:15:5c:c0:19:2c:94:d2:1f:d9:68:69:74:48:26:53:b8:a4:
         06:ba:a8:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 05:43:57 2025 by rpki-client