This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a62653a3a2f34382d3438203d3e20323033353334.roa
File:                     326130623a346530373a62653a3a2f34382d3438203d3e20323033353334.roa (raw, json)
Hash identifier:          So3Pk6jTs/qE2GESw5V+SnmDzUd+UmWas7cvSTpOJ5Q=
Subject key identifier:   F2:AC:0C:16:73:44:8C:46:75:7F:08:65:FC:E3:FF:04:5A:61:78:8A
Certificate issuer:       /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
Certificate serial:       13000DE99601C2E69B8E01C469F0A51AD53B1059
Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a62653a3a2f34382d3438203d3e20323033353334.roa
Signing time:             Thu 22 Jan 2026 11:27:22 +0000
ROA not before:           Thu 22 Jan 2026 11:22:22 +0000
ROA not after:            Thu 21 Jan 2027 11:27:22 +0000
asID:                     203534
IP address blocks:        2a0b:4e07:be::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 23:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:00:0d:e9:96:01:c2:e6:9b:8e:01:c4:69:f0:a5:1a:d5:3b:10:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
        Validity
            Not Before: Jan 22 11:22:22 2026 GMT
            Not After : Jan 21 11:27:22 2027 GMT
        Subject: CN=F2AC0C1673448C46757F0865FCE3FF045A61788A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ab:9b:e2:02:01:9d:28:d2:29:c3:17:29:fa:
                    f6:54:8b:98:fb:7a:a2:e8:a1:3b:65:fc:1d:ee:6e:
                    1f:ad:10:1c:34:2a:1c:75:62:e1:36:a2:70:46:56:
                    a9:34:0e:40:51:7c:ac:c0:86:3f:b7:d3:fc:48:4a:
                    b7:8c:c0:0b:8a:88:5d:20:16:a4:f7:12:6f:83:22:
                    66:c6:21:48:9f:9f:13:a1:43:21:5b:f6:9f:b8:d0:
                    7d:bb:bb:ad:cd:9d:a4:97:d0:e6:f6:2b:7f:8c:99:
                    19:b0:df:c2:b5:cd:40:7b:a6:50:ff:6b:73:9b:93:
                    2b:23:c8:9c:f2:f8:79:22:21:f0:04:bc:ee:0f:b9:
                    6c:f4:24:2f:aa:4b:6f:0b:f2:08:8a:69:45:20:4a:
                    b5:6a:d1:53:b0:52:99:2f:42:2f:66:44:92:37:d1:
                    57:45:8c:10:e9:3f:6b:6d:a3:87:d8:bc:3f:a0:c6:
                    70:40:d4:61:06:c7:71:86:00:72:e5:a4:06:e2:1e:
                    50:f6:15:57:e0:9c:5d:e0:de:c3:96:6e:57:34:b2:
                    c1:fb:e8:08:4d:e3:d5:36:0b:47:4f:89:3d:13:5d:
                    7c:aa:65:b2:66:9e:15:d5:b4:34:a5:a2:98:04:2d:
                    15:a7:43:a2:2b:8a:35:41:54:6e:17:95:14:a6:c2:
                    79:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:AC:0C:16:73:44:8C:46:75:7F:08:65:FC:E3:FF:04:5A:61:78:8A
            X509v3 Authority Key Identifier:
                keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a62653a3a2f34382d3438203d3e20323033353334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4e07:be::/48

    Signature Algorithm: sha256WithRSAEncryption
         49:9f:d5:3e:e6:a2:b4:ee:c4:bf:15:c4:5a:8a:88:5d:42:e0:
         85:8d:ba:20:39:bc:54:1d:35:fe:16:fc:b8:8f:61:60:f8:2f:
         c9:12:6f:d4:93:05:98:e8:15:78:9d:c3:29:f6:43:17:40:e2:
         42:54:b2:9c:53:2e:0e:4d:08:15:73:83:ce:03:8e:74:bc:68:
         f6:3d:0a:a5:2d:17:ea:24:fe:fd:94:89:45:cf:5a:f8:b2:8c:
         85:d0:8e:16:cc:2f:75:81:24:0c:6e:a2:f0:f8:11:7b:c1:d0:
         2c:57:4a:dc:27:0f:0e:10:6b:01:70:6c:37:2d:03:ab:22:27:
         cb:13:26:19:91:a8:67:23:28:5b:9c:c2:c7:ec:fd:c1:5a:73:
         a2:43:0d:36:fd:fb:28:c8:b8:82:ed:3a:94:83:9f:cb:db:e2:
         be:24:ac:9c:35:6d:33:51:47:d7:48:86:0c:c7:29:43:35:14:
         a0:02:83:f5:36:19:57:23:74:38:7b:c5:75:16:28:b6:d0:27:
         c0:ed:b9:3b:ff:86:cd:af:1e:5e:78:15:c4:b5:35:1b:2a:d6:
         07:17:84:a4:cd:50:29:a0:4a:29:81:3d:79:12:e2:84:4a:2a:
         a6:e9:92:ba:4a:ad:3b:76:72:fc:45:c1:86:7a:6f:cd:f7:66:
         bc:00:9a:7a
-----BEGIN CERTIFICATE-----
MIIFXDCCBESgAwIBAgIUEwAN6ZYBwuabjgHEafClGtU7EFkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1
Qzk3NzhCRjAeFw0yNjAxMjIxMTIyMjJaFw0yNzAxMjExMTI3MjJaMDMxMTAvBgNV
BAMTKEYyQUMwQzE2NzM0NDhDNDY3NTdGMDg2NUZDRTNGRjA0NUE2MTc4OEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxq5viAgGdKNIpwxcp+vZUi5j7
eqLooTtl/B3ubh+tEBw0Khx1YuE2onBGVqk0DkBRfKzAhj+30/xISreMwAuKiF0g
FqT3Em+DImbGIUifnxOhQyFb9p+40H27u63NnaSX0Ob2K3+MmRmw38K1zUB7plD/
a3ObkysjyJzy+HkiIfAEvO4PuWz0JC+qS28L8giKaUUgSrVq0VOwUpkvQi9mRJI3
0VdFjBDpP2tto4fYvD+gxnBA1GEGx3GGAHLlpAbiHlD2FVfgnF3g3sOWblc0ssH7
6AhN49U2C0dPiT0TXXyqZbJmnhXVtDSlopgELRWnQ6IrijVBVG4XlRSmwnmVAgMB
AAGjggJmMIICYjAdBgNVHQ4EFgQU8qwMFnNEjEZ1fwhl/OP/BFpheIowHwYDVR0j
BBgwFoAUUSTDH8+k6CxND24JowoEpVyXeL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvODFhNDQ1NjY0NThlNDU3OGI2N2VlZDMwNTNmODIwZjUvMS81MTI0QzMxRkNG
QTRFODJDNEQwRjZFMDlBMzBBMDRBNTVDOTc3OEJGLmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5LTBhYjcwZTQ4
MTViYi8wLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu
Y2VyMIGoBggrBgEFBQcBCwSBmzCBmDCBlQYIKwYBBQUHMAuGgYhyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvODFhNDQ1NjY0NThlNDU3OGI2N2Vl
ZDMwNTNmODIwZjUvMS8zMjYxMzA2MjNhMzQ2NTMwMzczYTYyNjUzYTNhMmYzNDM4
MmQzNDM4MjAzZDNlMjAzMjMwMzMzNTMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYI
KwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqC04HAL4wDQYJ
KoZIhvcNAQELBQADggEBAEmf1T7morTuxL8VxFqKiF1C4IWNuiA5vFQdNf4W/LiP
YWD4L8kSb9STBZjoFXidwyn2QxdA4kJUspxTLg5NCBVzg84DjnS8aPY9CqUtF+ok
/v2UiUXPWviyjIXQjhbML3WBJAxuovD4EXvB0CxXStwnDw4QawFwbDctA6siJ8sT
JhmRqGcjKFucwsfs/cFac6JDDTb9+yjIuILtOpSDn8vb4r4krJw1bTNRR9dIhgzH
KUM1FKACg/U2GVcjdDh7xXUWKLbQJ8DtuTv/hs2vHl54FcS1NRsq1gcXhKTNUCmg
SimBPXkS4oRKKqbpkrpKrTt2cvxFwYZ6b833ZrwAmno=
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:10:07 2026 by rpki-client