This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a33623a353a3a2f36342d3634203d3e20333939313538.roa
File:                     326130303a646438303a33623a353a3a2f36342d3634203d3e20333939313538.roa (raw, json)
Hash identifier:          M1tfK2ByB0kfpuJlwgWaX4WIre7+q6vARlVaQ03RD5I=
Subject key identifier:   5F:1E:10:41:A3:0A:9B:E6:D5:F7:69:E3:76:9C:9F:96:28:0C:44:A3
Certificate issuer:       /CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Certificate serial:       7955729FF0262D007945205A58309277A0E14048
Authority key identifier: EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a33623a353a3a2f36342d3634203d3e20333939313538.roa
Signing time:             Sat 08 Nov 2025 11:14:32 +0000
ROA not before:           Sat 08 Nov 2025 11:09:32 +0000
ROA not after:            Sat 07 Nov 2026 11:14:32 +0000
asID:                     399158
IP address blocks:        2a00:dd80:3b:5::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:55:72:9f:f0:26:2d:00:79:45:20:5a:58:30:92:77:a0:e1:40:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
        Validity
            Not Before: Nov  8 11:09:32 2025 GMT
            Not After : Nov  7 11:14:32 2026 GMT
        Subject: CN=5F1E1041A30A9BE6D5F769E3769C9F96280C44A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d5:b5:a5:bd:f1:2a:a1:70:1c:e7:2f:3c:98:
                    9f:06:8e:30:66:80:60:5a:7c:72:26:87:5a:35:f5:
                    32:a1:4c:00:33:48:93:f8:71:ed:31:26:e9:26:0a:
                    39:e2:9c:36:21:44:39:9c:74:96:c0:4f:50:ca:d6:
                    b3:39:3f:3f:98:21:33:61:42:a0:85:b9:5d:b6:73:
                    c6:96:7b:f6:16:64:af:68:1d:8e:31:c5:28:f6:2f:
                    68:e9:46:aa:b2:c8:5d:d3:22:49:b2:83:bd:c6:46:
                    94:20:1f:a4:58:e5:42:ae:b5:ce:c0:9e:f9:b8:85:
                    a9:3e:92:9a:d0:49:da:8e:90:0d:65:0c:50:ff:d5:
                    3d:47:f8:79:92:45:c7:dd:9c:c4:92:cc:df:2d:0f:
                    17:53:0d:3b:40:79:6e:b0:43:8a:02:5e:83:35:98:
                    74:96:8a:93:3e:29:32:d5:91:37:7c:f7:b4:1b:99:
                    06:7c:f0:60:6a:30:38:07:9e:5c:b1:de:bc:52:7b:
                    f2:c0:0a:3c:79:55:54:7b:2b:87:c2:1b:eb:20:39:
                    ac:d9:ac:ff:35:c4:58:04:c4:22:b1:54:4d:d7:30:
                    db:5b:06:21:32:af:78:04:62:97:fb:5e:68:41:18:
                    97:04:99:56:92:e9:3d:bf:46:71:2b:05:e2:d0:fd:
                    cb:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:1E:10:41:A3:0A:9B:E6:D5:F7:69:E3:76:9C:9F:96:28:0C:44:A3
            X509v3 Authority Key Identifier:
                keyid:EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a33623a353a3a2f36342d3634203d3e20333939313538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a00:dd80:3b:5::/64

    Signature Algorithm: sha256WithRSAEncryption
         3a:6a:95:f8:ec:a2:ac:99:7d:b0:4d:c3:3e:46:8b:27:6b:a9:
         6a:82:27:bf:55:5e:9d:d3:21:be:b1:45:87:72:b3:17:a0:63:
         99:ae:fb:85:ba:00:c2:02:1e:95:0e:9b:f0:e6:cc:f8:7b:cb:
         02:4f:32:35:e7:69:4a:80:19:35:88:f4:1e:e9:95:3e:97:f1:
         28:5c:a5:95:a6:02:ed:68:08:12:36:cd:01:b9:e4:ae:3e:3c:
         09:89:28:f4:cc:48:d3:a1:f4:f1:c9:4d:12:17:c5:cb:b6:87:
         d0:52:a0:5e:ae:c7:0f:5d:9b:a8:2a:28:5d:cf:a9:09:78:60:
         90:26:09:95:fe:3d:39:09:5d:08:1e:85:30:ed:7f:72:b9:11:
         b4:56:a8:1f:c8:91:d4:01:a4:b2:15:86:b0:cb:a2:c0:a4:7f:
         33:0d:92:ca:21:79:dc:ae:68:71:40:5b:b5:0c:f5:be:66:95:
         84:7c:e4:ed:9d:c9:2a:eb:fb:59:31:ac:00:c3:3b:90:0e:3f:
         c0:aa:a7:0b:65:7b:c7:b9:8a:05:ab:ad:01:29:2c:ac:4a:f8:
         66:8d:84:21:d5:f1:a8:bb:7e:84:45:2a:60:cb:9b:25:1d:6d:
         f9:06:77:2d:19:fb:e2:17:8d:22:d4:03:9e:17:d6:34:c9:a7:
         42:b5:d7:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:56:11 2025 by rpki-client