This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a33653a363a3a2f36342d3634203d3e20333939313630.roa
File:                     326130303a646438303a33653a363a3a2f36342d3634203d3e20333939313630.roa (raw, json)
Hash identifier:          7cd96Vc2WOp97dr5Njb9RjRJdlub8yi/A0T/pHKckgg=
Subject key identifier:   35:3A:57:BF:43:40:01:91:F6:02:53:DA:5D:43:90:00:24:CA:8E:35
Certificate issuer:       /CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Certificate serial:       4DC0515C6FA3583E06B00F29A0D1F56499C5EE9E
Authority key identifier: EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a33653a363a3a2f36342d3634203d3e20333939313630.roa
Signing time:             Sat 08 Nov 2025 12:14:33 +0000
ROA not before:           Sat 08 Nov 2025 12:09:33 +0000
ROA not after:            Sat 07 Nov 2026 12:14:33 +0000
asID:                     399160
IP address blocks:        2a00:dd80:3e:6::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:c0:51:5c:6f:a3:58:3e:06:b0:0f:29:a0:d1:f5:64:99:c5:ee:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
        Validity
            Not Before: Nov  8 12:09:33 2025 GMT
            Not After : Nov  7 12:14:33 2026 GMT
        Subject: CN=353A57BF43400191F60253DA5D43900024CA8E35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5d:fc:14:4d:d8:20:12:4a:e0:16:83:10:64:
                    91:22:44:bf:80:fd:9a:6a:22:51:12:f7:e9:f5:d4:
                    74:2a:6b:dd:62:e6:c8:90:ae:5c:11:73:1c:bd:a0:
                    ad:31:75:53:13:72:9e:24:de:e5:6d:3a:e8:c5:e7:
                    03:34:e8:62:c3:eb:42:97:23:34:c8:6c:06:fc:f3:
                    58:be:34:5a:f6:ad:f0:ca:cd:40:c3:e2:c9:b6:1b:
                    8e:3a:f2:ac:67:29:03:f2:37:59:01:4a:a6:3a:b2:
                    35:c9:3f:c0:5c:bd:1e:ae:85:77:22:28:7f:10:af:
                    07:39:04:f1:97:9d:43:62:cc:f9:e2:5f:ab:43:b1:
                    ff:a2:99:ff:10:25:59:9b:47:b9:0a:dd:f0:5e:24:
                    57:43:15:c8:49:e9:f7:ad:83:89:80:25:77:ac:09:
                    86:a8:d4:b6:85:98:dc:2a:a5:b8:34:9d:ab:f6:ea:
                    33:9d:b9:40:5e:8a:30:cd:3c:60:84:f7:41:65:e5:
                    9d:a2:83:b8:56:db:00:35:19:b2:7f:08:4a:4f:14:
                    a8:17:1d:c5:78:a0:7c:80:72:82:43:d7:45:27:d5:
                    82:99:9c:b4:0d:b1:0f:c5:13:c5:25:8e:c7:fe:4a:
                    7d:65:52:61:dc:0e:6e:85:d9:b1:d0:6b:2f:80:e6:
                    6c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:3A:57:BF:43:40:01:91:F6:02:53:DA:5D:43:90:00:24:CA:8E:35
            X509v3 Authority Key Identifier:
                keyid:EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a33653a363a3a2f36342d3634203d3e20333939313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a00:dd80:3e:6::/64

    Signature Algorithm: sha256WithRSAEncryption
         38:95:c9:74:4b:1c:bc:b5:ff:79:b6:b3:c4:3a:76:3d:fb:2c:
         d6:29:c1:54:af:c2:70:66:46:0d:c0:68:96:b3:8d:96:60:bf:
         6d:3e:4a:ba:4c:f2:bb:16:c3:55:92:91:19:e3:21:ab:2c:47:
         5f:64:a5:83:8a:b4:68:79:c1:5e:ef:d2:41:f1:4a:d2:08:0a:
         2d:af:65:18:46:93:0b:8c:29:9e:f7:10:98:d8:f8:35:4d:ff:
         a6:95:1b:ac:f0:b7:3c:23:cc:29:ed:42:7d:aa:65:d7:c1:c3:
         94:54:01:82:86:08:25:60:37:7f:ea:70:1e:84:b5:f5:4b:cc:
         c0:10:be:e4:ad:c4:f0:b7:b1:24:1f:a1:29:f8:2b:b7:81:1a:
         cf:4a:89:a9:d9:ea:ed:9e:12:ea:08:c6:95:c3:53:35:75:cc:
         a9:a1:2c:b8:31:70:1c:36:d5:9d:d6:b4:49:2e:93:66:49:09:
         f2:61:b3:f5:26:5c:09:25:7c:06:e6:ce:3b:91:da:a5:87:6e:
         bd:7b:5c:b6:c5:55:2c:f5:1b:0d:66:f9:05:d5:41:a6:1f:92:
         f3:cd:a7:81:62:f9:5a:74:ce:38:ef:49:c5:71:63:f4:a3:79:
         01:59:d0:57:1b:28:7a:1f:1e:86:7b:df:fe:b3:e0:3a:b0:16:
         95:20:4c:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:55:38 2025 by rpki-client