This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a33663a36313a3a2f36342d3634203d3e20333939313638.roa
File:                     326130303a646438303a33663a36313a3a2f36342d3634203d3e20333939313638.roa (raw, json)
Hash identifier:          4gD5tlpH1T2DQA2xfknMy1vSPhgWqCp8rfnBswU7lqg=
Subject key identifier:   D0:7F:A1:16:0C:3B:48:E3:37:56:81:FD:1E:50:9F:94:FE:F5:D0:DA
Certificate issuer:       /CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Certificate serial:       0D13D7057FC1D508E1B3A2D3D8F94AE6BDB09250
Authority key identifier: EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a33663a36313a3a2f36342d3634203d3e20333939313638.roa
Signing time:             Sat 08 Nov 2025 13:14:34 +0000
ROA not before:           Sat 08 Nov 2025 13:09:34 +0000
ROA not after:            Sat 07 Nov 2026 13:14:34 +0000
asID:                     399168
IP address blocks:        2a00:dd80:3f:61::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:13:d7:05:7f:c1:d5:08:e1:b3:a2:d3:d8:f9:4a:e6:bd:b0:92:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
        Validity
            Not Before: Nov  8 13:09:34 2025 GMT
            Not After : Nov  7 13:14:34 2026 GMT
        Subject: CN=D07FA1160C3B48E3375681FD1E509F94FEF5D0DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a8:16:08:5b:3d:78:b8:dc:a3:0d:92:4a:46:
                    a8:58:ae:f5:2e:e2:5b:09:65:52:77:15:bc:28:76:
                    31:22:53:83:c6:f2:74:bc:ec:0b:fb:d8:58:49:47:
                    a1:7f:ca:39:82:22:af:2b:84:06:8d:28:d3:44:da:
                    7e:3a:93:26:c1:98:2a:46:c5:ac:5a:7d:3f:ea:70:
                    e9:2b:4a:5a:43:89:72:84:15:19:54:d0:81:b0:e5:
                    67:2c:e9:5d:24:1c:31:de:b5:01:9f:9b:21:4e:8b:
                    18:4d:02:7d:e9:06:c9:49:49:11:ab:28:3f:d3:8a:
                    88:01:5a:ad:00:2c:aa:97:99:5f:1c:c2:f8:aa:9c:
                    af:b9:8f:d5:65:b3:bb:58:ed:cb:46:af:83:89:42:
                    82:f3:f4:98:52:8d:11:d4:fe:c1:ac:c8:52:a9:97:
                    7b:ba:e4:56:06:a8:d8:36:60:39:f0:06:1b:ad:6c:
                    39:66:82:af:7b:cb:19:9f:7c:89:fd:bc:15:98:a5:
                    c8:48:4a:ae:62:9d:93:36:74:b8:0d:6a:7e:9b:94:
                    79:e8:6e:d2:66:99:7d:15:4e:70:57:51:0d:a7:cb:
                    17:7a:f8:12:fa:21:26:ed:03:18:a9:f8:44:3c:76:
                    77:74:8d:27:59:f6:bf:bc:1c:1c:be:23:1b:cb:77:
                    32:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:7F:A1:16:0C:3B:48:E3:37:56:81:FD:1E:50:9F:94:FE:F5:D0:DA
            X509v3 Authority Key Identifier:
                keyid:EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a33663a36313a3a2f36342d3634203d3e20333939313638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a00:dd80:3f:61::/64

    Signature Algorithm: sha256WithRSAEncryption
         8d:f8:45:98:00:71:ed:dd:c9:6a:60:25:e9:f3:18:30:8b:16:
         92:ee:42:5f:b0:06:b2:b3:4a:e6:7c:af:3e:7e:5d:8e:9a:75:
         ee:e3:5e:c8:c3:84:c6:b9:34:d4:3d:09:e2:1d:09:20:38:1d:
         e3:12:3d:cc:41:1e:45:a6:2c:41:36:7a:23:33:31:a9:1e:0c:
         3d:49:c0:b0:cc:31:58:d8:c6:39:80:b3:b3:87:13:d9:ef:a3:
         d5:48:45:cd:16:07:93:18:9f:a9:dd:70:78:d0:6e:d8:c5:2d:
         88:11:7f:6c:fa:42:e9:dd:8a:1a:76:ad:57:e5:ab:db:af:20:
         4e:06:74:62:6a:89:a7:8e:33:19:66:88:99:c4:24:d5:fe:6c:
         d1:fb:4d:87:09:96:6b:95:7e:40:b8:ce:58:f8:25:f0:d2:b1:
         87:7e:3f:0a:ef:f9:7b:bf:d8:cc:16:a1:b0:d1:89:f2:b2:19:
         e2:42:33:2e:5d:ba:2e:e7:c4:48:e9:3f:b3:00:5b:c5:f8:aa:
         33:fd:ae:45:a1:e8:dd:78:9b:76:dd:6e:18:c1:c9:5f:3d:c9:
         e3:7d:53:e9:b5:51:13:5c:f0:2f:01:83:28:58:c9:a7:d3:23:
         cf:36:03:56:c2:b7:3e:4e:36:de:14:d6:20:c8:69:95:14:4b:
         68:54:d2:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:55:50 2025 by rpki-client