This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/1/326130663a316363363a623130303a3a2f34342d3438203d3e20323034323131.roa
File:                     326130663a316363363a623130303a3a2f34342d3438203d3e20323034323131.roa (raw, json)
Hash identifier:          gG4OLYz2W+FDfcpf0Ne6iYS4jvh1IpEoTqvP0Xsj/PE=
Subject key identifier:   AE:3A:7E:D2:03:5A:F6:E1:32:D2:96:6F:F8:2E:FF:B9:36:A7:88:08
Certificate issuer:       /CN=C1317314602AA094CAB6580F04A72AE45EA86C7C
Certificate serial:       1EF42427C10FE4E9C755018946924E1EFA0D30
Authority key identifier: C1:31:73:14:60:2A:A0:94:CA:B6:58:0F:04:A7:2A:E4:5E:A8:6C:7C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/C1317314602AA094CAB6580F04A72AE45EA86C7C.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/1/326130663a316363363a623130303a3a2f34342d3438203d3e20323034323131.roa
Signing time:             Fri 02 Jan 2026 19:41:49 +0000
ROA not before:           Fri 02 Jan 2026 19:36:49 +0000
ROA not after:            Fri 01 Jan 2027 19:41:49 +0000
asID:                     204211
IP address blocks:        2a0f:1cc6:b100::/44 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:f4:24:27:c1:0f:e4:e9:c7:55:01:89:46:92:4e:1e:fa:0d:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1317314602AA094CAB6580F04A72AE45EA86C7C
        Validity
            Not Before: Jan  2 19:36:49 2026 GMT
            Not After : Jan  1 19:41:49 2027 GMT
        Subject: CN=AE3A7ED2035AF6E132D2966FF82EFFB936A78808
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:b2:4a:dd:90:72:d1:b5:92:67:23:c7:9e:a8:
                    8f:33:f1:91:cd:b5:b8:cb:3b:93:2d:48:56:99:6e:
                    41:7b:e0:3c:cd:8e:7e:e0:09:16:13:f3:ff:ea:d9:
                    51:82:9d:fe:d5:43:19:6b:71:ca:9b:63:56:bb:a0:
                    ff:df:69:cd:9d:72:78:ff:c7:a5:e3:2a:88:a6:7b:
                    bd:18:b2:c5:cd:e7:6e:37:bf:a8:5d:bb:81:24:2b:
                    54:98:b7:0c:a0:05:6b:38:a3:e7:85:36:cd:01:7a:
                    83:d9:b3:3e:47:b3:c3:db:6e:99:79:15:d1:8b:56:
                    c4:92:fd:5b:f1:f1:68:72:e5:de:a7:db:4e:a5:45:
                    fa:38:6c:04:ac:8f:62:61:17:24:83:ca:1b:09:30:
                    6c:c7:f5:91:30:ea:e8:42:12:07:b8:bc:da:06:7a:
                    25:cd:c2:8a:8c:f6:c6:25:5a:9a:a8:4b:4a:b8:43:
                    62:37:62:26:09:34:ff:23:ac:a6:0d:46:84:c0:e9:
                    eb:0f:61:53:0b:eb:0d:29:34:b3:47:22:7b:2a:4c:
                    c6:8d:77:fa:bb:f2:4b:f9:7a:43:1b:2f:91:30:43:
                    12:b1:3e:13:d2:30:f5:25:57:2d:41:39:fe:61:9f:
                    6c:f8:a8:b3:3b:58:a7:8b:55:05:d7:82:b1:c9:26:
                    de:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:3A:7E:D2:03:5A:F6:E1:32:D2:96:6F:F8:2E:FF:B9:36:A7:88:08
            X509v3 Authority Key Identifier:
                keyid:C1:31:73:14:60:2A:A0:94:CA:B6:58:0F:04:A7:2A:E4:5E:A8:6C:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/1/C1317314602AA094CAB6580F04A72AE45EA86C7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/C1317314602AA094CAB6580F04A72AE45EA86C7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/1/326130663a316363363a623130303a3a2f34342d3438203d3e20323034323131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:1cc6:b100::/44

    Signature Algorithm: sha256WithRSAEncryption
         30:65:04:49:f9:82:d4:8f:f3:03:1f:c5:7d:ab:12:55:6a:55:
         da:f7:fc:89:54:17:1c:b7:2a:2e:9f:69:6c:52:51:74:f8:ce:
         6c:4f:df:6f:f7:66:73:e4:c7:4f:4f:e1:6a:00:24:45:4b:cc:
         a7:f7:07:e9:19:5a:b4:80:2d:d4:f8:fb:3b:ba:8a:e2:04:8c:
         3b:45:02:c3:7e:2d:d0:63:09:18:f3:be:f8:19:61:03:51:b4:
         8c:54:a6:c0:e7:67:c6:75:5d:bc:46:fc:7f:6a:5e:0f:9f:5b:
         bf:38:a5:7b:8d:e7:45:05:76:e4:d1:f6:ba:e2:e9:57:76:dd:
         04:46:9a:90:25:a2:90:ec:23:4c:59:33:e2:4a:5d:54:ab:93:
         97:ff:1f:4a:fd:42:7b:aa:cf:71:b0:d8:56:d6:ed:6a:ac:46:
         da:0d:fb:e8:55:f8:d1:5e:00:c2:a7:71:fc:67:0c:20:50:29:
         66:54:28:b5:16:81:04:3d:ef:0d:db:82:1d:a0:83:25:bd:94:
         49:5a:bb:b1:78:24:10:8e:88:21:fc:d9:37:44:53:9a:61:b5:
         13:e1:d0:62:e7:fa:64:aa:74:ff:7c:08:7a:73:0c:a3:24:c9:
         26:9c:3a:f6:d1:89:ee:60:65:48:3b:df:44:4a:bd:6e:f1:18:
         7c:60:ca:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 11:48:42 2026 by rpki-client