This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/1/326130663a316363363a623131303a3a2f34342d3438203d3e20313534313835.roa
File:                     326130663a316363363a623131303a3a2f34342d3438203d3e20313534313835.roa (raw, json)
Hash identifier:          HiD4J128Va7Q1AByzTLpog3O2WDr6yNZZYUXXuIMAwo=
Subject key identifier:   41:8A:76:D6:9D:81:CE:AA:77:BE:7E:93:30:17:ED:FC:DB:13:F8:E8
Certificate issuer:       /CN=C1317314602AA094CAB6580F04A72AE45EA86C7C
Certificate serial:       703F4D3CEA98E81418C26817B6432CB311C4BA71
Authority key identifier: C1:31:73:14:60:2A:A0:94:CA:B6:58:0F:04:A7:2A:E4:5E:A8:6C:7C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/C1317314602AA094CAB6580F04A72AE45EA86C7C.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/1/326130663a316363363a623131303a3a2f34342d3438203d3e20313534313835.roa
Signing time:             Fri 02 Jan 2026 19:42:12 +0000
ROA not before:           Fri 02 Jan 2026 19:37:12 +0000
ROA not after:            Fri 01 Jan 2027 19:42:12 +0000
asID:                     154185
IP address blocks:        2a0f:1cc6:b110::/44 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:3f:4d:3c:ea:98:e8:14:18:c2:68:17:b6:43:2c:b3:11:c4:ba:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1317314602AA094CAB6580F04A72AE45EA86C7C
        Validity
            Not Before: Jan  2 19:37:12 2026 GMT
            Not After : Jan  1 19:42:12 2027 GMT
        Subject: CN=418A76D69D81CEAA77BE7E933017EDFCDB13F8E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:33:a6:11:cf:34:27:27:29:a6:0a:3c:d2:8a:
                    6e:64:ff:47:c6:a7:be:4f:00:4d:da:9b:b1:25:18:
                    e3:9f:3e:a7:0c:02:49:34:82:2f:26:9d:e3:b3:96:
                    01:ae:d0:5e:77:e0:6a:62:03:e7:03:ec:4b:44:93:
                    1e:5c:84:61:e1:e2:21:7e:fe:4d:b9:dc:d4:43:6e:
                    f8:7e:1b:6f:b5:fb:b1:6c:45:91:32:52:3b:cc:ec:
                    14:50:54:46:2d:21:d6:de:30:d7:94:78:25:b0:b7:
                    77:42:2d:14:79:3b:b5:b6:6e:64:6d:d3:58:e5:46:
                    5c:4d:04:e7:f2:ae:f3:88:73:0c:42:97:23:d9:1b:
                    a8:e8:a7:cd:05:96:ed:69:42:7a:98:47:5b:ff:9b:
                    5d:83:a6:1f:fd:5d:dd:88:1a:78:8b:d2:da:32:f6:
                    c9:8b:84:dd:5b:8c:76:de:81:61:a5:5d:b7:1f:74:
                    e7:b4:75:f1:63:34:2d:c2:6e:0b:c2:b6:a5:37:3e:
                    0c:66:da:c9:99:20:c8:4e:fa:9d:b9:7a:47:cd:53:
                    19:9e:09:11:a3:50:c4:df:74:35:20:9d:5c:59:50:
                    e8:3a:1f:62:4a:84:78:64:38:cf:35:bd:b6:02:8f:
                    f1:10:b8:b9:75:4a:c2:4d:78:e1:44:48:2f:78:db:
                    4c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:8A:76:D6:9D:81:CE:AA:77:BE:7E:93:30:17:ED:FC:DB:13:F8:E8
            X509v3 Authority Key Identifier:
                keyid:C1:31:73:14:60:2A:A0:94:CA:B6:58:0F:04:A7:2A:E4:5E:A8:6C:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/1/C1317314602AA094CAB6580F04A72AE45EA86C7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/C1317314602AA094CAB6580F04A72AE45EA86C7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/1/326130663a316363363a623131303a3a2f34342d3438203d3e20313534313835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:1cc6:b110::/44

    Signature Algorithm: sha256WithRSAEncryption
         5f:79:e5:db:23:ba:3f:ae:88:5b:3c:ff:16:cc:41:2f:6a:a3:
         67:cc:10:bc:ce:4a:cf:26:4a:b5:ad:58:b0:40:b7:e6:ab:61:
         c3:88:70:00:11:ee:87:f0:0d:fe:29:0c:d4:99:50:55:47:9a:
         49:fc:4a:62:df:21:10:fc:28:04:9d:34:a2:b0:f2:42:66:7b:
         c7:54:dc:85:15:08:b0:27:46:68:0b:bf:0d:c0:17:a2:33:dc:
         44:e0:3a:f1:f1:88:cd:e5:31:4d:62:14:93:21:18:dc:7a:55:
         cc:47:24:6e:47:1a:4b:59:71:b6:14:85:3c:29:6a:02:14:e2:
         5e:bb:f5:cd:4b:9a:dd:62:f4:45:5e:c2:27:40:a5:7f:48:85:
         75:c0:30:24:5a:9c:a2:bc:99:8f:e5:c1:2c:79:68:70:bb:c8:
         aa:69:7e:96:e1:ca:a5:4c:61:a6:bd:12:88:ac:01:73:a6:9c:
         52:fc:d3:cf:ba:d0:fd:9d:14:7f:5b:cd:22:9d:5a:69:37:23:
         4e:c3:51:35:15:00:5d:9c:b7:68:8c:20:7b:aa:51:26:99:fb:
         76:43:46:fa:e3:e1:dc:df:6d:5e:95:ad:78:c8:e2:4f:fa:1b:
         ab:78:56:1e:3c:39:0e:80:b9:27:de:1c:b1:7e:fd:57:fc:90:
         80:bc:c8:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 11:45:05 2026 by rpki-client