This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/326131343a373538313a313130303a3a2f34342d3438203d3e203339373533.roa
File:                     326131343a373538313a313130303a3a2f34342d3438203d3e203339373533.roa (raw, json)
Hash identifier:          IGLtteEBgCO2xx5IYUqP+uw67ctU4C6YlGR/MYSOOWU=
Subject key identifier:   11:45:94:F2:03:BA:1A:75:85:52:D1:B4:70:C8:17:39:BF:93:65:44
Certificate issuer:       /CN=30EC341CC59263F48799F70A95490826E78E6E11
Certificate serial:       09A337EA0DD82269C8CA9C52BF76B8579C403DE6
Authority key identifier: 30:EC:34:1C:C5:92:63:F4:87:99:F7:0A:95:49:08:26:E7:8E:6E:11
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/30EC341CC59263F48799F70A95490826E78E6E11.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/326131343a373538313a313130303a3a2f34342d3438203d3e203339373533.roa
Signing time:             Wed 12 Nov 2025 16:02:25 +0000
ROA not before:           Wed 12 Nov 2025 15:57:25 +0000
ROA not after:            Wed 11 Nov 2026 16:02:25 +0000
asID:                     39753
IP address blocks:        2a14:7581:1100::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/30EC341CC59263F48799F70A95490826E78E6E11.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 23:45:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:a3:37:ea:0d:d8:22:69:c8:ca:9c:52:bf:76:b8:57:9c:40:3d:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30EC341CC59263F48799F70A95490826E78E6E11
        Validity
            Not Before: Nov 12 15:57:25 2025 GMT
            Not After : Nov 11 16:02:25 2026 GMT
        Subject: CN=114594F203BA1A758552D1B470C81739BF936544
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e1:7b:e3:b4:6a:a6:83:4e:52:26:02:c7:79:
                    5a:c9:dd:6e:66:fd:1f:3e:6c:ec:be:a4:82:55:9f:
                    8a:dd:76:b8:79:77:be:2d:a7:4a:40:b5:f9:a2:de:
                    f5:82:3d:4b:b3:d0:66:93:eb:ab:d8:eb:44:1e:37:
                    82:9f:92:ac:d0:4f:de:0e:af:56:10:55:22:11:0d:
                    0d:0f:6e:5e:88:c3:b2:78:98:dd:ec:27:f8:ac:d0:
                    c6:75:16:cc:10:aa:56:03:16:06:ee:d9:8b:0c:d3:
                    c2:95:c1:68:6c:db:59:7f:bb:d9:8b:ce:6b:08:3f:
                    96:03:db:14:42:3d:9e:10:4b:5e:03:89:d3:2b:8b:
                    b5:53:44:84:2b:56:d7:df:23:a7:dc:56:11:5a:fc:
                    a4:92:5f:8f:3d:1f:97:c6:6f:6e:55:0d:b8:f3:a2:
                    f4:4a:9c:c3:6a:11:70:df:d6:ef:9b:26:0c:01:d5:
                    98:29:7f:05:c0:7b:5e:7f:33:48:32:46:26:0c:17:
                    16:b5:a4:23:22:d2:a3:ca:c6:eb:ee:22:1a:e4:27:
                    d3:fc:4d:df:e4:5f:60:04:17:ce:ea:f7:96:f7:e8:
                    bf:1f:46:43:e5:69:f3:62:d8:84:60:09:a0:32:b8:
                    9f:25:67:69:da:a2:83:61:9f:cd:06:1c:4d:c7:5b:
                    8b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:45:94:F2:03:BA:1A:75:85:52:D1:B4:70:C8:17:39:BF:93:65:44
            X509v3 Authority Key Identifier:
                keyid:30:EC:34:1C:C5:92:63:F4:87:99:F7:0A:95:49:08:26:E7:8E:6E:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/30EC341CC59263F48799F70A95490826E78E6E11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/326131343a373538313a313130303a3a2f34342d3438203d3e203339373533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:1100::/44

    Signature Algorithm: sha256WithRSAEncryption
         6a:2f:96:98:95:91:db:92:0c:4b:61:37:d2:e8:c9:fb:d3:28:
         73:19:67:d0:08:bb:f5:69:5f:a6:0b:4c:f6:f5:32:d2:16:99:
         3f:11:b2:48:eb:b2:f7:65:85:75:a2:8d:6d:29:37:e6:0a:10:
         45:85:35:c6:b1:7c:ca:49:5b:df:bc:98:63:dd:2b:3a:08:84:
         c3:f3:8a:29:59:48:33:d9:1d:bc:2d:d7:c0:c5:4a:89:92:e0:
         1a:ab:f4:04:f1:81:ec:79:8c:48:f2:fe:80:3e:e6:4c:dd:c2:
         5a:d8:01:15:0e:8b:8d:a9:0d:28:ae:88:11:9c:67:a0:05:37:
         cb:15:41:ef:e4:47:91:97:99:ed:4b:86:88:84:64:df:e2:e9:
         85:58:17:c6:f0:eb:6e:38:05:94:be:0e:d8:37:65:7f:f6:b1:
         8e:1d:a1:3c:9d:9a:ec:d9:09:0d:81:c2:9b:1a:41:a3:69:c8:
         6c:d4:06:c4:d0:8a:84:40:38:75:17:24:13:b8:bc:54:ac:fc:
         3d:41:2a:ac:d1:45:29:fd:5b:e2:0e:63:9c:b5:0a:04:1c:e2:
         c7:12:a1:bb:ce:cd:76:48:29:1f:91:d3:d9:9e:0d:1e:a4:14:
         11:e2:bd:73:c6:c7:3b:4e:40:13:8a:34:04:d2:02:45:7b:8c:
         22:25:30:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:21:37 2025 by rpki-client