This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/326130363a313238333a633065303a3a2f34342d3438203d3e20323136333330.roa
File:                     326130363a313238333a633065303a3a2f34342d3438203d3e20323136333330.roa (raw, json)
Hash identifier:          zrfihWgd+Tkxa5TLypPRgw8ggBGjOQU3k3JKCDIx32A=
Subject key identifier:   9A:7A:C3:D6:03:A7:A2:63:7B:18:DD:28:21:00:3C:BE:72:AE:52:03
Certificate issuer:       /CN=4807C118BD348934B5CC59B3E8A7A8C14F29C3FB
Certificate serial:       6082D293EEDAD0D0A7AD0E211D69E2F8ECB8FE1B
Authority key identifier: 48:07:C1:18:BD:34:89:34:B5:CC:59:B3:E8:A7:A8:C1:4F:29:C3:FB
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/326130363a313238333a633065303a3a2f34342d3438203d3e20323136333330.roa
Signing time:             Fri 05 Dec 2025 21:11:39 +0000
ROA not before:           Fri 05 Dec 2025 21:06:39 +0000
ROA not after:            Fri 04 Dec 2026 21:11:39 +0000
asID:                     216330
IP address blocks:        2a06:1283:c0e0::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:82:d2:93:ee:da:d0:d0:a7:ad:0e:21:1d:69:e2:f8:ec:b8:fe:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4807C118BD348934B5CC59B3E8A7A8C14F29C3FB
        Validity
            Not Before: Dec  5 21:06:39 2025 GMT
            Not After : Dec  4 21:11:39 2026 GMT
        Subject: CN=9A7AC3D603A7A2637B18DD2821003CBE72AE5203
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ec:06:e0:d0:82:20:07:6e:de:b7:2a:f5:b7:
                    d6:94:35:8f:3c:d4:21:ac:47:84:43:a4:5e:4b:89:
                    0c:65:be:d1:9b:f2:0c:45:a8:f9:d3:fd:39:9f:6d:
                    81:d9:ea:d7:3f:f8:88:7d:fa:f9:ec:58:5a:50:dc:
                    c1:ba:e2:53:a8:56:92:2b:0c:aa:9a:b9:c4:40:49:
                    d6:79:3a:c7:f5:98:89:6c:1b:57:25:dd:63:6a:ea:
                    d9:80:44:a1:93:87:2d:c4:c9:a3:c4:35:19:4c:22:
                    76:72:95:c1:86:ac:66:98:04:28:7b:f1:82:43:66:
                    9a:4b:ce:3e:b3:fb:cf:ca:5c:55:81:e9:03:14:e1:
                    7b:ca:6f:b9:21:a8:6a:6e:9b:72:11:e7:2e:9c:bc:
                    b9:04:9b:48:20:3a:e6:b0:bb:09:d0:ee:1f:f8:85:
                    b5:64:e8:ce:ef:be:ee:e7:c3:5f:05:98:a7:95:5e:
                    9e:e8:96:36:f9:38:51:51:74:9d:29:c4:bb:e3:84:
                    5c:35:24:a7:3e:df:cb:02:43:73:b7:29:a8:14:33:
                    ea:04:91:cc:a0:c0:b2:58:94:86:dc:41:7b:c4:36:
                    f4:59:e6:ab:38:77:a6:1f:dc:68:05:e6:8a:a5:b4:
                    f9:f4:a4:e6:c8:75:35:cc:d9:cc:07:11:21:3d:dd:
                    fe:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:7A:C3:D6:03:A7:A2:63:7B:18:DD:28:21:00:3C:BE:72:AE:52:03
            X509v3 Authority Key Identifier:
                keyid:48:07:C1:18:BD:34:89:34:B5:CC:59:B3:E8:A7:A8:C1:4F:29:C3:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/326130363a313238333a633065303a3a2f34342d3438203d3e20323136333330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1283:c0e0::/44

    Signature Algorithm: sha256WithRSAEncryption
         71:04:a4:24:ea:a5:57:a1:eb:aa:36:43:2a:41:fd:e5:fa:09:
         80:d8:b8:9e:28:36:43:64:1a:00:7b:6c:a7:a4:fd:21:e1:f5:
         24:b4:74:8e:c5:f2:e9:d7:c5:89:54:06:c1:3a:d1:57:18:33:
         23:68:b1:d9:e0:4d:0b:c9:71:47:d7:9f:9f:bb:59:e2:71:05:
         15:e9:d6:ef:21:e5:e6:e5:b7:b6:2b:b9:48:f8:a4:3b:4a:2a:
         17:f6:1d:91:90:cf:76:85:f3:f5:e9:75:55:29:af:85:05:62:
         32:e8:05:29:69:82:98:6e:c9:19:b2:b7:81:df:00:cd:c8:b6:
         8d:03:5c:ec:c7:a8:ad:d6:9d:84:26:d4:87:04:04:2b:03:bf:
         eb:18:c9:24:8f:8f:1e:88:c5:bd:c5:a0:e9:1e:84:c6:34:08:
         f0:bc:43:e7:17:57:4b:6f:14:79:59:9d:26:3c:00:c5:a3:61:
         6b:28:6f:d5:40:11:21:d2:c5:67:4d:25:72:07:fe:9b:7b:32:
         33:7c:f4:e2:48:02:a8:22:9a:ae:88:55:b8:33:44:d4:24:6c:
         7a:20:dd:b6:8f:14:5f:52:cc:24:ad:79:65:19:19:37:01:62:
         d1:68:82:c7:3d:1e:bd:8b:47:f6:aa:7a:e7:1a:bf:df:3a:bb:
         d1:7e:22:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:51:15 2025 by rpki-client