This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/326131343a373538313a343030303a3a2f33362d3438203d3e203434383137.roa
File:                     326131343a373538313a343030303a3a2f33362d3438203d3e203434383137.roa (raw, json)
Hash identifier:          fudCQ5HvpSkAFWaORqCftP85E1ijbMZ/SJYbFT8n65o=
Subject key identifier:   0C:6E:ED:FF:EF:D9:F5:3D:70:C4:48:0A:3A:B5:5C:8D:EC:E7:74:9F
Certificate issuer:       /CN=8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C
Certificate serial:       6AE7B9A9333447342C964E7FABB1B9F603ED415B
Authority key identifier: 8E:07:D3:1C:64:52:F7:A6:B2:4E:63:CD:DC:49:0E:12:E0:AF:B3:8C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/326131343a373538313a343030303a3a2f33362d3438203d3e203434383137.roa
Signing time:             Sat 24 Jan 2026 06:01:31 +0000
ROA not before:           Sat 24 Jan 2026 05:56:31 +0000
ROA not after:            Sat 23 Jan 2027 06:01:31 +0000
asID:                     44817
IP address blocks:        2a14:7581:4000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 04:34:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:e7:b9:a9:33:34:47:34:2c:96:4e:7f:ab:b1:b9:f6:03:ed:41:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C
        Validity
            Not Before: Jan 24 05:56:31 2026 GMT
            Not After : Jan 23 06:01:31 2027 GMT
        Subject: CN=0C6EEDFFEFD9F53D70C4480A3AB55C8DECE7749F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f4:8c:f1:a4:ae:fd:ee:66:4a:73:08:9a:b8:
                    ed:ca:6b:8f:64:0f:8f:07:ae:9b:ee:24:2e:7a:40:
                    6d:50:24:78:62:8f:d9:c7:b6:d5:3b:23:fc:35:d6:
                    13:67:be:98:18:25:1e:df:7b:59:21:55:ba:a7:ea:
                    67:73:c0:53:00:e2:fa:95:0e:de:fc:d8:8a:51:5f:
                    b1:ca:7c:10:2a:6a:84:65:2e:ac:f0:6d:bf:cc:3b:
                    8d:8f:8b:db:ba:82:8f:31:c9:f0:b9:97:22:d9:dc:
                    74:ef:1b:fa:72:2d:ca:fb:d4:31:75:60:26:df:9a:
                    86:f7:7a:12:5c:12:d1:d3:75:18:58:40:5f:60:af:
                    5c:50:2c:68:13:6e:e1:5c:4b:9d:f4:84:76:7e:b7:
                    18:95:8b:2e:e2:2a:8b:e8:a8:35:dc:4d:ea:6a:0f:
                    72:86:f7:9e:a8:4d:51:3c:8e:3c:03:b5:c7:38:63:
                    ba:0c:92:35:e4:89:bb:ed:a6:22:55:c7:1d:e8:39:
                    02:ad:1f:37:e6:9d:f7:6c:55:80:ff:79:c3:f7:be:
                    be:6d:b0:a0:11:6f:b2:b7:15:2f:a6:89:30:43:6d:
                    f7:9c:be:6a:6b:27:ae:06:f9:a6:e8:77:0d:4a:05:
                    d9:a6:86:f1:16:a8:54:91:c1:30:34:d9:42:de:77:
                    28:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:6E:ED:FF:EF:D9:F5:3D:70:C4:48:0A:3A:B5:5C:8D:EC:E7:74:9F
            X509v3 Authority Key Identifier:
                keyid:8E:07:D3:1C:64:52:F7:A6:B2:4E:63:CD:DC:49:0E:12:E0:AF:B3:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/326131343a373538313a343030303a3a2f33362d3438203d3e203434383137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         16:ac:b3:96:a9:0a:8a:19:1a:64:c9:c6:ba:e4:52:87:25:76:
         af:e2:80:68:25:7e:98:06:55:8a:ab:49:c4:a3:d2:7f:1e:1f:
         e0:df:ad:8a:c8:ab:11:63:a1:00:6f:fc:5d:d4:3e:4a:24:72:
         9c:a3:cc:73:ff:96:1b:79:16:6a:b7:c7:11:90:19:24:90:51:
         ea:f4:c8:38:10:e3:0e:af:41:38:1f:77:61:87:bd:b8:49:b3:
         95:51:04:cc:25:60:81:7b:f0:e4:45:0c:9f:80:a2:f7:c1:e2:
         13:46:16:11:72:84:b0:f1:1a:2b:d5:24:08:98:3f:f2:ca:be:
         a1:f0:3d:3d:f4:38:62:39:02:92:61:e2:b3:22:93:f6:39:1c:
         76:44:fa:41:3e:05:ba:52:43:1c:c3:02:f4:a4:de:db:ad:83:
         22:0a:61:ee:27:65:93:c7:08:4c:c5:cb:03:45:33:d4:e7:66:
         66:c3:6f:28:04:69:0c:96:1a:22:0d:f4:87:35:a9:44:41:ab:
         c2:95:c2:c8:87:75:97:97:13:cc:dd:53:5b:d9:58:4b:d9:b4:
         ce:8c:25:98:22:9c:33:9b:f9:de:82:60:30:bc:fc:07:71:45:
         5e:f8:de:9a:fb:49:1a:8d:9a:a8:e9:82:02:d0:89:88:aa:0c:
         0c:9d:aa:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:21:46 2026 by rpki-client