This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/4/326130353a646663313a633432333a3a2f34382d3438203d3e203437343936.roa
File:                     326130353a646663313a633432333a3a2f34382d3438203d3e203437343936.roa (raw, json)
Hash identifier:          b1Tp3urffazrHFC2uNuqtecL+ZwX7JySZaJd8ifcpCw=
Subject key identifier:   C3:3C:DD:24:57:1F:E4:1C:12:3A:B6:9E:02:81:2A:CF:00:13:AA:78
Certificate issuer:       /CN=D7AC0BFBDA15A7F240A1283F5649194CE8BBB801
Certificate serial:       040CD9258FE767302F1CC3026DA5360BAA889247
Authority key identifier: D7:AC:0B:FB:DA:15:A7:F2:40:A1:28:3F:56:49:19:4C:E8:BB:B8:01
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/D7AC0BFBDA15A7F240A1283F5649194CE8BBB801.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/4/326130353a646663313a633432333a3a2f34382d3438203d3e203437343936.roa
Signing time:             Fri 04 Jul 2025 19:50:15 +0000
ROA not before:           Fri 04 Jul 2025 19:45:15 +0000
ROA not after:            Fri 03 Jul 2026 19:50:15 +0000
asID:                     47496
IP address blocks:        2a05:dfc1:c423::/48 maxlen: 48
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:0c:d9:25:8f:e7:67:30:2f:1c:c3:02:6d:a5:36:0b:aa:88:92:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7AC0BFBDA15A7F240A1283F5649194CE8BBB801
        Validity
            Not Before: Jul  4 19:45:15 2025 GMT
            Not After : Jul  3 19:50:15 2026 GMT
        Subject: CN=C33CDD24571FE41C123AB69E02812ACF0013AA78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:01:cf:33:37:62:e2:e8:36:0c:4b:3f:b8:10:
                    32:9e:c1:9f:93:4c:56:e0:33:09:50:b0:fc:70:1b:
                    9d:48:5b:3c:d0:72:97:40:89:35:1b:db:48:71:61:
                    44:23:97:df:53:db:e4:81:65:55:7b:87:8d:1e:0b:
                    4d:b0:c9:c6:3a:0b:74:fe:0b:cf:6d:e8:42:33:bb:
                    8d:6e:da:47:79:49:f6:2e:0e:2d:8f:b6:29:61:7a:
                    3b:6f:08:30:27:81:79:24:72:f0:72:c0:a1:1a:b3:
                    ca:0a:15:1d:ba:7f:fe:f4:af:82:76:0f:a6:24:db:
                    bd:1b:d1:8a:cd:f3:d6:25:44:8d:0f:58:b2:3f:5c:
                    51:50:51:f6:1f:71:43:eb:02:b3:5e:08:b5:51:52:
                    d9:76:8b:8e:17:4e:ff:3e:52:21:bf:07:60:11:3d:
                    0f:ac:96:81:5a:69:07:b5:b2:cc:f9:7c:db:6a:97:
                    b7:1d:87:a5:df:f7:23:a4:21:4d:d8:3f:2f:9c:1e:
                    35:39:e0:59:4d:1e:dd:03:de:9f:ba:1f:83:7e:ee:
                    4c:db:0d:73:cc:c4:88:8e:bc:c6:a8:07:38:fd:1c:
                    7a:cb:20:9a:ad:9f:07:49:b4:27:b9:d7:33:5a:38:
                    45:36:17:6b:49:6e:0a:e8:b8:95:50:b4:e1:81:ec:
                    72:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:3C:DD:24:57:1F:E4:1C:12:3A:B6:9E:02:81:2A:CF:00:13:AA:78
            X509v3 Authority Key Identifier:
                keyid:D7:AC:0B:FB:DA:15:A7:F2:40:A1:28:3F:56:49:19:4C:E8:BB:B8:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/4/D7AC0BFBDA15A7F240A1283F5649194CE8BBB801.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/D7AC0BFBDA15A7F240A1283F5649194CE8BBB801.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/4/326130353a646663313a633432333a3a2f34382d3438203d3e203437343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:c423::/48

    Signature Algorithm: sha256WithRSAEncryption
         a0:c8:96:33:a5:5d:bd:31:0c:41:52:24:c2:d8:1a:e2:f5:92:
         68:c7:40:85:a0:07:0d:39:f5:22:33:5d:d9:54:61:26:7c:43:
         dd:c9:20:39:22:40:34:6a:de:92:ea:ad:42:2d:87:6b:b0:94:
         c0:86:1a:8e:f6:c4:22:8e:d4:7e:ec:53:7e:af:79:e3:fc:01:
         1d:fa:e5:e3:42:81:98:31:08:67:b8:84:28:bc:54:a9:e5:d1:
         1f:d0:d7:ce:fe:32:29:00:45:a0:92:a2:4a:5f:56:bd:b5:ce:
         99:e7:55:ac:07:08:4f:a8:69:3d:0d:0e:f7:00:54:70:21:a4:
         16:d5:27:18:17:31:e0:02:9d:72:1e:34:5a:ac:6e:eb:b1:82:
         b8:2a:66:05:56:78:38:b0:b6:50:43:d5:38:93:4f:92:2d:92:
         5f:a4:50:b7:ac:e4:72:0c:f6:71:90:cf:79:f3:97:c7:07:f2:
         c7:c3:6c:23:d2:53:cd:00:2f:22:24:34:ab:7f:d2:3d:23:98:
         1f:5d:10:3b:4d:2d:e4:1f:4e:a3:79:75:e1:2a:75:2e:31:1e:
         0a:95:be:c7:c4:36:64:0a:97:aa:df:fc:de:9a:9a:4a:2c:02:
         80:2a:08:e9:cb:87:e9:45:e4:d3:9c:17:63:ed:a0:c1:a4:b9:
         58:75:91:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----