This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/2/326130663a316363353a326430323a3a2f34382d3438203d3e20323134393535.roa
File:                     326130663a316363353a326430323a3a2f34382d3438203d3e20323134393535.roa (raw, json)
Hash identifier:          FN+4cFdttDrIetz9Bql2VXZN1xEcsdaGWfeYP0n78ck=
Subject key identifier:   0C:F6:7E:FE:39:C9:E2:BA:43:3A:4E:88:09:7C:93:3D:19:FD:BB:5D
Certificate issuer:       /CN=7657DDAA0EC784E5517D769FF91F5C35434A9408
Certificate serial:       64A74AE21B69017ED751F37F3BDCCFDE50FE3D04
Authority key identifier: 76:57:DD:AA:0E:C7:84:E5:51:7D:76:9F:F9:1F:5C:35:43:4A:94:08
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/7657DDAA0EC784E5517D769FF91F5C35434A9408.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/2/326130663a316363353a326430323a3a2f34382d3438203d3e20323134393535.roa
Signing time:             Mon 12 Jan 2026 13:54:52 +0000
ROA not before:           Mon 12 Jan 2026 13:49:52 +0000
ROA not after:            Mon 11 Jan 2027 13:54:52 +0000
asID:                     214955
IP address blocks:        2a0f:1cc5:2d02::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:a7:4a:e2:1b:69:01:7e:d7:51:f3:7f:3b:dc:cf:de:50:fe:3d:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7657DDAA0EC784E5517D769FF91F5C35434A9408
        Validity
            Not Before: Jan 12 13:49:52 2026 GMT
            Not After : Jan 11 13:54:52 2027 GMT
        Subject: CN=0CF67EFE39C9E2BA433A4E88097C933D19FDBB5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:43:4b:e2:61:12:1e:fe:6b:9e:7d:65:b1:1d:
                    99:23:93:1f:64:79:a8:39:0b:29:d3:14:e9:83:ce:
                    7d:3f:de:cb:27:dd:7f:1f:1e:d8:03:ef:25:a7:d3:
                    d2:4e:57:5e:09:4c:af:e7:3f:63:13:52:7e:83:30:
                    fd:18:ee:dc:e2:b0:5e:89:13:8f:74:e4:31:2d:81:
                    ed:34:78:71:3b:a3:eb:e4:e0:7c:1a:22:ee:15:ff:
                    34:5d:8c:b8:69:bf:71:43:98:d0:60:54:64:5a:39:
                    0e:7f:8a:a3:59:5d:af:76:fc:e0:a2:53:1f:31:97:
                    23:e7:3f:1b:75:99:f0:67:09:4a:34:19:c2:ca:3a:
                    9d:18:8c:f1:0e:f0:c0:73:c3:73:2c:6e:a7:ee:b4:
                    00:11:e6:62:86:be:bb:f3:37:ce:99:a9:f7:8f:9f:
                    a6:d4:f4:85:cd:13:a5:41:f3:7d:6f:83:03:68:07:
                    34:1a:b4:de:95:c8:a4:07:1c:30:9b:1e:22:f0:9c:
                    66:41:c8:4a:f4:a0:3c:ff:b3:1d:de:dc:2a:15:95:
                    bc:e7:ef:2b:d2:96:73:5d:e2:0b:d3:66:fd:fd:cf:
                    18:e6:fe:f9:65:57:a8:fd:cd:51:60:fe:0d:ce:90:
                    e2:5c:5a:e0:dd:7d:a4:5b:54:67:10:dd:61:a2:06:
                    8b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:F6:7E:FE:39:C9:E2:BA:43:3A:4E:88:09:7C:93:3D:19:FD:BB:5D
            X509v3 Authority Key Identifier:
                keyid:76:57:DD:AA:0E:C7:84:E5:51:7D:76:9F:F9:1F:5C:35:43:4A:94:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/2/7657DDAA0EC784E5517D769FF91F5C35434A9408.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/7657DDAA0EC784E5517D769FF91F5C35434A9408.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/2/326130663a316363353a326430323a3a2f34382d3438203d3e20323134393535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:1cc5:2d02::/48

    Signature Algorithm: sha256WithRSAEncryption
         05:26:85:dd:bf:f6:02:c8:df:c6:93:9c:d5:1b:fa:56:71:14:
         5b:ae:52:4f:40:93:c4:3d:e6:4a:53:cb:f5:1d:89:b0:fe:6c:
         e8:47:a6:b7:56:73:af:04:16:42:e3:1e:01:e6:92:d5:bc:7f:
         42:46:be:07:55:88:6b:a8:87:33:8d:31:f7:6e:1a:ee:a3:13:
         e3:83:b6:09:50:5b:fd:36:9e:71:6b:2d:b7:cd:24:b1:70:5e:
         08:ee:10:3b:5a:0e:8d:db:ab:91:ac:80:be:5c:2d:fb:9f:b1:
         4f:ee:a6:60:f8:7a:4e:c7:fc:e8:e2:ec:66:45:dc:fe:8b:fd:
         e8:60:f4:02:ec:65:d4:94:d1:e7:d1:17:d8:17:36:21:43:51:
         a6:cc:9e:1d:da:bb:6a:94:1b:d3:4d:a2:17:02:74:02:00:46:
         15:2b:b8:54:bd:9c:69:10:95:bd:72:f9:a6:af:2d:64:91:ae:
         93:49:3a:a5:4e:0a:3c:42:fd:e2:e9:51:1a:8b:ce:85:5d:01:
         ee:db:09:80:90:59:bf:52:1d:ae:44:e4:b1:79:10:89:38:f2:
         a8:14:df:58:b7:53:57:be:8c:95:38:e6:1f:eb:71:01:5e:cc:
         9d:39:34:24:a9:0f:8e:fb:b4:6a:f7:dd:a6:71:bf:4f:48:2c:
         68:c1:42:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----