This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/40ca266a-df83-4bb2-8007-4f85b893dc70/0/326131343a373538303a6130313a3a2f34382d3438203d3e20323033393233.roa
File:                     326131343a373538303a6130313a3a2f34382d3438203d3e20323033393233.roa (raw, json)
Hash identifier:          GOr6i79ogX9zrKCe8v7xdwWZZM6yOHiP597IK1UFVgk=
Subject key identifier:   CD:DC:74:AF:F2:34:2F:72:17:18:D5:BA:00:6A:48:32:CB:95:FA:C7
Certificate issuer:       /CN=21B5CB0BFB54183A6334820D704EDBF79B04CB48
Certificate serial:       62349589B034C75DF93672E5D9EEC1D559EC4621
Authority key identifier: 21:B5:CB:0B:FB:54:18:3A:63:34:82:0D:70:4E:DB:F7:9B:04:CB:48
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/40ca266a-df83-4bb2-8007-4f85b893dc70/0/326131343a373538303a6130313a3a2f34382d3438203d3e20323033393233.roa
Signing time:             Wed 19 Nov 2025 10:04:49 +0000
ROA not before:           Wed 19 Nov 2025 09:59:49 +0000
ROA not after:            Wed 18 Nov 2026 10:04:49 +0000
asID:                     203923
IP address blocks:        2a14:7580:a01::/48 maxlen: 48
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:34:95:89:b0:34:c7:5d:f9:36:72:e5:d9:ee:c1:d5:59:ec:46:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21B5CB0BFB54183A6334820D704EDBF79B04CB48
        Validity
            Not Before: Nov 19 09:59:49 2025 GMT
            Not After : Nov 18 10:04:49 2026 GMT
        Subject: CN=CDDC74AFF2342F721718D5BA006A4832CB95FAC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c6:36:5c:52:08:25:f1:ec:0b:ca:3c:13:b3:
                    7a:67:56:0b:69:35:1c:3b:d6:86:21:cf:fa:6d:79:
                    fa:a6:83:a7:ec:b7:db:8f:a6:2c:18:42:9e:ca:8c:
                    ff:47:1f:98:00:9e:c9:8e:92:67:67:6a:a6:a5:49:
                    2a:bd:30:1c:20:b4:26:40:31:95:05:f1:d4:f9:a9:
                    aa:a3:e8:c1:79:93:95:71:1e:fb:14:65:6f:b9:e6:
                    0f:75:e5:47:bc:74:4a:a3:1f:55:a2:55:64:8d:cd:
                    48:3d:53:ee:47:43:0f:b9:08:ff:4c:fa:e2:42:2d:
                    8b:ae:4a:6b:d8:2a:ce:ad:ee:ea:d5:f4:68:b9:79:
                    b4:17:f0:2a:aa:66:97:4f:d5:e9:4b:04:22:99:83:
                    c2:a1:8f:c2:73:ec:14:a0:82:b2:d8:ec:af:de:c6:
                    d0:ca:07:f3:ce:e6:0d:2e:29:36:ec:ef:d0:a9:b9:
                    58:be:fe:40:10:a6:aa:d3:ee:f8:31:5e:11:a8:89:
                    85:61:00:1e:59:9b:0f:bd:6a:3d:8f:ed:f6:51:fe:
                    4c:f3:04:09:1c:9c:e8:ef:f8:15:c2:1f:7c:be:8c:
                    c7:b1:f1:bb:44:28:55:cb:2b:c5:37:d3:f1:44:c6:
                    d3:51:36:dc:1c:ea:fd:62:aa:39:7c:9b:9f:0c:e3:
                    32:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:DC:74:AF:F2:34:2F:72:17:18:D5:BA:00:6A:48:32:CB:95:FA:C7
            X509v3 Authority Key Identifier:
                keyid:21:B5:CB:0B:FB:54:18:3A:63:34:82:0D:70:4E:DB:F7:9B:04:CB:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/40ca266a-df83-4bb2-8007-4f85b893dc70/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/40ca266a-df83-4bb2-8007-4f85b893dc70/0/326131343a373538303a6130313a3a2f34382d3438203d3e20323033393233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7580:a01::/48

    Signature Algorithm: sha256WithRSAEncryption
         d1:fd:d2:63:f1:fa:15:8e:47:8f:13:69:b1:83:f6:ea:31:f3:
         b9:54:47:9e:f9:54:85:b2:72:87:b1:77:41:fc:66:1d:35:59:
         05:9f:15:a3:21:73:5e:42:0f:74:10:56:1b:ef:16:49:56:b2:
         fb:78:db:a4:28:ff:a3:2c:70:38:db:6f:e1:28:b1:22:bd:8e:
         8e:fa:13:62:08:08:7d:de:1c:b1:71:ed:36:bb:99:58:4b:42:
         fc:13:63:3d:40:06:bb:4d:d3:24:3c:87:ab:1c:7d:1f:c9:8e:
         0a:16:7c:f5:26:26:83:91:7f:67:b9:03:2a:38:61:ed:10:d1:
         1f:7d:fc:63:16:44:39:2a:73:6f:d2:01:6b:ad:6a:b6:ac:6e:
         fe:a2:c1:a1:1c:d7:14:f3:13:79:7f:39:e6:f5:2d:89:3c:88:
         92:4e:8e:25:15:a1:3c:59:5a:df:d7:bd:0a:6e:17:67:bc:dd:
         40:41:77:8f:ba:65:f6:bf:56:56:34:34:0e:a2:16:6c:2e:0e:
         d9:86:9b:43:46:a6:e7:47:1a:f8:e7:90:8e:07:ac:74:65:88:
         ef:0b:38:fc:9e:22:28:62:c9:05:74:f3:a7:36:b3:98:1a:7d:
         f4:2c:8a:40:38:ad:7f:59:22:58:bf:7d:d9:fc:df:4d:8c:5e:
         75:13:f9:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----