This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS812.roa
File:                     AS812.roa (raw, json)
Hash identifier:          GraiwLvfkCL1SB7hQ8AWWoWJQsBB/Q7eFfZhz5v6sNs=
Subject key identifier:   3F:17:9A:90:97:30:15:9A:A2:12:45:8B:4D:C6:B5:3B:F3:B2:FB:97
Certificate issuer:       /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial:       01A410A2A77D213DF38619EC1B2C04DD95C3D994
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS812.roa
Signing time:             Wed 21 Jan 2026 12:55:35 +0000
ROA not before:           Wed 21 Jan 2026 12:50:35 +0000
ROA not after:            Wed 20 Jan 2027 12:55:35 +0000
asID:                     812
IP address blocks:        2a0a:9f00::/29 maxlen: 48
                          2a0a:ba00::/29 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a4:10:a2:a7:7d:21:3d:f3:86:19:ec:1b:2c:04:dd:95:c3:d9:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
        Validity
            Not Before: Jan 21 12:50:35 2026 GMT
            Not After : Jan 20 12:55:35 2027 GMT
        Subject: CN=3F179A909730159AA212458B4DC6B53BF3B2FB97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:8c:75:56:48:0e:8e:c4:3b:e0:c5:6c:15:cc:
                    ce:a1:90:3f:52:29:0a:e0:93:91:9c:95:c0:d4:15:
                    eb:40:89:a2:8b:38:f5:aa:c9:46:d9:68:dc:41:d6:
                    dd:b7:6f:58:ad:85:3d:53:06:a9:cd:6f:97:7d:9b:
                    f5:d9:10:14:d2:d9:a6:8b:d7:b0:69:f7:35:f1:b8:
                    6c:be:da:9d:b4:74:07:bd:93:5f:9e:37:97:e7:e5:
                    30:02:97:3a:2f:f6:8c:6a:62:f9:dc:65:75:d8:54:
                    d0:cc:8d:a6:33:ad:bd:d0:02:d2:a3:61:e3:45:6b:
                    10:18:10:47:55:2c:b8:93:04:96:62:7b:7a:a4:08:
                    25:ef:6f:0c:29:c7:75:86:82:7e:85:c4:05:78:60:
                    f0:6d:91:41:ce:59:fd:07:49:9a:5e:39:e3:a4:4d:
                    72:c3:36:21:8b:0a:3b:40:80:f0:d4:99:dd:ec:78:
                    08:e0:bb:f1:c9:52:a8:c0:61:30:d5:7a:7e:be:56:
                    9c:fb:3d:5d:91:d6:ac:c3:ec:94:36:e5:92:b4:ac:
                    80:82:9a:44:72:0f:6a:b8:3a:21:8c:ce:2b:8c:f3:
                    db:15:c1:4e:a5:30:00:03:38:40:31:09:50:0d:1d:
                    1b:1a:91:c1:d5:26:ab:31:7e:10:f8:5d:4e:22:fa:
                    8a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:17:9A:90:97:30:15:9A:A2:12:45:8B:4D:C6:B5:3B:F3:B2:FB:97
            X509v3 Authority Key Identifier:
                keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS812.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:9f00::/29
                  2a0a:ba00::/29

    Signature Algorithm: sha256WithRSAEncryption
         5d:a4:51:56:c9:d1:f6:67:05:8e:b6:44:c7:aa:09:41:e7:98:
         18:69:19:f7:67:67:d5:cd:fb:c2:61:c5:a5:1d:fa:96:5a:9d:
         64:c7:4a:b7:fd:1d:67:31:8e:79:65:41:e8:fb:0c:79:56:ac:
         5d:09:97:10:b1:73:c5:de:db:be:28:9c:d7:e0:e6:97:01:b2:
         58:8a:57:23:25:93:69:86:c8:47:be:f5:77:36:76:c4:19:50:
         82:ee:cf:bb:e2:a9:c5:77:94:36:2f:04:8e:1e:36:05:c6:75:
         ed:64:b5:50:27:9a:4b:7b:b4:54:fa:42:d2:d9:62:b0:3b:5a:
         cb:bb:64:bb:26:1d:fa:d4:ab:48:80:75:d8:2f:3a:99:6f:82:
         cf:8a:72:94:dd:99:89:c3:91:9f:25:ae:17:4a:66:2c:6d:43:
         3e:73:47:71:f5:a2:31:e3:ec:fc:a2:71:c6:02:e5:65:37:4e:
         b2:d6:a3:05:3d:2a:2d:85:a5:da:23:b5:51:58:e0:57:d2:d0:
         c2:c5:e8:69:81:e2:3f:cf:18:c9:74:d8:1d:5d:e7:32:05:79:
         9f:69:f5:2a:26:30:9a:0c:24:36:9b:19:3d:e5:7e:9b:2d:92:
         02:6b:61:12:b7:ef:97:8a:24:ac:97:5d:7c:d5:46:62:21:cd:
         1b:6b:c6:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:43:29 2026 by rpki-client