This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/2/326130363a313238333a386630303a3a2f34302d313238203d3e20323131303636.roa
File:                     326130363a313238333a386630303a3a2f34302d313238203d3e20323131303636.roa (raw, json)
Hash identifier:          gK2OEwxah0nUr5oDOFHfuHxQoYBzfNtl7ZzaP5UGsi0=
Subject key identifier:   99:90:B9:E6:1B:36:2E:B6:1D:67:EF:78:28:8F:7C:C9:B0:83:F0:BB
Certificate issuer:       /CN=B113B31E9F01A2F41870E8C77492B18EBA830E07
Certificate serial:       4B93271D317F4E07542073D2C63B9AED890E7754
Authority key identifier: B1:13:B3:1E:9F:01:A2:F4:18:70:E8:C7:74:92:B1:8E:BA:83:0E:07
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/B113B31E9F01A2F41870E8C77492B18EBA830E07.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/2/326130363a313238333a386630303a3a2f34302d313238203d3e20323131303636.roa
Signing time:             Sat 24 Jan 2026 14:24:03 +0000
ROA not before:           Sat 24 Jan 2026 14:19:03 +0000
ROA not after:            Sat 23 Jan 2027 14:24:03 +0000
asID:                     211066
IP address blocks:        2a06:1283:8f00::/40 maxlen: 128
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/2/B113B31E9F01A2F41870E8C77492B18EBA830E07.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/2/B113B31E9F01A2F41870E8C77492B18EBA830E07.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/B113B31E9F01A2F41870E8C77492B18EBA830E07.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 23:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:93:27:1d:31:7f:4e:07:54:20:73:d2:c6:3b:9a:ed:89:0e:77:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B113B31E9F01A2F41870E8C77492B18EBA830E07
        Validity
            Not Before: Jan 24 14:19:03 2026 GMT
            Not After : Jan 23 14:24:03 2027 GMT
        Subject: CN=9990B9E61B362EB61D67EF78288F7CC9B083F0BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:b8:3b:94:68:26:21:65:11:af:32:e5:b2:7c:
                    c4:7d:85:67:6f:4d:0c:3c:5a:53:50:43:34:ca:15:
                    dd:e3:e8:e3:74:8a:17:88:93:77:08:73:2f:9a:6a:
                    ba:db:54:29:21:b6:5c:7e:47:f4:37:32:e4:73:50:
                    18:d6:97:7a:a7:55:05:23:22:30:9e:06:e1:ec:d8:
                    97:32:7a:68:75:81:7b:63:f3:fc:df:85:7c:65:60:
                    24:32:29:e3:63:65:e1:15:fd:06:13:8a:54:91:da:
                    eb:f8:41:a5:2e:cd:37:18:9c:93:65:80:63:67:16:
                    90:7c:22:35:2b:cb:11:31:44:3b:7d:c0:4d:86:4f:
                    50:01:44:e6:f9:81:cc:40:4a:74:44:2a:7d:7a:a8:
                    dc:1e:4a:4d:3d:3b:96:42:29:bb:fe:9a:dd:41:fa:
                    94:b5:46:25:c8:a7:1d:be:69:8a:74:4d:e7:d5:0e:
                    2f:52:ce:cf:80:90:89:e9:ba:ea:fb:b7:5f:8c:c6:
                    2f:02:70:09:aa:58:f3:d2:a0:85:97:e3:92:dd:6b:
                    b4:7a:9a:a0:e2:55:ac:70:05:d7:d5:56:17:63:53:
                    17:f0:cb:53:35:1f:9c:42:52:d7:ed:c7:08:3e:58:
                    a2:0d:0a:ae:35:d5:a3:c7:c6:4d:1f:b8:6d:a3:1c:
                    58:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:90:B9:E6:1B:36:2E:B6:1D:67:EF:78:28:8F:7C:C9:B0:83:F0:BB
            X509v3 Authority Key Identifier:
                keyid:B1:13:B3:1E:9F:01:A2:F4:18:70:E8:C7:74:92:B1:8E:BA:83:0E:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/2/B113B31E9F01A2F41870E8C77492B18EBA830E07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/B113B31E9F01A2F41870E8C77492B18EBA830E07.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/2/326130363a313238333a386630303a3a2f34302d313238203d3e20323131303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1283:8f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         18:00:21:c8:32:56:ae:c7:17:fc:ab:c4:ce:10:d3:5b:02:de:
         86:66:58:bc:1d:42:2c:f9:4d:76:bb:9e:14:11:94:b1:23:b2:
         9f:fc:65:57:b9:1f:a0:2b:82:b2:74:2f:ae:c1:0a:fb:de:fc:
         f1:44:d0:e0:c8:82:ee:54:be:26:bb:d1:ee:f5:98:41:39:4e:
         1f:39:77:07:6c:ed:f2:54:0e:f0:c2:8e:e6:e9:88:88:99:10:
         61:47:9c:0a:a1:5d:af:3c:33:15:ce:2f:86:e2:01:70:33:36:
         5e:2d:bd:e5:e5:6c:26:f8:2b:65:e2:d2:0b:ec:b7:3b:b1:a3:
         70:2b:64:02:2a:2f:ec:eb:19:0f:91:48:8a:15:6d:70:47:01:
         5e:e5:91:c5:6d:3f:4d:e3:2f:3c:95:f3:45:30:0a:c9:05:b6:
         67:4f:64:4b:10:41:70:6a:e5:f0:3c:99:6c:f9:95:7a:fe:f8:
         cf:21:9b:ff:10:48:ec:f0:c6:72:e9:ba:82:23:58:d7:d9:89:
         90:77:55:ff:04:75:b8:7e:d1:bd:76:a7:ec:06:24:13:70:de:
         a2:8f:97:ed:7c:17:3e:12:0a:04:2d:e1:50:e5:dc:ae:0f:73:
         29:6c:3e:7f:75:5d:ed:ee:f8:ff:33:b8:d1:98:c6:d7:e2:d4:
         e4:fb:e3:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:10:56 2026 by rpki-client