This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/326130363a313238333a383931303a3a2f34382d3438203d3e20323034343634.roa
File:                     326130363a313238333a383931303a3a2f34382d3438203d3e20323034343634.roa (raw, json)
Hash identifier:          q69dHOwOkc2Q3RdkddNdWABvLCUxxznoxKYiD9lMbNc=
Subject key identifier:   77:10:2D:BF:AE:FE:F7:11:DD:6B:70:54:AD:34:7D:84:EC:17:DD:01
Certificate issuer:       /CN=5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9
Certificate serial:       2C7EED90494D8DB97C06958D9C378EF8FE736462
Authority key identifier: 5F:BB:D0:F3:D7:B8:1E:8A:FD:99:E5:A3:4B:67:83:4D:D3:CD:13:C9
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/326130363a313238333a383931303a3a2f34382d3438203d3e20323034343634.roa
Signing time:             Thu 22 Jan 2026 16:24:59 +0000
ROA not before:           Thu 22 Jan 2026 16:19:59 +0000
ROA not after:            Thu 21 Jan 2027 16:24:59 +0000
asID:                     204464
IP address blocks:        2a06:1283:8910::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 02:29:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:7e:ed:90:49:4d:8d:b9:7c:06:95:8d:9c:37:8e:f8:fe:73:64:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9
        Validity
            Not Before: Jan 22 16:19:59 2026 GMT
            Not After : Jan 21 16:24:59 2027 GMT
        Subject: CN=77102DBFAEFEF711DD6B7054AD347D84EC17DD01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:5a:28:6c:62:25:70:aa:65:02:e8:6f:8f:ed:
                    25:65:d5:3f:52:da:ea:11:7d:28:cd:ba:0e:8f:2e:
                    4a:5d:d8:19:73:df:e9:9d:d9:60:7d:e0:3d:27:1a:
                    77:e6:46:d7:d8:77:67:cb:4e:cd:68:9a:fa:2a:3f:
                    48:50:19:04:bd:d5:26:78:8e:ba:ac:25:01:61:29:
                    92:f6:d4:4b:7f:56:4c:dd:1e:8b:69:c4:d4:57:1b:
                    b0:37:de:78:85:55:54:67:40:38:24:a6:fd:45:ca:
                    62:1e:cc:40:f3:32:ef:59:82:55:14:88:85:34:4c:
                    16:b5:c3:b8:90:41:d2:a7:b7:79:1d:b9:83:7e:52:
                    6c:46:d1:7e:a9:8b:70:b4:ea:33:26:9f:7d:00:d3:
                    81:b1:c1:bb:51:0d:b3:5f:d9:48:cd:f2:e0:d7:a8:
                    b7:16:2a:17:37:4f:4b:b8:06:e1:f3:1b:06:52:3b:
                    10:5d:da:a4:41:ab:f6:2d:f0:05:ad:0c:f7:e8:27:
                    91:e8:5e:f0:a1:f9:f7:6f:33:5b:a5:4e:68:a9:f6:
                    d1:87:12:9a:63:36:fa:c5:06:2d:63:db:bd:e7:6e:
                    df:45:b4:59:9a:18:b9:79:e8:72:21:37:0e:06:e8:
                    59:aa:af:b5:25:f5:da:97:cf:e3:37:23:94:26:ac:
                    1a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:10:2D:BF:AE:FE:F7:11:DD:6B:70:54:AD:34:7D:84:EC:17:DD:01
            X509v3 Authority Key Identifier:
                keyid:5F:BB:D0:F3:D7:B8:1E:8A:FD:99:E5:A3:4B:67:83:4D:D3:CD:13:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/326130363a313238333a383931303a3a2f34382d3438203d3e20323034343634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1283:8910::/48

    Signature Algorithm: sha256WithRSAEncryption
         80:20:b5:49:f4:8e:6b:f8:66:29:00:a0:23:16:4a:aa:ef:81:
         da:68:60:7e:2e:87:b8:f2:6e:39:6f:10:95:a3:8b:28:2c:14:
         17:88:e1:95:34:a6:5b:de:c4:3f:05:0a:1f:59:7d:a8:3f:cb:
         c5:ba:91:6d:7e:da:f2:53:a2:b8:31:d3:3d:84:fa:a5:e6:3a:
         d7:cf:40:98:b4:b4:f3:3b:8c:9e:4e:f9:25:43:73:85:c3:9b:
         40:83:d0:c8:7a:55:1d:30:13:14:3a:a7:3e:3d:81:12:19:e6:
         40:3f:09:c3:1c:f8:3f:59:0c:4b:16:f6:8d:e1:de:c2:47:54:
         b3:31:ba:59:91:0e:2f:53:77:93:12:a1:50:ce:73:64:19:81:
         f1:5e:3a:59:17:41:e6:ec:83:cc:1a:be:5a:97:b7:f5:e1:f0:
         4a:8a:9c:d1:52:f5:95:ab:80:2b:2a:e9:2b:ce:17:71:d9:99:
         ad:1c:4e:fb:fb:7e:b1:47:b4:6e:6a:92:09:fc:c2:98:56:de:
         a6:fb:d9:c3:81:bf:77:eb:8f:6d:84:63:f9:c4:3d:cc:00:3d:
         75:b6:b8:fb:db:92:e8:4f:51:87:ee:1d:b6:66:85:54:a7:42:
         d8:15:94:ac:6d:a2:ec:c0:b8:88:c1:e1:b8:b7:9c:04:ec:2f:
         2a:45:d8:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:04:54 2026 by rpki-client