This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/326131343a373538303a666635303a3a2f34342d3434203d3e20323039373130.roa
File:                     326131343a373538303a666635303a3a2f34342d3434203d3e20323039373130.roa (raw, json)
Hash identifier:          SHYewRnAEyfHeIS/ErCy1dNpuo8kVPzhKkgjNNzYVkM=
Subject key identifier:   40:16:18:C1:34:D3:BD:34:DF:AA:74:0A:96:00:EA:A7:11:72:75:D3
Certificate issuer:       /CN=51917E722DB03952D9056BED2F6BD4BF98B78976
Certificate serial:       3057EF9F862FE8744FDA18B7F53C5DB26AA4EA2D
Authority key identifier: 51:91:7E:72:2D:B0:39:52:D9:05:6B:ED:2F:6B:D4:BF:98:B7:89:76
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/326131343a373538303a666635303a3a2f34342d3434203d3e20323039373130.roa
Signing time:             Thu 06 Nov 2025 19:27:56 +0000
ROA not before:           Thu 06 Nov 2025 19:22:56 +0000
ROA not after:            Thu 05 Nov 2026 19:27:56 +0000
asID:                     209710
IP address blocks:        2a14:7580:ff50::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 23:45:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:57:ef:9f:86:2f:e8:74:4f:da:18:b7:f5:3c:5d:b2:6a:a4:ea:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51917E722DB03952D9056BED2F6BD4BF98B78976
        Validity
            Not Before: Nov  6 19:22:56 2025 GMT
            Not After : Nov  5 19:27:56 2026 GMT
        Subject: CN=401618C134D3BD34DFAA740A9600EAA7117275D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:59:62:82:15:7f:1d:fd:cd:3f:a5:ac:63:6c:
                    ba:1a:4e:67:f1:2d:a4:00:d6:a6:d0:7f:00:d6:20:
                    d6:95:d2:b9:49:d3:00:74:1d:77:ea:9e:11:5e:b8:
                    fb:e0:70:5b:da:e4:a7:c1:0c:0b:5e:4b:de:c5:9f:
                    58:20:c1:56:18:10:91:20:b3:54:c1:17:b9:40:a8:
                    8c:31:9d:40:93:6d:6c:16:be:0a:94:68:c2:bc:0c:
                    a0:31:a1:0b:ac:e2:16:55:b4:47:69:07:ca:ce:42:
                    b1:84:40:73:5d:2a:f7:6f:3f:1b:e5:1c:c0:08:86:
                    e7:c6:b5:ec:91:e4:84:57:e6:da:ab:ae:5a:d9:e0:
                    12:7f:5d:47:55:85:5a:ba:13:4c:fa:07:c6:8c:84:
                    58:07:18:46:92:b8:04:af:88:7a:35:8d:fe:56:9b:
                    63:65:7b:11:8a:5e:d6:04:36:03:ac:02:8f:0f:f8:
                    7f:ce:4f:83:62:48:23:9f:f3:ed:a2:5f:92:90:d7:
                    65:5d:8a:64:db:e4:3a:49:65:13:35:60:9d:1e:08:
                    95:73:ff:6e:df:a0:17:e8:2c:f5:16:dd:60:6f:57:
                    f7:64:34:31:59:ac:ff:dd:61:4a:54:89:6b:8f:fc:
                    6f:90:93:59:41:fa:62:ce:f3:62:75:11:a0:bc:f0:
                    25:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:16:18:C1:34:D3:BD:34:DF:AA:74:0A:96:00:EA:A7:11:72:75:D3
            X509v3 Authority Key Identifier:
                keyid:51:91:7E:72:2D:B0:39:52:D9:05:6B:ED:2F:6B:D4:BF:98:B7:89:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/326131343a373538303a666635303a3a2f34342d3434203d3e20323039373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7580:ff50::/44

    Signature Algorithm: sha256WithRSAEncryption
         0b:18:4d:aa:58:eb:2f:00:61:e4:02:e3:03:42:9e:4d:0b:cd:
         e9:5e:87:75:d6:46:75:32:dc:09:25:4e:c1:4a:a3:6f:84:20:
         1d:c0:e9:85:97:81:52:39:20:74:a0:45:df:15:f2:c1:bb:55:
         07:13:e1:62:e7:70:be:64:4c:d3:c8:b1:4a:6e:59:8a:9c:47:
         6c:5e:ee:e3:14:78:07:63:a8:0b:41:bc:29:22:b0:62:98:91:
         6c:b5:87:42:39:23:b0:5a:eb:bf:b4:69:2b:d1:c0:a4:f4:26:
         be:8a:5c:cb:05:c8:01:a8:4a:5b:cc:94:47:12:d9:23:32:31:
         ee:d7:ad:d9:59:9e:42:3a:cb:ed:a8:57:9c:24:e9:ee:a7:83:
         45:01:b1:20:d0:e3:14:0b:e9:4c:e9:c5:1c:fe:49:8e:8b:a0:
         60:95:6e:bf:9e:69:e3:47:15:9a:47:c5:63:c0:07:3a:ff:9f:
         cf:ea:91:62:b6:17:32:3b:f8:6d:73:c6:d3:09:53:21:52:19:
         93:bc:b9:54:b1:ff:30:31:33:ec:d0:1c:2f:1d:68:32:b7:b8:
         70:7b:a0:d4:10:87:ce:ac:db:62:e8:7b:5f:06:0d:e1:2c:65:
         1f:df:98:5b:35:2a:ff:92:03:16:78:fe:91:55:be:78:ed:a2:
         0f:34:11:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:34:24 2025 by rpki-client