This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b6746901-23d3-4301-b28d-8b0982b06c08/1/326131343a373538313a396663303a3a2f34342d3438203d3e20313532363236.roa
File:                     326131343a373538313a396663303a3a2f34342d3438203d3e20313532363236.roa (raw, json)
Hash identifier:          uaNPr0VFIQjC6YmmDQob+rk7K8So4bRRN9W2djY/k6E=
Subject key identifier:   8A:5B:38:88:81:0A:D4:4D:5B:E0:53:3F:37:E7:D7:DD:51:A6:85:A9
Certificate issuer:       /CN=15BCD75E02E085EB08A3D2F22C872972154D76C5
Certificate serial:       41A4A61D09BDFE9C8195925169389A62B678D664
Authority key identifier: 15:BC:D7:5E:02:E0:85:EB:08:A3:D2:F2:2C:87:29:72:15:4D:76:C5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/15BCD75E02E085EB08A3D2F22C872972154D76C5.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/b6746901-23d3-4301-b28d-8b0982b06c08/1/326131343a373538313a396663303a3a2f34342d3438203d3e20313532363236.roa
Signing time:             Fri 12 Sep 2025 01:37:44 +0000
ROA not before:           Fri 12 Sep 2025 01:32:44 +0000
ROA not after:            Fri 11 Sep 2026 01:37:44 +0000
asID:                     152626
IP address blocks:        2a14:7581:9fc0::/44 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:a4:a6:1d:09:bd:fe:9c:81:95:92:51:69:38:9a:62:b6:78:d6:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BCD75E02E085EB08A3D2F22C872972154D76C5
        Validity
            Not Before: Sep 12 01:32:44 2025 GMT
            Not After : Sep 11 01:37:44 2026 GMT
        Subject: CN=8A5B3888810AD44D5BE0533F37E7D7DD51A685A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6f:9d:99:9f:03:ea:b4:fb:6f:aa:30:2e:06:
                    73:7c:31:ec:5d:eb:f1:0e:7e:f7:e1:49:fe:05:d7:
                    99:37:d2:a6:a5:53:a7:93:d5:b2:42:29:73:33:1b:
                    e7:c7:5e:46:c7:7f:7d:cd:16:07:1b:82:d4:0b:83:
                    71:18:f6:8f:93:79:a8:90:74:ae:eb:a1:26:39:cb:
                    92:cb:43:6a:c1:3d:92:ea:9a:33:9d:ee:02:25:07:
                    14:03:49:67:60:43:35:e1:d0:be:13:a8:6e:77:09:
                    5d:5e:89:2e:0f:c2:bb:90:d8:01:1d:02:e0:ec:2e:
                    c5:76:0b:da:40:89:59:68:b6:23:ae:62:1a:06:14:
                    9b:79:98:33:54:44:09:d6:ca:a8:8b:95:2c:5c:5e:
                    fc:66:2b:d2:41:82:4a:1a:8e:c3:87:a5:c8:47:c4:
                    94:9e:05:d7:3f:be:27:67:8a:97:4f:01:cc:69:c0:
                    12:ff:dc:68:18:ff:28:84:01:c5:5e:e7:69:7b:43:
                    d4:fb:25:b8:bd:50:44:a6:00:1d:49:c6:ee:58:32:
                    04:b0:36:1d:60:c1:81:03:73:88:9e:96:eb:e5:8d:
                    9b:d4:2a:4b:23:16:d9:97:05:88:b5:df:dd:81:b5:
                    3d:f0:9d:1b:63:34:4f:3d:b6:98:90:b6:0b:00:7c:
                    08:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:5B:38:88:81:0A:D4:4D:5B:E0:53:3F:37:E7:D7:DD:51:A6:85:A9
            X509v3 Authority Key Identifier:
                keyid:15:BC:D7:5E:02:E0:85:EB:08:A3:D2:F2:2C:87:29:72:15:4D:76:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/b6746901-23d3-4301-b28d-8b0982b06c08/1/15BCD75E02E085EB08A3D2F22C872972154D76C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/15BCD75E02E085EB08A3D2F22C872972154D76C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b6746901-23d3-4301-b28d-8b0982b06c08/1/326131343a373538313a396663303a3a2f34342d3438203d3e20313532363236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:9fc0::/44

    Signature Algorithm: sha256WithRSAEncryption
         03:8a:5e:02:64:04:61:86:ab:35:40:15:f3:3d:d2:a9:0d:be:
         3d:a8:fc:95:d5:27:2a:96:35:35:cd:77:aa:b5:a9:28:09:0d:
         59:40:98:0b:e2:94:6b:5a:bd:a2:55:2f:4a:a1:f4:62:8a:20:
         ce:18:77:be:3c:3c:f3:cc:46:45:21:22:06:90:ca:e6:87:35:
         79:bf:a7:5c:79:78:ee:20:7a:bc:4e:07:c1:43:b5:a3:ca:25:
         68:50:4d:fd:18:4c:6e:39:e7:17:16:bf:9f:4f:19:a4:e7:29:
         dd:59:49:f5:6a:e5:f6:19:05:ea:cc:a6:16:9f:4a:d2:4b:b9:
         fc:20:d1:a9:d0:04:6e:05:7c:fc:16:7e:47:34:5b:4e:c0:47:
         0a:ea:ad:77:99:69:ae:ac:d3:70:08:b3:9a:30:79:de:de:07:
         8b:47:a6:81:04:96:93:23:28:32:d1:8a:58:63:d6:84:ad:18:
         e2:c1:c5:be:c9:6d:4b:48:1a:fb:16:ec:29:e7:10:8b:54:5c:
         47:a9:72:09:cc:bc:00:03:6a:d5:48:38:d2:a0:e8:7a:15:72:
         35:13:a1:85:45:47:13:6d:08:45:37:c3:28:6c:06:24:37:44:
         97:3c:13:b6:19:27:99:5a:44:57:5e:55:a5:5c:a4:ae:8d:c0:
         99:9f:6a:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----