This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/326130663a316363353a326230303a3a2f34302d3438203d3e20323131373239.roa
File:                     326130663a316363353a326230303a3a2f34302d3438203d3e20323131373239.roa (raw, json)
Hash identifier:          ++ZXQO6DX2y5MC2lZZ9Rb2AxtnLGg97iXOGF4nak+wk=
Subject key identifier:   F2:33:E8:43:94:47:C2:D3:18:63:A2:01:0F:BA:DD:BB:0A:C9:6E:06
Certificate issuer:       /CN=75a838e02c61800f73d3019de0a51f567b64bc0e
Certificate serial:       4801CE6E37F684D5BAB6E7E7EB81861BB39063D9
Authority key identifier: 75:A8:38:E0:2C:61:80:0F:73:D3:01:9D:E0:A5:1F:56:7B:64:BC:0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/326130663a316363353a326230303a3a2f34302d3438203d3e20323131373239.roa
Signing time:             Sun 04 Jan 2026 18:30:42 +0000
ROA not before:           Sun 04 Jan 2026 18:25:42 +0000
ROA not after:            Sun 03 Jan 2027 18:30:42 +0000
asID:                     211729
IP address blocks:        2a0f:1cc5:2b00::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:01:ce:6e:37:f6:84:d5:ba:b6:e7:e7:eb:81:86:1b:b3:90:63:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75a838e02c61800f73d3019de0a51f567b64bc0e
        Validity
            Not Before: Jan  4 18:25:42 2026 GMT
            Not After : Jan  3 18:30:42 2027 GMT
        Subject: CN=F233E8439447C2D31863A2010FBADDBB0AC96E06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:db:8f:54:c3:80:20:73:17:32:fe:88:cb:3b:
                    76:ff:dc:a8:dc:25:3a:fd:d2:76:04:46:4b:a7:e0:
                    76:dc:36:55:26:11:ab:b1:e4:c7:02:66:83:b7:73:
                    5e:9f:54:26:c0:54:79:88:4a:82:36:4f:90:0d:44:
                    4e:48:19:83:b2:70:ec:57:49:8d:59:f1:30:78:25:
                    f6:89:67:37:42:37:1d:8e:79:d0:4e:2d:5e:a0:c7:
                    58:a9:ef:c5:93:5c:99:46:49:20:fd:a8:af:23:b3:
                    bc:d6:74:8d:72:6a:15:75:74:c1:e1:3c:5c:ef:22:
                    34:21:c7:16:1d:3e:32:e0:6e:d3:06:86:68:7e:f9:
                    d0:1c:64:e4:43:e0:3f:68:e5:1a:5f:9e:77:57:5f:
                    84:2c:f6:b0:a8:12:d1:14:16:77:10:2c:93:5f:95:
                    f5:23:a3:fa:9c:6d:b2:c9:50:fb:5d:f9:4b:97:9d:
                    ee:1f:ab:fa:44:b5:26:ff:87:b5:c4:f7:61:b7:f9:
                    1d:96:ff:44:a4:e5:2c:78:18:b5:42:0b:4e:9d:a5:
                    62:00:08:74:62:5d:45:53:7b:5d:d1:0e:1c:1f:c8:
                    41:76:0d:c7:b2:4f:1a:94:eb:51:dd:af:90:b2:ba:
                    3f:80:16:c7:54:ea:9c:44:01:14:52:e6:5d:1f:75:
                    4c:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:33:E8:43:94:47:C2:D3:18:63:A2:01:0F:BA:DD:BB:0A:C9:6E:06
            X509v3 Authority Key Identifier:
                keyid:75:A8:38:E0:2C:61:80:0F:73:D3:01:9D:E0:A5:1F:56:7B:64:BC:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/326130663a316363353a326230303a3a2f34302d3438203d3e20323131373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:1cc5:2b00::/40

    Signature Algorithm: sha256WithRSAEncryption
         5e:6a:72:75:be:89:4f:d1:d8:c9:f0:83:8c:bc:26:29:21:b0:
         ed:2b:e6:30:60:99:a0:2b:c0:20:6f:b8:ea:53:0d:82:11:6e:
         04:5f:fc:a4:5b:a5:77:5f:a0:a3:77:32:e4:ab:55:93:37:be:
         bc:13:dd:00:a8:51:ac:80:89:e9:20:e3:46:dd:bc:71:2b:bf:
         a3:30:73:4d:97:5f:69:1b:a0:70:02:29:93:8a:54:c3:ca:6b:
         bd:97:3b:48:05:d1:18:53:cd:2a:33:27:96:0a:97:12:fa:92:
         8e:cb:33:ec:ef:4b:ef:1e:13:93:12:38:97:cd:76:b7:ba:a6:
         6c:58:9d:ff:dd:71:f0:e1:20:33:ee:38:e4:6d:f4:0f:02:72:
         46:1b:cd:f1:1b:09:8a:a0:b8:0d:87:28:04:27:80:30:94:0a:
         4f:3e:d7:ba:38:37:75:61:88:2f:be:a3:2a:db:e8:80:69:26:
         2d:c9:8c:5e:b0:1f:88:f2:6f:8b:e7:af:3c:8b:c0:b8:c2:55:
         d6:ce:86:56:5f:74:83:e6:70:3a:fd:64:20:b9:97:10:4b:c8:
         74:2f:5d:8a:f3:35:39:48:1b:35:df:58:bf:11:58:0f:6a:45:
         5e:09:ec:fa:f0:82:17:8b:fc:3c:1b:e3:c8:72:f8:8f:52:bd:
         75:56:58:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 11:41:00 2026 by rpki-client