This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/326130663a316363353a326330303a3a2f34302d3438203d3e20323132343235.roa
File:                     326130663a316363353a326330303a3a2f34302d3438203d3e20323132343235.roa (raw, json)
Hash identifier:          IjURjncIfXNo9NhhAeksfk52F/FiPOTL+qtZUrCRSRY=
Subject key identifier:   BE:EB:5F:B5:E8:0F:6A:9D:99:D9:6B:FF:F6:7C:EF:FF:0F:78:CB:8F
Certificate issuer:       /CN=75a838e02c61800f73d3019de0a51f567b64bc0e
Certificate serial:       18344DB571DEC065F8025AB9261FD7DEB30128F3
Authority key identifier: 75:A8:38:E0:2C:61:80:0F:73:D3:01:9D:E0:A5:1F:56:7B:64:BC:0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/326130663a316363353a326330303a3a2f34302d3438203d3e20323132343235.roa
Signing time:             Thu 01 Jan 2026 00:58:56 +0000
ROA not before:           Thu 01 Jan 2026 00:53:56 +0000
ROA not after:            Thu 31 Dec 2026 00:58:56 +0000
asID:                     212425
IP address blocks:        2a0f:1cc5:2c00::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:34:4d:b5:71:de:c0:65:f8:02:5a:b9:26:1f:d7:de:b3:01:28:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75a838e02c61800f73d3019de0a51f567b64bc0e
        Validity
            Not Before: Jan  1 00:53:56 2026 GMT
            Not After : Dec 31 00:58:56 2026 GMT
        Subject: CN=BEEB5FB5E80F6A9D99D96BFFF67CEFFF0F78CB8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0e:18:63:dc:14:ea:47:87:de:71:81:1c:03:
                    15:5d:a6:4a:d6:a0:2d:aa:6b:cf:05:80:69:c3:a4:
                    ee:b0:4c:cf:ff:f4:23:38:75:12:ef:c6:2c:85:cc:
                    02:04:e6:1a:05:f0:5a:46:c7:d8:16:d6:be:7f:43:
                    00:b6:71:10:31:f7:8f:0c:55:0e:30:c4:21:38:22:
                    58:8d:c4:63:d4:02:55:e8:8b:8d:02:d0:02:b5:a3:
                    a7:05:80:46:d6:8e:48:1f:c4:ec:3a:da:7a:00:c5:
                    03:31:d1:65:a9:58:26:81:ef:5a:29:ac:ce:fe:d1:
                    43:65:32:2f:e5:63:5a:79:86:93:3c:af:d4:78:27:
                    a9:21:4e:17:32:5c:0d:18:1e:56:f5:2d:10:71:4d:
                    54:13:ac:12:3b:48:f8:f4:a3:80:af:5e:48:ae:9f:
                    c8:2a:c3:bb:be:6d:38:23:f2:6f:a7:15:b4:2b:59:
                    da:c5:86:3c:11:9d:22:e7:48:5c:e3:f0:40:f2:a5:
                    e4:6b:e0:09:cd:27:55:73:90:01:6b:df:e3:10:ef:
                    c3:6e:0e:6a:8e:56:7c:3c:08:54:86:dc:5f:31:14:
                    d1:d6:99:54:76:98:88:83:10:96:ae:8c:77:ae:7d:
                    11:5b:ec:c2:fb:d2:77:a8:c0:f4:38:0a:79:83:af:
                    ae:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:EB:5F:B5:E8:0F:6A:9D:99:D9:6B:FF:F6:7C:EF:FF:0F:78:CB:8F
            X509v3 Authority Key Identifier:
                keyid:75:A8:38:E0:2C:61:80:0F:73:D3:01:9D:E0:A5:1F:56:7B:64:BC:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/326130663a316363353a326330303a3a2f34302d3438203d3e20323132343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:1cc5:2c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         91:6a:f4:6d:a4:3e:73:99:c3:82:01:e2:6e:fe:7f:25:a3:5a:
         3a:8b:63:b0:e1:88:38:10:9d:cb:83:b3:04:d5:f8:ff:63:fa:
         4c:2f:3e:1c:a7:9f:e7:a1:c9:32:3d:ac:6e:97:64:6e:54:12:
         20:a9:76:e0:b8:26:a2:26:ec:84:8b:7b:19:e0:72:8b:72:fc:
         d3:0c:95:c6:0d:60:0d:f1:8a:3b:58:64:fe:9b:d9:e8:0b:30:
         b7:6e:2a:5d:d6:2b:31:30:a5:7c:ff:3a:90:b7:a4:62:93:0b:
         ef:5c:83:14:70:1f:28:1a:cb:16:6f:77:68:08:8c:5c:1f:7c:
         af:71:f1:c5:ac:e0:f0:b9:7a:94:31:6c:70:d0:66:ee:1a:0b:
         33:c4:31:f2:26:a9:64:90:13:c8:cf:72:58:53:57:1b:09:36:
         3c:99:15:cf:48:26:4c:f7:b5:c1:9e:34:d3:49:25:a5:e2:9d:
         1e:e4:73:43:43:8e:9d:cb:23:fe:7c:5f:38:7f:45:cb:e0:ba:
         6b:4b:9e:b1:99:ee:51:a2:2d:07:d5:d4:aa:bb:0b:a3:86:f2:
         ea:65:70:3d:bf:d9:4a:c8:5b:47:00:eb:f6:da:45:d7:d1:d2:
         43:02:05:27:81:74:5a:ef:4f:3c:14:d8:5d:76:f1:5f:66:e3:
         38:d3:31:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 10:15:46 2026 by rpki-client