This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/326130663a316363353a326530303a3a2f34302d3438203d3e20323131373231.roa
File:                     326130663a316363353a326530303a3a2f34302d3438203d3e20323131373231.roa (raw, json)
Hash identifier:          WcyGV/MrmsEJVHBhOBr1YFy9NCzvyxw6zIKMGx4hQEw=
Subject key identifier:   40:38:36:DB:20:02:5E:CC:14:F2:D6:65:A4:10:08:88:7C:D8:19:A1
Certificate issuer:       /CN=75a838e02c61800f73d3019de0a51f567b64bc0e
Certificate serial:       239E45370DC6B4394A84ECBE7CD45AB397CC1FAC
Authority key identifier: 75:A8:38:E0:2C:61:80:0F:73:D3:01:9D:E0:A5:1F:56:7B:64:BC:0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/326130663a316363353a326530303a3a2f34302d3438203d3e20323131373231.roa
Signing time:             Wed 31 Dec 2025 00:18:44 +0000
ROA not before:           Wed 31 Dec 2025 00:13:44 +0000
ROA not after:            Wed 30 Dec 2026 00:18:44 +0000
asID:                     211721
IP address blocks:        2a0f:1cc5:2e00::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:9e:45:37:0d:c6:b4:39:4a:84:ec:be:7c:d4:5a:b3:97:cc:1f:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75a838e02c61800f73d3019de0a51f567b64bc0e
        Validity
            Not Before: Dec 31 00:13:44 2025 GMT
            Not After : Dec 30 00:18:44 2026 GMT
        Subject: CN=403836DB20025ECC14F2D665A41008887CD819A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:9c:a1:d3:6b:8e:5c:00:55:0b:34:df:ac:b9:
                    20:1e:69:69:80:79:e3:24:ad:00:b6:8c:1a:01:ae:
                    30:b1:5b:dc:41:a9:15:31:75:82:9a:fc:87:c0:20:
                    7f:b7:08:20:49:e5:97:a9:c7:74:26:a6:45:92:10:
                    c8:d5:e2:65:1a:c1:7b:a3:e6:27:bf:0e:51:32:a7:
                    77:ad:18:b2:95:05:fe:6b:c6:ae:8d:5d:fb:ad:84:
                    87:81:d1:e4:d2:8e:21:04:86:12:cc:2c:8f:00:8c:
                    0c:bd:d5:09:5b:92:1d:fe:f9:92:49:d7:c5:ad:d0:
                    43:8a:0d:f5:36:ba:fa:ce:16:37:19:bf:03:de:89:
                    d1:ba:dd:47:b0:f3:38:e8:c0:c6:d3:ef:dc:fd:4a:
                    65:bb:c3:b9:4e:9e:04:dd:50:f1:ca:0d:4a:cf:22:
                    45:b5:9c:94:18:23:e5:4d:1e:7e:41:71:35:ab:54:
                    2e:ab:8b:b0:c6:87:e4:4f:2f:88:b9:db:fb:bd:60:
                    68:39:60:31:d2:61:d1:7e:ba:b0:d4:9e:03:b2:b2:
                    38:e8:53:58:62:77:83:7f:bd:4e:95:96:1d:da:bb:
                    de:13:b1:29:83:cd:f3:60:8d:66:44:22:9d:85:c8:
                    73:d6:39:c9:27:3a:c0:ac:3f:c9:0f:5a:20:2f:7b:
                    9c:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:38:36:DB:20:02:5E:CC:14:F2:D6:65:A4:10:08:88:7C:D8:19:A1
            X509v3 Authority Key Identifier:
                keyid:75:A8:38:E0:2C:61:80:0F:73:D3:01:9D:E0:A5:1F:56:7B:64:BC:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/326130663a316363353a326530303a3a2f34302d3438203d3e20323131373231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:1cc5:2e00::/40

    Signature Algorithm: sha256WithRSAEncryption
         31:eb:71:9a:19:7a:10:12:d6:71:8d:a7:92:39:87:98:6b:f6:
         62:f2:e4:40:3c:3a:29:a4:ae:6d:5f:c8:b3:6c:34:17:f5:94:
         ba:ae:6b:e3:e6:97:9c:28:62:c4:dc:06:9c:ed:61:7a:a0:81:
         5e:96:d1:e0:23:dc:20:92:84:fa:e0:df:1f:8b:4b:d0:dd:ad:
         65:22:a1:d1:b5:bf:7d:55:e0:cb:97:0b:65:70:2e:8a:cb:5d:
         2e:78:e6:80:29:88:df:e3:34:28:9e:77:bb:4f:e2:22:f7:8a:
         9e:15:6b:ab:4a:3d:39:d4:8f:87:df:8c:66:29:82:95:8f:63:
         b9:27:fc:3e:a6:19:1d:88:55:1d:fb:d8:56:1e:fa:05:77:77:
         5d:0c:78:cd:35:a8:fa:9e:25:02:38:7f:e7:cb:9a:45:2e:6e:
         fc:5b:11:2e:ec:fc:33:77:6b:48:50:16:e9:65:40:db:4f:ea:
         ba:5f:3e:c9:fb:0f:5f:df:0e:17:27:ed:32:03:0b:02:f6:49:
         b0:ac:e2:4a:b7:74:a0:34:39:1d:8d:d9:a9:69:4b:ba:2f:c8:
         5f:6c:1f:5f:aa:f8:c1:89:eb:95:f9:89:f8:12:4b:00:90:94:
         8c:e1:ee:d8:d8:03:4a:b7:4c:8d:61:80:91:23:98:d4:c7:13:
         00:db:d9:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----