This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/3230362e3235312e35322e302f32322d3234203d3e203332333436.roa
File:                     3230362e3235312e35322e302f32322d3234203d3e203332333436.roa (raw, json)
Hash identifier:          uxLsRPCBsMb1jSf1l2L980Qtuzxr/y4xzBDefSANlEw=
Subject key identifier:   73:EA:46:00:67:6E:48:F6:3F:3C:AD:E6:0E:60:94:70:1E:0E:69:1A
Certificate issuer:       /CN=a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d
Certificate serial:       505B675858035AB5845FA9D4FF3DC0384810F980
Authority key identifier: DE:F9:CF:6D:4F:F8:42:24:03:A0:B6:5E:13:9A:B5:3C:60:8B:92:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/3230362e3235312e35322e302f32322d3234203d3e203332333436.roa
Signing time:             Sat 13 Dec 2025 08:11:55 +0000
ROA not before:           Sat 13 Dec 2025 08:06:55 +0000
ROA not after:            Sat 12 Dec 2026 08:11:55 +0000
asID:                     32346
IP address blocks:        206.251.52.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/DEF9CF6D4FF8422403A0B65E139AB53C608B9212.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/DEF9CF6D4FF8422403A0B65E139AB53C608B9212.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 17 Dec 2025 12:49:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:5b:67:58:58:03:5a:b5:84:5f:a9:d4:ff:3d:c0:38:48:10:f9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d
        Validity
            Not Before: Dec 13 08:06:55 2025 GMT
            Not After : Dec 12 08:11:55 2026 GMT
        Subject: CN=73EA4600676E48F63F3CADE60E6094701E0E691A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e3:ea:ec:f5:ed:75:42:4d:2d:67:7b:f7:53:
                    b2:12:42:65:cc:93:4b:c2:f0:91:13:28:83:e3:44:
                    ca:2e:37:18:6f:f6:2a:60:92:ea:d8:bb:92:e9:7e:
                    93:dd:1f:50:3b:00:21:33:3a:f4:d8:ad:1c:bf:79:
                    37:e0:61:54:24:74:e3:40:97:83:21:30:be:b7:c7:
                    dd:08:d1:f2:d4:cf:4e:f1:b2:0f:4c:19:8f:0e:21:
                    55:05:53:cd:3a:88:46:cf:01:19:87:7a:31:06:97:
                    39:27:92:02:93:d0:5e:cc:c0:11:6b:66:f1:a1:d2:
                    29:b5:7e:ad:e2:19:14:22:19:20:f0:bb:11:b9:f2:
                    d7:6a:fd:9d:ea:be:30:f4:f5:45:03:3e:92:55:24:
                    09:00:4f:79:c5:a8:25:8e:f1:e5:54:49:65:d3:01:
                    11:cb:dc:26:6a:4a:64:fa:88:e1:ef:0d:66:76:ff:
                    f4:8a:fa:bd:db:51:c1:ab:b2:be:b4:53:2a:1a:a6:
                    df:c4:bc:d6:3e:57:8d:7e:6f:d9:94:cb:39:98:b2:
                    e6:81:23:e8:d2:df:1b:13:2c:b1:f9:aa:df:a7:06:
                    4b:de:91:47:be:e9:22:e5:2d:af:91:7a:c8:33:b7:
                    09:c2:61:5e:89:58:17:b8:df:f8:db:b7:b2:cf:0f:
                    e4:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:EA:46:00:67:6E:48:F6:3F:3C:AD:E6:0E:60:94:70:1E:0E:69:1A
            X509v3 Authority Key Identifier:
                keyid:DE:F9:CF:6D:4F:F8:42:24:03:A0:B6:5E:13:9A:B5:3C:60:8B:92:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/DEF9CF6D4FF8422403A0B65E139AB53C608B9212.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/3230362e3235312e35322e302f32322d3234203d3e203332333436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.251.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         63:83:1c:00:92:29:90:98:8c:8a:1d:f5:76:eb:83:52:28:54:
         eb:ad:67:55:8c:05:5c:f4:84:ec:e3:4b:2b:70:53:86:9f:df:
         95:ed:95:a2:00:92:87:ae:a3:02:bc:53:66:ec:2a:3d:a5:5f:
         e2:00:bb:ef:f5:56:11:29:54:5b:04:82:3f:38:24:45:cf:67:
         70:cd:e8:13:44:4a:c0:89:95:8f:40:8c:bc:d0:74:80:66:17:
         1c:2b:16:2b:a3:6d:75:60:fc:5a:ef:12:49:83:39:ef:e2:7e:
         9b:84:4c:e3:18:0c:0c:3d:01:8d:c2:ac:59:4e:01:01:b4:a7:
         17:d5:d5:3b:d5:8b:3e:94:c1:9a:1d:64:c1:86:88:97:03:86:
         67:58:3e:44:78:2d:5b:e4:60:41:8a:d6:25:7b:4d:9a:c4:e3:
         79:bd:3b:0c:38:c9:ed:ed:21:5e:51:86:9c:a0:61:75:12:5c:
         fb:f9:93:11:8b:09:5c:71:27:0b:66:c5:9e:d9:71:5b:4e:1f:
         e6:79:4a:38:9a:62:28:1f:17:80:ef:02:6e:24:24:d8:30:29:
         cb:83:9e:d0:4f:76:c9:a3:ba:65:48:d6:da:9e:df:d0:20:5d:
         95:89:bb:71:1c:2e:f6:41:79:4b:63:b2:77:49:95:03:55:10:
         cf:35:a9:b9
-----BEGIN CERTIFICATE-----
MIIFzTCCBLWgAwIBAgIUUFtnWFgDWrWEX6nU/z3AOEgQ+YAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYTIyYWE4MmJkNmFmMTZkNzBhNjk5ZDM0ZWQ4NDNkNzE2
MjAxNzZmMTBlMjAxMGQyMmQwHhcNMjUxMjEzMDgwNjU1WhcNMjYxMjEyMDgxMTU1
WjAzMTEwLwYDVQQDEyg3M0VBNDYwMDY3NkU0OEY2M0YzQ0FERTYwRTYwOTQ3MDFF
MEU2OTFBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOPq7PXtdUJN
LWd791OyEkJlzJNLwvCREyiD40TKLjcYb/YqYJLq2LuS6X6T3R9QOwAhMzr02K0c
v3k34GFUJHTjQJeDITC+t8fdCNHy1M9O8bIPTBmPDiFVBVPNOohGzwEZh3oxBpc5
J5ICk9BezMARa2bxodIptX6t4hkUIhkg8LsRufLXav2d6r4w9PVFAz6SVSQJAE95
xagljvHlVEll0wERy9wmakpk+ojh7w1mdv/0ivq921HBq7K+tFMqGqbfxLzWPleN
fm/ZlMs5mLLmgSPo0t8bEyyx+arfpwZL3pFHvuki5S2vkXrIM7cJwmFeiVgXuN/4
27eyzw/kAQIDAQABo4ICzTCCAskwHQYDVR0OBBYEFHPqRgBnbkj2Pzyt5g5glHAe
DmkaMB8GA1UdIwQYMBaAFN75z21P+EIkA6C2XhOatTxgi5ISMA4GA1UdDwEB/wQE
AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu
cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2UyNmViMTM2LTRmZTUtNGU2MS1hNGQ4
LWYzNDVmNTJiYzI1ZC8xL0RFRjlDRjZENEZGODQyMjQwM0EwQjY1RTEzOUFCNTND
NjA4QjkyMTIuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy
c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0
YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmIt
NDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83ZjMzY2Y1OS1hZTM1LTQxZDQtODI1Mi1k
OWJkYmFiYTQyMTAvYTIyYWE4MmJkNmFmMTZkNzBhNjk5ZDM0ZWQ4NDNkNzE2MjAx
NzZmMTBlMjAxMGQyMmQuY2VyMIGtBggrBgEFBQcBCwSBoDCBnTCBmgYIKwYBBQUH
MAuGgY1yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L2UyNmViMTM2LTRmZTUtNGU2MS1hNGQ4LWYzNDVmNTJiYzI1ZC8xLzMyMzAzNjJl
MzIzNTMxMmUzNTMyMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzMzMjMzMzQzNi5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAs77NDANBgkqhkiG9w0BAQsFAAOCAQEAY4McAJIpkJiMih31duuD
UihU661nVYwFXPSE7ONLK3BThp/fle2VogCSh66jArxTZuwqPaVf4gC77/VWESlU
WwSCPzgkRc9ncM3oE0RKwImVj0CMvNB0gGYXHCsWK6NtdWD8Wu8SSYM57+J+m4RM
4xgMDD0BjcKsWU4BAbSnF9XVO9WLPpTBmh1kwYaIlwOGZ1g+RHgtW+RgQYrWJXtN
msTjeb07DDjJ7e0hXlGGnKBhdRJc+/mTEYsJXHEnC2bFntlxW04f5nlKOJpiKB8X
gO8CbiQk2DApy4Oe0E92yaO6ZUjW2p7f0CBdlYm7cRwu9kF5S2Oyd0mVA1UQzzWp
uQ==
-----END CERTIFICATE-----
Generated at Tue Dec 16 18:55:48 2025 by rpki-client