This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/0/326130663a316363353a6330303a3a2f34342d3434203d3e20323038373534.roa
File:                     326130663a316363353a6330303a3a2f34342d3434203d3e20323038373534.roa (raw, json)
Hash identifier:          mUKzjFEmFF1ij8QbpLMbpWWOoy5ByjLtax5R3U4hZ9o=
Subject key identifier:   47:93:62:21:5F:AD:AD:E5:3B:61:AF:07:A7:C7:6F:94:8D:60:85:E3
Certificate issuer:       /CN=61D9F4B7CF8D860603082E07FDCA08518E16AAFB
Certificate serial:       44776E6D39E682E9EAB307F6193FC1BF1F5557BA
Authority key identifier: 61:D9:F4:B7:CF:8D:86:06:03:08:2E:07:FD:CA:08:51:8E:16:AA:FB
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/61D9F4B7CF8D860603082E07FDCA08518E16AAFB.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/0/326130663a316363353a6330303a3a2f34342d3434203d3e20323038373534.roa
Signing time:             Fri 26 Dec 2025 16:13:45 +0000
ROA not before:           Fri 26 Dec 2025 16:08:45 +0000
ROA not after:            Fri 25 Dec 2026 16:13:45 +0000
asID:                     208754
IP address blocks:        2a0f:1cc5:c00::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:77:6e:6d:39:e6:82:e9:ea:b3:07:f6:19:3f:c1:bf:1f:55:57:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61D9F4B7CF8D860603082E07FDCA08518E16AAFB
        Validity
            Not Before: Dec 26 16:08:45 2025 GMT
            Not After : Dec 25 16:13:45 2026 GMT
        Subject: CN=479362215FADADE53B61AF07A7C76F948D6085E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:65:1a:76:fd:31:bd:eb:ce:3d:ff:aa:1b:85:
                    bd:94:ef:42:66:93:fd:e3:e6:91:f4:99:f5:c3:86:
                    f3:cf:69:e0:91:ef:61:8b:2c:a8:da:86:01:71:43:
                    11:f1:65:63:2e:0b:97:ea:3a:bd:b7:9e:95:60:03:
                    16:a0:a7:10:f0:83:dc:0d:03:b0:1f:f8:a0:59:4d:
                    f0:cd:89:53:ab:1b:66:af:37:65:4d:92:2d:55:a7:
                    4f:16:bf:a8:84:dc:55:ee:b6:91:8b:48:25:e4:c4:
                    b0:20:12:e5:51:38:b7:8a:42:12:5c:1f:04:b3:3b:
                    ea:13:cf:58:3b:45:0f:68:84:df:df:f0:97:53:0a:
                    ee:16:4a:72:54:e1:0c:7b:85:f4:2b:47:e3:6b:6f:
                    3c:54:9f:06:2a:a4:35:d2:4c:22:82:97:3c:57:7d:
                    56:86:31:ef:d7:87:d2:10:53:0f:d4:74:7f:a1:23:
                    fc:79:b8:54:ab:e6:db:92:d5:12:74:5c:04:fd:09:
                    96:57:8a:e1:ed:c7:7e:1e:b7:56:a0:0e:fd:44:14:
                    1c:fa:03:e1:c8:93:09:c7:46:b0:ff:45:a5:85:3b:
                    af:9d:1a:66:78:ae:23:5d:cd:23:70:cd:a1:6b:94:
                    bd:88:90:47:44:14:99:3d:bc:29:51:60:93:70:83:
                    39:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:93:62:21:5F:AD:AD:E5:3B:61:AF:07:A7:C7:6F:94:8D:60:85:E3
            X509v3 Authority Key Identifier:
                keyid:61:D9:F4:B7:CF:8D:86:06:03:08:2E:07:FD:CA:08:51:8E:16:AA:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/0/61D9F4B7CF8D860603082E07FDCA08518E16AAFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/61D9F4B7CF8D860603082E07FDCA08518E16AAFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/0/326130663a316363353a6330303a3a2f34342d3434203d3e20323038373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:1cc5:c00::/44

    Signature Algorithm: sha256WithRSAEncryption
         c0:35:e6:e5:3d:ab:23:ed:aa:26:4a:5f:9f:34:64:d4:bd:aa:
         77:5c:77:8a:b9:a6:80:52:eb:49:3d:e1:ab:80:37:84:a9:fb:
         eb:b4:af:f5:9c:d0:f1:72:5b:8f:2e:7f:7c:9d:2c:ed:76:f8:
         0d:46:aa:2e:46:c2:0c:7d:15:ac:9b:18:30:3a:a6:10:d8:08:
         4b:cf:87:f1:ed:a8:50:e3:bf:4d:0b:a1:a6:44:34:1e:bd:7f:
         1b:3a:4a:79:cb:f5:af:b1:e3:2a:80:77:a1:5a:d8:61:64:1b:
         09:f3:77:50:8e:3e:ec:c9:2e:9b:8f:39:5a:b2:4b:20:a3:5f:
         23:38:8f:fa:74:3c:07:45:e9:ec:10:98:aa:78:81:cf:ca:e4:
         7f:98:bb:7a:3c:68:51:0c:33:d3:32:52:0e:fa:44:f2:5a:76:
         1f:59:89:be:51:a8:db:d9:ef:cc:12:98:1b:fc:bb:82:56:2b:
         e4:d5:32:04:16:29:33:7b:77:e2:8b:14:4f:ea:30:90:42:ca:
         2d:d5:a0:e5:2d:26:a2:68:b3:e4:ce:01:77:14:68:97:13:74:
         2b:64:17:c8:81:39:41:36:05:94:16:9e:35:f8:b3:8e:39:85:
         a2:43:10:78:76:d1:82:f3:5a:c5:c0:18:38:49:80:b8:14:99:
         e2:67:0d:e6
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgIURHdubTnmgunqswf2GT/Bvx9VV7owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFEOUY0QjdDRjhEODYwNjAzMDgyRTA3RkRDQTA4NTE4
RTE2QUFGQjAeFw0yNTEyMjYxNjA4NDVaFw0yNjEyMjUxNjEzNDVaMDMxMTAvBgNV
BAMTKDQ3OTM2MjIxNUZBREFERTUzQjYxQUYwN0E3Qzc2Rjk0OEQ2MDg1RTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXZRp2/TG96849/6obhb2U70Jm
k/3j5pH0mfXDhvPPaeCR72GLLKjahgFxQxHxZWMuC5fqOr23npVgAxagpxDwg9wN
A7Af+KBZTfDNiVOrG2avN2VNki1Vp08Wv6iE3FXutpGLSCXkxLAgEuVROLeKQhJc
HwSzO+oTz1g7RQ9ohN/f8JdTCu4WSnJU4Qx7hfQrR+NrbzxUnwYqpDXSTCKClzxX
fVaGMe/Xh9IQUw/UdH+hI/x5uFSr5tuS1RJ0XAT9CZZXiuHtx34et1agDv1EFBz6
A+HIkwnHRrD/RaWFO6+dGmZ4riNdzSNwzaFrlL2IkEdEFJk9vClRYJNwgznDAgMB
AAGjggKDMIICfzAdBgNVHQ4EFgQUR5NiIV+treU7Ya8Hp8dvlI1gheMwHwYDVR0j
BBgwFoAUYdn0t8+NhgYDCC4H/coIUY4WqvswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjgxMmQzZWYtYzVmYy00NWIwLTk1NGEtOGE1MjIxMGMy
ZTkwLzAvNjFEOUY0QjdDRjhEODYwNjAzMDgyRTA3RkRDQTA4NTE4RTE2QUFGQi5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lMjZlYjEzNi00ZmU1LTRl
NjEtYTRkOC1mMzQ1ZjUyYmMyNWQvMC82MUQ5RjRCN0NGOEQ4NjA2MDMwODJFMDdG
RENBMDg1MThFMTZBQUZCLmNlcjCBtQYIKwYBBQUHAQsEgagwgaUwgaIGCCsGAQUF
BzALhoGVcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9mODEyZDNlZi1jNWZjLTQ1YjAtOTU0YS04YTUyMjEwYzJlOTAvMC8zMjYxMzA2
NjNhMzE2MzYzMzUzYTYzMzAzMDNhM2EyZjM0MzQyZDM0MzQyMDNkM2UyMDMyMzAz
ODM3MzUzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB
BwEB/wQTMBEwDwQCAAIwCQMHBCoPHMUMADANBgkqhkiG9w0BAQsFAAOCAQEAwDXm
5T2rI+2qJkpfnzRk1L2qd1x3irmmgFLrST3hq4A3hKn767Sv9ZzQ8XJbjy5/fJ0s
7Xb4DUaqLkbCDH0VrJsYMDqmENgIS8+H8e2oUOO/TQuhpkQ0Hr1/GzpKecv1r7Hj
KoB3oVrYYWQbCfN3UI4+7Mkum485WrJLIKNfIziP+nQ8B0Xp7BCYqniBz8rkf5i7
ejxoUQwz0zJSDvpE8lp2H1mJvlGo29nvzBKYG/y7glYr5NUyBBYpM3t34osUT+ow
kELKLdWg5S0momiz5M4BdxRolxN0K2QXyIE5QTYFlBaeNfizjjmFokMQeHbRgvNa
xcAYOEmAuBSZ4mcN5g==
-----END CERTIFICATE-----
Generated at Mon Jan 26 11:34:14 2026 by rpki-client