This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/1v5ydFmDmYBsKbsAdsH0osjsLBo.roa
File:                     1v5ydFmDmYBsKbsAdsH0osjsLBo.roa (raw, json)
Hash identifier:          elqB/+TJ1v7xaZRDbvp2l+YG4tjYUEhStFrNgp8O+xU=
Subject key identifier:   D6:FE:72:74:59:83:99:80:6C:29:BB:00:76:C1:F4:A2:C8:EC:2C:1A
Certificate issuer:       /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Certificate serial:       019B7B35964D21C8B9D01D1411993B018600
Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/1v5ydFmDmYBsKbsAdsH0osjsLBo.roa
Signing time:             Thu 01 Jan 2026 20:17:48 +0000
ROA not before:           Thu 01 Jan 2026 20:17:48 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     216299
IP address blocks:        2a14:67c2:a00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:35:96:4d:21:c8:b9:d0:1d:14:11:99:3b:01:86:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
        Validity
            Not Before: Jan  1 20:17:48 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d6fe7274598399806c29bb0076c1f4a2c8ec2c1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b5:69:13:7e:d5:48:a5:ba:75:90:da:08:c7:
                    c4:4c:32:6f:e1:29:18:fd:d9:d8:6b:14:2c:ce:97:
                    3f:fe:cd:4b:eb:19:48:16:ad:75:72:5c:c4:6e:0a:
                    56:90:31:b5:15:27:69:ab:c3:54:3f:5a:e2:dd:5b:
                    25:6c:09:45:ce:54:3e:8c:f6:99:58:05:3c:6d:c2:
                    01:0e:14:92:05:67:c2:06:35:5c:5e:84:3b:db:80:
                    23:d7:82:a3:bc:1d:cd:b8:44:07:3f:f3:ca:ae:74:
                    7c:30:4c:b0:dc:a8:2c:76:a4:0c:29:54:53:5a:9b:
                    29:a9:32:99:73:15:9f:13:6a:7e:a2:aa:2a:ef:b0:
                    a8:8e:ef:ec:74:3d:e2:05:07:31:e8:dd:e1:41:e8:
                    37:00:b1:99:1a:a2:2f:81:35:12:39:4d:66:3c:0c:
                    1f:01:3d:5e:f3:c9:05:b6:1e:c6:81:e6:cf:c6:7d:
                    9e:25:b0:d9:a3:ae:9b:00:36:ce:b0:13:96:76:3a:
                    bb:c6:b4:e4:1d:2e:3b:8c:bb:fe:76:4d:35:3c:88:
                    f3:c6:3d:38:e8:a4:31:ad:a8:b2:7f:e4:aa:d0:e3:
                    8a:86:fe:4e:2b:3f:f2:20:20:4d:4d:ff:07:14:f4:
                    1c:2a:a8:5c:44:1a:9e:7d:03:6a:c1:c7:0c:ee:dc:
                    b1:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:FE:72:74:59:83:99:80:6C:29:BB:00:76:C1:F4:A2:C8:EC:2C:1A
            X509v3 Authority Key Identifier:
                keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/1v5ydFmDmYBsKbsAdsH0osjsLBo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:67c2:a00::/40

    Signature Algorithm: sha256WithRSAEncryption
         5a:3b:51:b5:b3:31:b9:38:38:35:8e:6d:1b:57:c1:26:90:9d:
         95:2d:a7:35:ca:2e:79:7a:90:01:9b:43:4f:e0:2e:af:f4:b4:
         1a:f2:aa:93:f2:e7:79:7d:e9:a7:f0:43:5e:36:a5:30:a7:65:
         8d:60:d5:63:f1:9c:6b:e6:cf:28:2c:34:6b:7c:da:8d:20:cf:
         98:5a:8e:cc:21:a9:90:4a:eb:61:1c:93:bf:89:74:0c:5f:ff:
         b2:4f:1d:94:0c:b2:12:cf:47:8a:6d:58:3b:9a:da:6a:6b:79:
         9c:17:37:e2:ac:2f:78:bc:24:9d:7c:dc:e6:c0:4c:ab:b4:8b:
         75:5a:be:78:59:a7:d6:ed:71:b6:ef:75:33:fc:1a:8a:e1:96:
         b0:54:80:6f:1a:82:dc:b1:4a:0c:16:c1:c9:19:3f:3c:f2:15:
         c7:b8:8e:59:ee:2f:0a:ed:e8:6e:ca:47:eb:42:1a:cf:bf:90:
         4b:76:87:e3:d9:42:12:6a:a8:6f:fd:f5:32:52:60:a3:60:77:
         32:8c:31:59:8b:b9:2c:ae:48:03:65:4e:d7:db:c6:07:3e:f8:
         c4:38:bd:6c:d7:09:63:ea:8b:0a:c8:38:0b:c6:0c:a6:b9:7b:
         4f:2a:9a:1b:ad:7c:ed:27:87:21:5e:57:c6:06:3b:a0:fa:28:
         06:31:81:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:01:48 2026 by rpki-client