This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/513734-a485-4c28-8aa6-9555d30f6f8f/1/xqdYiyOjRSciwZ2UnJ_79WalaOo.roa
File:                     xqdYiyOjRSciwZ2UnJ_79WalaOo.roa (raw, json)
Hash identifier:          BhmwEyRFaLJTPcKk47g4mCuag+1KvgvlYQorDHsQN9Y=
Subject key identifier:   C6:A7:58:8B:23:A3:45:27:22:C1:9D:94:9C:9F:FB:F5:66:A5:68:EA
Certificate issuer:       /CN=fd3a1e8465bfc4df700894372d0b9808e8b629ea
Certificate serial:       019B7B36BD25EAB2CDAAD7C266AE080213CE
Authority key identifier: FD:3A:1E:84:65:BF:C4:DF:70:08:94:37:2D:0B:98:08:E8:B6:29:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_ToehGW_xN9wCJQ3LQuYCOi2Keo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/513734-a485-4c28-8aa6-9555d30f6f8f/1/xqdYiyOjRSciwZ2UnJ_79WalaOo.roa
Signing time:             Thu 01 Jan 2026 20:19:03 +0000
ROA not before:           Thu 01 Jan 2026 20:19:03 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     211864
IP address blocks:        81.173.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/513734-a485-4c28-8aa6-9555d30f6f8f/1/_ToehGW_xN9wCJQ3LQuYCOi2Keo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/513734-a485-4c28-8aa6-9555d30f6f8f/1/_ToehGW_xN9wCJQ3LQuYCOi2Keo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_ToehGW_xN9wCJQ3LQuYCOi2Keo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:36:bd:25:ea:b2:cd:aa:d7:c2:66:ae:08:02:13:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd3a1e8465bfc4df700894372d0b9808e8b629ea
        Validity
            Not Before: Jan  1 20:19:03 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c6a7588b23a3452722c19d949c9ffbf566a568ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:eb:f7:b0:74:18:a4:c4:03:32:bb:cb:d3:3d:
                    06:0b:2e:34:ae:46:cf:43:2c:82:5a:b8:d7:53:b2:
                    a6:d3:f1:36:db:d5:73:25:33:94:9c:16:85:38:9b:
                    e4:83:18:9d:f4:43:1e:98:6a:8d:6b:83:0f:a2:c4:
                    da:39:3a:f6:84:f3:c0:45:85:24:1d:a8:85:f9:f9:
                    8d:70:73:b6:9f:39:43:75:56:ba:45:1c:15:9b:f1:
                    69:99:00:d5:f1:ca:f7:31:04:b3:8a:5a:02:02:05:
                    ed:33:f3:2c:0d:47:66:a1:78:d4:08:32:b6:ff:1a:
                    67:05:d0:a2:9d:b7:28:3d:59:b9:a5:36:95:a4:3a:
                    5d:5a:7c:e7:a3:56:62:5f:8b:d3:eb:7e:72:e9:9a:
                    d4:ef:c3:45:09:0e:97:97:55:f2:3b:ca:43:9c:3b:
                    68:47:69:f6:9c:99:4c:84:88:ff:26:b5:e3:5c:9e:
                    18:42:10:e8:74:3b:08:ef:69:d8:5e:c0:45:91:bb:
                    d3:6a:37:e9:b7:ce:bf:fd:36:33:66:92:1e:a8:33:
                    ad:12:bd:e3:3c:6d:d4:39:8c:95:c8:21:c8:bc:0d:
                    22:39:40:fa:12:8a:a2:1f:94:08:f0:2b:19:d3:2e:
                    a1:ff:3f:6b:19:9c:04:61:a4:0b:2c:01:8d:45:8b:
                    27:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:A7:58:8B:23:A3:45:27:22:C1:9D:94:9C:9F:FB:F5:66:A5:68:EA
            X509v3 Authority Key Identifier:
                keyid:FD:3A:1E:84:65:BF:C4:DF:70:08:94:37:2D:0B:98:08:E8:B6:29:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ToehGW_xN9wCJQ3LQuYCOi2Keo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/513734-a485-4c28-8aa6-9555d30f6f8f/1/xqdYiyOjRSciwZ2UnJ_79WalaOo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/513734-a485-4c28-8aa6-9555d30f6f8f/1/_ToehGW_xN9wCJQ3LQuYCOi2Keo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.173.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:b1:a6:d1:19:43:17:ca:ab:36:01:15:93:c4:62:84:4b:1f:
         d9:fa:a5:86:2c:c0:37:6e:a8:60:c9:cf:e2:e1:47:99:0b:9d:
         2e:ce:e2:63:0f:cc:36:01:73:27:79:45:59:ba:04:84:1a:1f:
         57:de:71:d9:d7:93:5a:52:38:12:4c:9e:51:23:b7:d7:18:1b:
         4f:2c:1a:72:81:95:77:13:a7:34:4b:7f:5c:b7:06:24:d0:ad:
         42:18:58:89:38:8f:ee:1a:12:be:22:34:a6:80:c4:20:a7:e2:
         89:d1:8b:c0:53:0a:48:62:7e:be:55:8b:8b:fd:05:41:49:1f:
         f4:1e:cb:06:a2:e1:4d:17:c7:e8:d2:c9:06:56:e4:c5:d5:78:
         05:00:be:3c:d5:e7:ac:95:67:c2:ca:9e:8b:32:d2:aa:f8:34:
         2c:f1:df:29:ba:d8:0a:cc:5d:58:19:51:4f:12:d9:fc:6e:fa:
         da:c7:cd:ab:43:ad:ab:da:9e:36:80:47:25:af:5e:91:a5:a8:
         80:7b:6d:c6:99:b3:93:b2:21:bd:da:2f:0f:c6:73:fa:ba:97:
         d9:4d:ea:35:56:d1:6e:ae:42:7d:5d:4b:26:5b:ea:4f:ac:85:
         b5:ab:95:b3:d2:d9:ab:d8:19:4f:ff:6e:cf:41:ca:41:49:0f:
         7f:f1:2d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:27:46 2026 by rpki-client