This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/03bpI-w18-fLfKrGneHS5OC3lK4.roa
File:                     03bpI-w18-fLfKrGneHS5OC3lK4.roa (raw, json)
Hash identifier:          015UeQCesyPqqo0lNLcoMmYZaU1tmuzuzIUUZ2FgF3o=
Subject key identifier:   D3:76:E9:23:EC:35:F3:E7:CB:7C:AA:C6:9D:E1:D2:E4:E0:B7:94:AE
Certificate issuer:       /CN=c5de32bb9cc99e115ddbaf6b7fa23051789f2f61
Certificate serial:       019A7C16748747CE4F6F5FD35A5DBF83AB47
Authority key identifier: C5:DE:32:BB:9C:C9:9E:11:5D:DB:AF:6B:7F:A2:30:51:78:9F:2F:61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xd4yu5zJnhFd269rf6IwUXifL2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/03bpI-w18-fLfKrGneHS5OC3lK4.roa
Signing time:             Thu 13 Nov 2025 07:20:37 +0000
ROA not before:           Thu 13 Nov 2025 07:20:37 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     49871
IP address blocks:        193.104.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xd4yu5zJnhFd269rf6IwUXifL2E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 14:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:7c:16:74:87:47:ce:4f:6f:5f:d3:5a:5d:bf:83:ab:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5de32bb9cc99e115ddbaf6b7fa23051789f2f61
        Validity
            Not Before: Nov 13 07:20:37 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=d376e923ec35f3e7cb7caac69de1d2e4e0b794ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:8c:ed:2c:90:d7:c9:bf:05:aa:20:78:09:a1:
                    30:14:30:21:88:ed:e3:df:a8:8a:1a:c4:c5:5b:08:
                    57:52:f7:6c:f5:2b:b7:26:df:57:1f:29:e9:a7:19:
                    d9:9f:40:c1:b3:35:26:ac:8c:13:6e:4d:b8:bd:bd:
                    9d:33:cd:e5:fc:64:db:67:4a:44:29:86:ff:0e:58:
                    d0:64:28:70:61:ed:98:a9:c9:64:4e:2c:ec:89:b0:
                    45:f7:8b:b7:f9:bd:08:c6:cb:1d:78:ac:6a:91:62:
                    81:c1:94:44:0f:c8:a0:57:19:01:39:41:83:e8:07:
                    e2:bd:58:da:1c:c1:2c:2f:40:b6:25:46:cb:96:f7:
                    57:ef:77:3f:cd:2b:8c:b3:0f:ce:b6:15:c9:d9:82:
                    b5:cd:38:06:7c:a7:c5:5e:01:6a:00:c3:57:28:0a:
                    b3:32:cd:b1:da:d9:88:1b:9c:a5:f8:4a:16:ec:5e:
                    4a:7c:bb:ba:f6:51:78:38:23:92:5e:6b:cc:d0:2f:
                    11:70:18:70:a8:71:64:75:7b:2d:c4:20:2f:ee:cd:
                    32:ae:4e:d5:e4:f6:9b:8c:23:6a:58:57:9f:1f:72:
                    a2:4f:1d:4e:27:0f:98:0e:0a:41:46:4b:66:26:a1:
                    65:33:7a:ab:3f:e8:ea:90:45:47:44:5b:41:83:a3:
                    90:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:76:E9:23:EC:35:F3:E7:CB:7C:AA:C6:9D:E1:D2:E4:E0:B7:94:AE
            X509v3 Authority Key Identifier:
                keyid:C5:DE:32:BB:9C:C9:9E:11:5D:DB:AF:6B:7F:A2:30:51:78:9F:2F:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xd4yu5zJnhFd269rf6IwUXifL2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/03bpI-w18-fLfKrGneHS5OC3lK4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.104.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d7:c4:4b:a2:31:7b:dc:53:d6:90:49:d0:d2:ff:20:b9:dd:6d:
         f4:c6:ba:24:92:30:98:8b:ff:64:95:42:d0:be:2f:d8:65:f7:
         23:92:e0:8c:42:d2:2b:d9:55:37:86:2a:35:eb:f7:fc:2e:5d:
         96:c1:e7:d7:88:4c:fa:02:89:c1:e9:19:12:23:6f:6f:96:67:
         fa:21:94:dd:bf:b6:65:ea:76:5d:1e:f3:ff:df:67:19:35:6f:
         be:07:bc:6f:4c:95:fe:b0:d1:70:69:f6:f8:76:59:a1:5b:33:
         ce:48:6c:40:82:c1:a2:24:cb:d1:a0:24:78:95:a3:f4:07:ec:
         e1:dd:d3:db:af:7e:28:57:6c:a9:09:37:3a:71:95:81:10:11:
         cb:e2:02:d0:a2:9e:60:4b:59:0e:25:48:2f:b5:4c:bb:8b:01:
         83:d5:de:cf:88:f9:3f:25:94:27:d1:3c:59:28:2f:50:51:e7:
         ce:28:e5:20:59:77:b8:b5:65:6a:ae:9c:fa:37:fc:e9:b9:f6:
         46:37:f2:7e:4c:36:7b:a5:42:b8:c2:23:9b:64:de:70:f9:83:
         c5:0a:4a:b9:7a:ba:f7:fe:ea:dd:f9:ae:65:34:95:67:d1:b6:
         70:91:cc:1b:69:c3:e5:b1:cc:cb:82:28:79:8e:10:1b:75:96:
         3c:89:78:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:26:54 2025 by rpki-client