This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/1-SeUDqI8Ro4aGCyTtd-jgFozlto.roa
File:                     1-SeUDqI8Ro4aGCyTtd-jgFozlto.roa (raw, json)
Hash identifier:          8a5+u2VImSUXdz/RNQV3GzWRx7Dr6+wCatlfsz939ds=
Subject key identifier:   F9:27:94:0E:A2:3C:46:8E:1A:18:2C:93:B5:DF:A3:80:5A:33:96:DA
Certificate issuer:       /CN=03d602b9e1da2b568df544bda50e415799bbb1e2
Certificate serial:       019B7FF12B7527081B8C0F5EC55E8B5E4A50
Authority key identifier: 03:D6:02:B9:E1:DA:2B:56:8D:F5:44:BD:A5:0E:41:57:99:BB:B1:E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A9YCueHaK1aN9US9pQ5BV5m7seI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/1-SeUDqI8Ro4aGCyTtd-jgFozlto.roa
Signing time:             Fri 02 Jan 2026 18:21:10 +0000
ROA not before:           Fri 02 Jan 2026 18:21:10 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     16276
IP address blocks:        82.117.230.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A9YCueHaK1aN9US9pQ5BV5m7seI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 21:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:f1:2b:75:27:08:1b:8c:0f:5e:c5:5e:8b:5e:4a:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03d602b9e1da2b568df544bda50e415799bbb1e2
        Validity
            Not Before: Jan  2 18:21:10 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f927940ea23c468e1a182c93b5dfa3805a3396da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2c:a9:29:01:ea:9e:41:eb:c4:f2:a0:81:33:
                    de:71:05:c2:f9:4d:07:8e:89:2b:12:55:46:ab:95:
                    3f:08:40:e3:1f:13:72:96:7a:75:90:ec:8d:51:8b:
                    e6:c3:1a:36:05:7f:cd:df:82:6b:6d:48:ef:c5:5c:
                    de:60:79:00:50:fe:49:2f:a6:b4:f7:a5:f6:83:21:
                    76:ca:5e:e3:6f:e7:b9:ea:07:29:27:fb:a0:66:57:
                    30:9a:5f:61:94:1a:76:f5:91:d3:94:41:c0:0b:5e:
                    b1:71:d6:ee:6b:77:76:10:da:17:84:40:44:aa:2b:
                    a6:4e:47:b3:63:e2:bd:ef:ec:b8:24:f8:fa:93:99:
                    5e:3b:c8:c0:bf:c8:74:94:40:04:9b:e0:ca:5e:bd:
                    f9:cc:ba:10:58:da:0a:70:78:bc:ee:9c:b6:a2:26:
                    c3:d2:93:be:00:68:c4:ff:85:dd:59:47:4e:71:e8:
                    ab:73:a0:e2:e9:05:a8:0c:b1:67:be:db:8a:2c:5b:
                    b5:ee:15:d4:30:39:f9:79:7f:e8:0e:b1:fc:e8:7f:
                    08:33:94:c3:c4:77:33:c8:ae:61:19:94:87:48:e6:
                    1e:ae:6e:22:e3:1e:10:a2:7e:a6:b2:ee:dd:87:31:
                    db:d3:df:09:cf:fd:4c:aa:e3:9b:2e:90:bb:07:a8:
                    5a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:27:94:0E:A2:3C:46:8E:1A:18:2C:93:B5:DF:A3:80:5A:33:96:DA
            X509v3 Authority Key Identifier:
                keyid:03:D6:02:B9:E1:DA:2B:56:8D:F5:44:BD:A5:0E:41:57:99:BB:B1:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9YCueHaK1aN9US9pQ5BV5m7seI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/1-SeUDqI8Ro4aGCyTtd-jgFozlto.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.117.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9c:c4:73:a9:f6:2e:95:ab:c0:59:f5:47:74:1e:13:ba:42:7a:
         d4:0d:ae:98:4c:81:c7:d7:5b:cb:78:c7:3c:30:5e:f4:8a:8e:
         35:61:44:f1:bf:6e:8c:f5:b6:ff:e5:83:7f:36:e3:49:89:ae:
         f9:5d:c4:9b:76:29:64:a8:63:48:5b:65:2c:fc:cd:ff:62:f3:
         09:8c:33:4e:c6:23:96:91:25:7f:fb:9d:19:86:37:46:85:54:
         f0:e4:71:e1:14:af:ed:6d:fd:02:41:6b:c1:9b:d0:d0:fc:44:
         ad:08:bd:b9:1d:0e:31:f2:d7:d2:61:0e:b1:85:2d:9e:bb:e8:
         96:7b:2d:4a:23:4e:e6:a5:26:d5:e5:09:05:7c:70:5e:d2:07:
         dc:d1:69:f1:c0:fd:5c:45:4e:62:d9:c3:34:e1:bc:d5:92:b5:
         11:48:93:b9:ab:5e:55:6b:2f:ff:cd:f6:f7:dd:0a:97:4c:ad:
         2a:43:62:08:ac:e1:97:b3:bc:7d:c6:f8:ba:fb:0d:8f:f7:da:
         f9:2e:a8:fc:57:1d:2b:3a:b8:1b:7d:18:5a:fe:16:29:d8:de:
         9d:62:ad:34:dd:1d:0a:49:34:dd:92:a4:18:1f:9f:03:26:df:
         63:87:63:2f:ec:f9:3b:8f:b6:01:68:d1:60:f0:96:4a:75:8d:
         34:e6:b9:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:18:55 2026 by rpki-client