This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/SmNIc3h3nC9uapzW1IDySyk5TKU.roa
File:                     SmNIc3h3nC9uapzW1IDySyk5TKU.roa (raw, json)
Hash identifier:          gtmZx12nz/mXNKPw8RjjvKAoUTmbsDaUhf1qDYEIT1M=
Subject key identifier:   4A:63:48:73:78:77:9C:2F:6E:6A:9C:D6:D4:80:F2:4B:29:39:4C:A5
Certificate issuer:       /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial:       019B797EB08F7A925708B794DFF1E6FB0EA6
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/SmNIc3h3nC9uapzW1IDySyk5TKU.roa
Signing time:             Thu 01 Jan 2026 12:18:24 +0000
ROA not before:           Thu 01 Jan 2026 12:18:24 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     12962
IP address blocks:        87.227.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 12:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:7e:b0:8f:7a:92:57:08:b7:94:df:f1:e6:fb:0e:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
        Validity
            Not Before: Jan  1 12:18:24 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4a63487378779c2f6e6a9cd6d480f24b29394ca5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:1b:27:98:36:66:00:98:58:81:ee:10:bb:fb:
                    85:f9:9b:55:02:b1:bf:c5:26:e6:c3:31:0f:ba:e8:
                    57:01:5f:4b:ca:da:48:d9:0a:95:95:30:53:73:96:
                    ef:dc:2d:39:24:ce:8d:f0:c0:ac:49:5b:1a:c3:df:
                    b8:19:39:7b:7b:ed:80:35:38:e7:ba:c7:e1:35:3a:
                    1a:10:37:b7:6e:24:85:6a:29:aa:8e:f4:e9:30:da:
                    51:9a:22:66:83:c4:de:9d:16:09:ff:ac:35:e6:fd:
                    9f:82:81:9f:64:7b:48:91:45:14:97:c4:aa:72:6a:
                    e5:95:9f:9e:65:5c:eb:01:64:e0:96:18:98:a0:ed:
                    b2:9b:62:50:d5:4b:9d:c4:a5:6d:d3:f5:fc:f2:48:
                    a2:31:01:cb:78:a2:d8:ba:eb:74:c8:c2:0e:6d:f5:
                    03:33:ee:c9:c1:00:6d:a8:a0:ec:9e:35:b8:ad:37:
                    45:f1:f6:2f:0a:b1:cc:1f:05:cf:ef:15:9a:d5:bc:
                    e2:35:9b:c3:8d:c5:ba:e4:c1:6f:30:0e:f1:ec:61:
                    b2:6f:6d:c4:ff:06:7c:68:0e:8e:d4:22:56:f0:21:
                    26:e2:76:52:9c:ca:f5:c7:69:23:09:60:64:5d:b0:
                    94:3f:48:51:b4:f0:fb:5d:c3:d4:2d:bc:36:f0:5b:
                    35:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:63:48:73:78:77:9C:2F:6E:6A:9C:D6:D4:80:F2:4B:29:39:4C:A5
            X509v3 Authority Key Identifier:
                keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/SmNIc3h3nC9uapzW1IDySyk5TKU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.227.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:25:69:72:01:43:76:41:e8:16:0a:23:d1:aa:a7:08:af:73:
         a2:5f:8d:cb:8d:9f:c2:69:a9:3d:3f:dd:ac:0a:46:ba:d9:49:
         56:bd:b9:f0:b9:14:c0:b2:d2:5f:08:1d:7d:ae:f1:a0:80:cb:
         ed:74:11:f8:23:6c:47:31:f4:8f:63:83:c7:d7:de:64:d6:73:
         5d:4a:dd:9a:1c:b3:0e:f1:db:b1:89:06:84:01:07:3d:72:cc:
         57:4d:36:a5:3a:a1:37:dc:48:60:3f:3e:3e:c0:18:db:26:ab:
         e3:53:f3:2d:d2:27:fa:94:18:a5:44:a3:22:50:f0:d6:86:e2:
         21:d6:36:f7:f2:b9:d9:d1:89:63:42:8f:da:51:89:7a:02:f8:
         70:0c:05:55:94:8a:2c:70:16:00:3a:0e:8a:7d:78:9e:0b:43:
         9f:10:45:f6:be:00:1b:44:01:2d:0d:5f:60:64:89:67:3b:d0:
         2b:1d:a7:5f:db:99:8a:24:c4:e7:73:2f:1d:01:91:e5:7e:7b:
         c9:de:52:18:6c:f0:c0:51:aa:f7:64:97:de:23:2c:fd:03:e5:
         2c:70:a2:1f:e7:4b:93:6c:77:22:a2:ef:91:7d:d4:b0:56:ee:
         35:77:23:08:c3:ce:6d:83:cd:2c:57:df:c7:d9:6a:3f:2e:0e:
         6c:37:8f:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:15:21 2026 by rpki-client