This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/79ab76-9bf9-47cd-b544-5ee09fead561/1/K3IkaDvOsxRDnW5ivwAMwt2TUdw.roa
File:                     K3IkaDvOsxRDnW5ivwAMwt2TUdw.roa (raw, json)
Hash identifier:          4pub90rA78k1OuNqh4u/EQwhdsIyW78nZyVBnumMV8E=
Subject key identifier:   2B:72:24:68:3B:CE:B3:14:43:9D:6E:62:BF:00:0C:C2:DD:93:51:DC
Certificate issuer:       /CN=9912d945ac2a49f3b4da2221c27b829aafccb2f2
Certificate serial:       019B7C1355DD8148E195BE587B288D0EE47E
Authority key identifier: 99:12:D9:45:AC:2A:49:F3:B4:DA:22:21:C2:7B:82:9A:AF:CC:B2:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mRLZRawqSfO02iIhwnuCmq_MsvI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/79ab76-9bf9-47cd-b544-5ee09fead561/1/K3IkaDvOsxRDnW5ivwAMwt2TUdw.roa
Signing time:             Fri 02 Jan 2026 00:20:00 +0000
ROA not before:           Fri 02 Jan 2026 00:20:00 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     24929
IP address blocks:        195.177.100.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/79ab76-9bf9-47cd-b544-5ee09fead561/1/mRLZRawqSfO02iIhwnuCmq_MsvI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/79ab76-9bf9-47cd-b544-5ee09fead561/1/mRLZRawqSfO02iIhwnuCmq_MsvI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mRLZRawqSfO02iIhwnuCmq_MsvI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:13:55:dd:81:48:e1:95:be:58:7b:28:8d:0e:e4:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9912d945ac2a49f3b4da2221c27b829aafccb2f2
        Validity
            Not Before: Jan  2 00:20:00 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=2b7224683bceb314439d6e62bf000cc2dd9351dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:60:cd:c7:4b:ea:b0:d8:c7:6f:56:ab:59:a0:
                    1e:fc:f6:4d:9e:bd:56:7b:e2:0b:6d:75:47:32:7e:
                    8a:a7:e5:5e:01:03:00:f2:db:99:57:43:af:4a:76:
                    12:4d:59:41:c2:f8:2f:04:5b:3a:49:e6:80:df:5a:
                    8b:44:bb:5f:6e:92:ba:36:9f:a6:47:51:a6:30:30:
                    cd:12:15:ee:3a:83:01:47:30:d7:b2:5c:0c:df:68:
                    f4:42:f9:5e:b5:0d:94:92:de:88:8c:d3:df:8f:b9:
                    43:25:0f:98:18:1d:ad:1c:d5:b0:47:56:c0:04:25:
                    47:79:c5:da:4b:92:55:d2:7b:b2:e6:7a:2e:65:d6:
                    cf:66:38:07:b0:5c:af:fc:be:b6:20:63:1f:06:01:
                    51:08:1b:d9:28:d0:44:f4:e3:70:c2:d7:f4:38:65:
                    08:56:c3:8c:7a:cf:e8:ba:49:6a:c5:a6:31:c7:43:
                    39:65:53:68:67:36:62:95:6f:ab:c7:0a:74:9f:e5:
                    58:0c:b5:66:36:1b:87:da:24:c8:0b:0f:37:1c:3e:
                    34:56:80:6c:04:30:e7:c7:d2:12:69:d9:91:1d:df:
                    4f:4d:f5:09:a7:b2:df:bf:46:22:3d:1c:ac:6c:61:
                    64:e6:df:9e:21:ff:10:a6:02:42:a5:7b:9f:b3:a4:
                    0c:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:72:24:68:3B:CE:B3:14:43:9D:6E:62:BF:00:0C:C2:DD:93:51:DC
            X509v3 Authority Key Identifier:
                keyid:99:12:D9:45:AC:2A:49:F3:B4:DA:22:21:C2:7B:82:9A:AF:CC:B2:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRLZRawqSfO02iIhwnuCmq_MsvI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79ab76-9bf9-47cd-b544-5ee09fead561/1/K3IkaDvOsxRDnW5ivwAMwt2TUdw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79ab76-9bf9-47cd-b544-5ee09fead561/1/mRLZRawqSfO02iIhwnuCmq_MsvI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.177.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:19:68:09:65:73:f5:57:6f:f1:31:ee:b4:19:70:4e:be:db:
         9a:d6:5a:7f:84:9c:fc:7d:c9:d5:97:95:e7:46:ed:89:38:ed:
         3e:ba:70:58:c8:da:6d:ab:c6:61:0f:d7:20:ab:ad:b7:ab:64:
         c4:f6:e5:a9:b5:c3:9a:35:a8:a9:51:c4:b7:38:50:85:1e:5d:
         68:0c:4c:60:70:7c:a4:ea:d3:88:f7:69:ab:89:2d:4b:06:1a:
         97:52:f5:02:ae:4b:fd:d5:c0:e9:78:54:87:d0:c6:12:b5:ff:
         81:cd:08:e3:d4:ff:5a:c5:8b:b8:00:6b:04:3c:ba:d6:c6:d8:
         31:5a:28:6c:ab:1e:1a:56:ce:45:4e:23:66:e1:ff:c1:6d:4e:
         fa:11:5d:85:e4:6e:e5:c6:e6:bc:c7:39:24:f0:66:52:eb:86:
         63:e7:ef:82:cb:1e:16:19:26:02:30:13:23:9c:b8:c9:c1:35:
         5a:99:64:e9:41:a8:64:f9:16:4a:f3:bc:cc:56:47:56:83:b3:
         5c:29:55:9d:bb:30:e5:3c:1f:ea:46:86:76:19:35:02:31:68:
         e3:77:fb:4e:36:d3:79:14:08:fa:0f:6a:78:03:19:fc:e1:35:
         49:81:b7:82:a0:a0:52:05:68:3a:32:4d:a7:3b:46:aa:d3:1e:
         f4:46:f6:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:32:01 2026 by rpki-client