This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/xmUoPe_uoUefJbAVDkhT4XlknC8.roa
File:                     xmUoPe_uoUefJbAVDkhT4XlknC8.roa (raw, json)
Hash identifier:          8avUZYobEaMzXgdIn1drj3OJ1RhpFzcqCel7ZlxOycE=
Subject key identifier:   C6:65:28:3D:EF:EE:A1:47:9F:25:B0:15:0E:48:53:E1:79:64:9C:2F
Certificate issuer:       /CN=6e84b12393bfcb0e6d6f32cc95c0d71174fc9b30
Certificate serial:       019B7F14EF3D12A65AA86AB3CE435F164D8C
Authority key identifier: 6E:84:B1:23:93:BF:CB:0E:6D:6F:32:CC:95:C0:D7:11:74:FC:9B:30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/boSxI5O_yw5tbzLMlcDXEXT8mzA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/xmUoPe_uoUefJbAVDkhT4XlknC8.roa
Signing time:             Fri 02 Jan 2026 14:20:37 +0000
ROA not before:           Fri 02 Jan 2026 14:20:37 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     31554
IP address blocks:        193.200.126.0/23 maxlen: 23
                          193.239.194.0/23 maxlen: 23
                          194.9.92.0/23 maxlen: 23
                          194.42.102.0/23 maxlen: 23
                          194.116.200.0/23 maxlen: 23
                          2001:67c:1e0::/48 maxlen: 48
                          2001:67c:115c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/boSxI5O_yw5tbzLMlcDXEXT8mzA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/boSxI5O_yw5tbzLMlcDXEXT8mzA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/boSxI5O_yw5tbzLMlcDXEXT8mzA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:14:ef:3d:12:a6:5a:a8:6a:b3:ce:43:5f:16:4d:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e84b12393bfcb0e6d6f32cc95c0d71174fc9b30
        Validity
            Not Before: Jan  2 14:20:37 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c665283defeea1479f25b0150e4853e179649c2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:0f:44:28:60:f5:39:ee:52:5c:99:d7:95:87:
                    48:e2:9b:db:62:58:2f:94:85:76:c9:72:19:f9:2c:
                    6c:9a:d7:5b:7e:5f:a1:87:55:c9:5a:26:17:0f:94:
                    b7:37:d1:2e:06:62:a6:44:da:27:61:0c:d0:f4:7e:
                    20:61:c4:dc:0e:ac:40:55:dd:5e:66:e8:c2:ea:79:
                    b7:6d:8c:64:17:fe:2c:0a:21:1f:81:4d:12:ac:c0:
                    1d:48:2b:0c:73:37:b2:a1:20:46:e5:39:3d:95:44:
                    38:2b:28:4d:99:92:40:78:36:ce:2b:e0:da:34:b4:
                    8f:59:61:88:82:ba:44:b8:1a:5e:9f:70:da:76:09:
                    c2:b5:01:c9:21:08:37:9a:47:7b:eb:d4:94:24:ea:
                    9e:4a:72:e4:0a:28:d2:01:7b:65:c4:db:e0:b3:1c:
                    4b:97:cb:cc:a9:44:fb:db:9c:64:ab:3e:dc:68:b5:
                    40:a4:aa:10:46:ad:82:b1:e3:8a:cc:3a:78:98:3d:
                    ab:22:3d:b7:91:98:b2:3c:3b:08:4c:01:46:42:c8:
                    26:f6:bf:56:f0:ca:43:f4:01:4e:8d:0c:ca:f3:5b:
                    b3:26:fc:04:da:24:77:a9:28:c1:94:2e:8b:7c:62:
                    5d:9e:45:50:90:c8:17:2a:e2:c1:c8:fe:aa:4a:c3:
                    f1:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:65:28:3D:EF:EE:A1:47:9F:25:B0:15:0E:48:53:E1:79:64:9C:2F
            X509v3 Authority Key Identifier:
                keyid:6E:84:B1:23:93:BF:CB:0E:6D:6F:32:CC:95:C0:D7:11:74:FC:9B:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/boSxI5O_yw5tbzLMlcDXEXT8mzA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/xmUoPe_uoUefJbAVDkhT4XlknC8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/boSxI5O_yw5tbzLMlcDXEXT8mzA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.200.126.0/23
                  193.239.194.0/23
                  194.9.92.0/23
                  194.42.102.0/23
                  194.116.200.0/23
                IPv6:
                  2001:67c:1e0::/48
                  2001:67c:115c::/48

    Signature Algorithm: sha256WithRSAEncryption
         83:bf:be:3d:cd:35:4d:fa:aa:53:13:91:4e:3c:49:d5:46:23:
         0d:43:45:a8:c2:81:22:25:dc:11:2b:93:3a:b9:e8:4e:27:64:
         39:0c:2b:50:7b:67:9c:ed:3b:6a:80:34:af:41:2b:ad:80:9d:
         16:e5:66:51:5b:44:46:00:ba:c1:23:c2:5e:d8:fb:97:0f:84:
         f9:7e:a1:e3:7f:3c:42:01:c7:6a:a0:56:02:eb:4e:62:85:ea:
         6a:bb:c4:4e:8e:93:23:16:f8:cf:0a:24:7e:15:12:5f:d1:a6:
         2c:3a:c8:6e:03:f3:40:b0:80:bb:e4:55:df:e5:27:93:50:1c:
         2b:e9:a1:60:af:1d:df:11:f4:d0:1b:eb:9b:c0:2e:38:fa:ff:
         18:30:c0:8e:2a:ec:bd:cb:2d:c4:db:56:16:f2:a2:e2:f9:aa:
         fc:4c:30:d2:d6:26:0e:59:a6:34:d9:0e:8a:bd:58:82:77:77:
         14:68:ae:3a:ed:74:a5:4e:40:f4:7c:49:f7:67:a4:fb:53:74:
         31:72:f9:c4:b7:51:0c:2a:fe:ef:00:b0:25:22:e3:10:30:8e:
         c4:00:70:38:22:6d:c6:cb:87:71:71:88:5d:b4:3b:1c:b6:78:
         a9:67:82:e5:a9:a4:d5:eb:21:ca:73:c6:cc:75:e8:c5:60:be:
         44:5b:e9:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:37:38 2026 by rpki-client