This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c6eb97-48e8-4e5b-97cd-d5d8e04e5975/1/tw9KOMExOeSDBdFskgfTK6sa4AU.roa
File:                     tw9KOMExOeSDBdFskgfTK6sa4AU.roa (raw, json)
Hash identifier:          dKKeZeFLB80jdbP8ogbRHnu5mvq79sWDL34NWiCVUeo=
Subject key identifier:   B7:0F:4A:38:C1:31:39:E4:83:05:D1:6C:92:07:D3:2B:AB:1A:E0:05
Certificate issuer:       /CN=15bd7f78b7a044ae134c88b624e831a761143b79
Certificate serial:       019B7BA51AFE1645587CEE00BA0DDC3BEB32
Authority key identifier: 15:BD:7F:78:B7:A0:44:AE:13:4C:88:B6:24:E8:31:A7:61:14:3B:79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fb1_eLegRK4TTIi2JOgxp2EUO3k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/c6eb97-48e8-4e5b-97cd-d5d8e04e5975/1/tw9KOMExOeSDBdFskgfTK6sa4AU.roa
Signing time:             Thu 01 Jan 2026 22:19:36 +0000
ROA not before:           Thu 01 Jan 2026 22:19:36 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     203618
IP address blocks:        185.92.230.0/23 maxlen: 23
                          185.92.230.0/24 maxlen: 24
                          185.92.231.0/24 maxlen: 24
                          194.179.132.0/23 maxlen: 23
                          194.179.132.0/24 maxlen: 24
                          194.179.133.0/24 maxlen: 24
                          202.92.212.0/24 maxlen: 24
                          2a03:8d60::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/c6eb97-48e8-4e5b-97cd-d5d8e04e5975/1/Fb1_eLegRK4TTIi2JOgxp2EUO3k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/c6eb97-48e8-4e5b-97cd-d5d8e04e5975/1/Fb1_eLegRK4TTIi2JOgxp2EUO3k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fb1_eLegRK4TTIi2JOgxp2EUO3k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:a5:1a:fe:16:45:58:7c:ee:00:ba:0d:dc:3b:eb:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15bd7f78b7a044ae134c88b624e831a761143b79
        Validity
            Not Before: Jan  1 22:19:36 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b70f4a38c13139e48305d16c9207d32bab1ae005
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5f:39:23:4f:94:ac:00:41:eb:39:03:78:30:
                    ee:ab:81:01:1d:0c:6e:87:54:71:4a:8d:11:b6:d2:
                    6e:2c:b2:ff:f2:52:11:1d:a6:55:0a:69:59:c9:cb:
                    bd:68:2d:ca:6a:6b:12:b1:71:83:f6:e3:ec:61:c7:
                    86:08:5d:fd:62:9d:b4:af:94:50:2f:58:ea:0a:ae:
                    52:77:9b:ee:d8:33:f1:15:d5:0c:7f:79:d5:43:c8:
                    fc:df:9c:22:81:62:5e:fb:5b:a6:88:82:f8:03:f4:
                    3e:0e:b9:33:53:c7:22:38:85:fd:5f:d4:93:13:ad:
                    58:4d:c7:f3:30:61:26:b5:7a:7c:e6:b2:8b:1e:af:
                    d7:23:9f:22:5d:0b:f0:1e:10:e7:4f:57:15:e9:9d:
                    91:5d:22:b1:18:81:87:61:69:35:d3:f0:f0:7a:9d:
                    de:35:7a:2e:3c:76:e8:ab:38:a9:cc:70:2a:ab:88:
                    a8:6b:43:0b:8a:a1:ee:55:36:34:a4:5f:44:6d:9d:
                    12:c1:32:1d:9f:d9:8c:11:57:fc:66:ea:b7:f5:50:
                    64:49:81:e1:99:2c:d5:46:e1:1f:c0:42:5d:eb:e4:
                    9d:c2:02:b3:2d:ee:4e:aa:87:2e:75:5c:fb:75:93:
                    75:f5:3c:d3:fa:11:a7:08:ec:aa:5b:45:40:c0:c5:
                    bc:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:0F:4A:38:C1:31:39:E4:83:05:D1:6C:92:07:D3:2B:AB:1A:E0:05
            X509v3 Authority Key Identifier:
                keyid:15:BD:7F:78:B7:A0:44:AE:13:4C:88:B6:24:E8:31:A7:61:14:3B:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fb1_eLegRK4TTIi2JOgxp2EUO3k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c6eb97-48e8-4e5b-97cd-d5d8e04e5975/1/tw9KOMExOeSDBdFskgfTK6sa4AU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c6eb97-48e8-4e5b-97cd-d5d8e04e5975/1/Fb1_eLegRK4TTIi2JOgxp2EUO3k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.92.230.0/23
                  194.179.132.0/23
                  202.92.212.0/24
                IPv6:
                  2a03:8d60::/48

    Signature Algorithm: sha256WithRSAEncryption
         24:a1:5f:0b:7b:59:f4:b6:78:4e:7d:dd:3a:66:aa:39:b2:87:
         cb:66:a5:30:86:19:6f:30:96:db:fe:d8:d0:73:be:b2:6c:26:
         cc:e2:eb:4c:4e:8a:39:6f:8c:f4:ce:73:a9:e9:2d:96:f5:96:
         e2:00:03:3d:49:a1:9c:e4:c5:e6:eb:94:df:54:b8:52:36:ea:
         cd:e6:85:6c:aa:42:86:4a:ba:00:82:e7:37:8e:5f:96:3e:a7:
         02:48:c1:54:4e:51:7f:d3:6a:0b:46:a3:e6:87:21:e5:3c:b8:
         7c:6a:c9:e1:eb:4e:86:29:90:91:91:8c:da:65:7d:d5:cf:49:
         e9:9c:f6:b1:12:d5:47:7e:98:55:b4:ea:7d:2d:c6:13:68:32:
         32:72:40:a0:fb:33:35:6a:02:d4:3b:a2:08:e2:ed:5d:4e:d9:
         e4:2f:d8:2c:a3:8b:06:d1:21:bf:6b:f7:5b:0a:cf:0c:0a:ec:
         9c:fd:9f:fd:81:91:44:72:cd:6c:95:57:0a:a1:bd:7f:3f:07:
         27:1a:8a:08:cc:cd:f3:17:b6:d6:17:1b:f5:eb:4a:24:10:dc:
         b0:47:01:cc:3f:8f:71:7d:e2:81:e3:ce:b6:3d:32:28:bc:dd:
         4e:6e:10:e0:5a:9e:88:99:f3:fd:17:b9:13:8f:20:c0:46:fe:
         be:28:94:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:02:20 2026 by rpki-client