This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/n9NpVtjQ4CgC347DPdZBbkrl1rk.roa
File:                     n9NpVtjQ4CgC347DPdZBbkrl1rk.roa (raw, json)
Hash identifier:          F/VcD/rkVFmMD8EIR8zYpeskYz8L7PTmG19l/6//DPo=
Subject key identifier:   9F:D3:69:56:D8:D0:E0:28:02:DF:8E:C3:3D:D6:41:6E:4A:E5:D6:B9
Certificate issuer:       /CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Certificate serial:       019B7E38252B4A5551EE28598AB4ECB877E5
Authority key identifier: 63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/n9NpVtjQ4CgC347DPdZBbkrl1rk.roa
Signing time:             Fri 02 Jan 2026 10:19:27 +0000
ROA not before:           Fri 02 Jan 2026 10:19:27 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     25846
IP address blocks:        185.126.158.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 23:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:38:25:2b:4a:55:51:ee:28:59:8a:b4:ec:b8:77:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
        Validity
            Not Before: Jan  2 10:19:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=9fd36956d8d0e02802df8ec33dd6416e4ae5d6b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:31:1f:dc:3e:10:a0:61:77:73:5a:0d:b0:00:
                    ca:e8:d8:f3:62:f6:fb:01:4c:09:4c:af:14:e4:52:
                    5f:3d:35:87:7a:cd:1e:e7:ef:05:61:d6:03:77:27:
                    e9:10:15:ae:57:bd:36:a1:e1:78:37:5a:0f:34:95:
                    2e:45:90:40:3d:60:0a:0a:99:97:1f:65:8f:c2:03:
                    81:d7:16:2a:39:05:ea:b9:53:56:41:0e:f0:f0:09:
                    34:54:6c:64:5e:a1:34:c4:65:8a:c0:5b:11:a5:36:
                    cc:30:18:ef:0a:93:05:60:3d:97:10:a7:20:94:6f:
                    b2:98:eb:a2:53:06:c1:8f:1a:17:4e:b5:e1:81:73:
                    7e:ce:5e:b8:c7:48:65:ca:89:a7:d4:72:3a:65:32:
                    ee:c6:4f:8b:47:76:5b:4a:a2:48:f1:b3:42:8e:88:
                    a7:e1:d9:c7:67:fe:50:a8:42:20:57:84:08:2b:96:
                    10:85:ed:ca:70:ac:ee:91:f6:61:71:ca:62:12:22:
                    f6:93:d4:51:f1:93:78:48:37:ee:2c:bd:26:91:f2:
                    47:b0:bf:98:bc:60:e7:7c:c4:11:9f:4f:bf:1b:71:
                    fd:26:2d:af:17:cf:b0:64:65:e0:be:7c:49:26:19:
                    0f:89:39:3b:34:bc:45:5d:3a:88:4b:92:79:2a:c0:
                    75:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:D3:69:56:D8:D0:E0:28:02:DF:8E:C3:3D:D6:41:6E:4A:E5:D6:B9
            X509v3 Authority Key Identifier:
                keyid:63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/n9NpVtjQ4CgC347DPdZBbkrl1rk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.126.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5b:c8:96:97:c4:61:0c:5c:81:15:98:5b:b2:25:72:0f:fb:33:
         e2:8b:e4:7e:1b:5f:dc:96:cb:ac:c5:39:31:39:62:41:79:eb:
         5a:ca:78:61:d3:1c:3c:12:d6:ea:c3:5e:42:11:66:f1:d9:9f:
         02:88:d0:ef:ec:35:02:71:b0:3d:f6:f0:9e:51:be:8c:17:9a:
         d7:b1:22:a0:c8:62:b3:fa:57:1c:62:82:00:44:7f:fb:34:ee:
         31:42:9d:fb:3f:b5:6b:07:da:11:77:5f:71:86:5f:36:2a:1d:
         59:99:bf:1f:47:54:c2:8e:0f:e5:a4:7a:1e:ac:76:1e:8d:33:
         c5:4c:ba:a5:4a:28:72:f6:df:65:74:27:93:13:db:f1:ad:bf:
         43:cc:f2:6b:6d:dc:73:e2:02:cb:9d:e9:d4:3a:e9:6b:5d:e4:
         26:ae:87:62:2b:17:17:15:58:ab:de:72:a0:50:15:15:73:e9:
         98:7c:2f:69:84:e8:77:ec:fc:96:66:6e:24:a3:1e:26:53:35:
         33:79:a5:ab:ac:af:de:c7:cb:ab:45:c3:65:16:e6:d5:da:a7:
         89:50:c0:c5:ba:49:9e:31:47:0b:ff:e7:9c:ee:08:62:ea:63:
         fe:6d:10:fb:7b:b3:9a:6b:02:89:42:96:3e:dc:9e:58:a0:9e:
         21:79:0e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:07:39 2026 by rpki-client