This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/12e72c-7491-47e2-ac53-ac0c60100478/1/smFvN5NH47jtWpxFBCY810YgJEA.roa
File:                     smFvN5NH47jtWpxFBCY810YgJEA.roa (raw, json)
Hash identifier:          IOHCm8FQ7HxP6SJC8exg5xebz9QSffOWCznME7vCHwI=
Subject key identifier:   B2:61:6F:37:93:47:E3:B8:ED:5A:9C:45:04:26:3C:D7:46:20:24:40
Certificate issuer:       /CN=eb50d3084bf8aa9ea777d245b60d511be189eab2
Certificate serial:       019B7C113D86AD6B46952B8775BFCEB95586
Authority key identifier: EB:50:D3:08:4B:F8:AA:9E:A7:77:D2:45:B6:0D:51:1B:E1:89:EA:B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/61DTCEv4qp6nd9JFtg1RG-GJ6rI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/12e72c-7491-47e2-ac53-ac0c60100478/1/smFvN5NH47jtWpxFBCY810YgJEA.roa
Signing time:             Fri 02 Jan 2026 00:17:43 +0000
ROA not before:           Fri 02 Jan 2026 00:17:43 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     56999
IP address blocks:        2a0a:7d40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/12e72c-7491-47e2-ac53-ac0c60100478/1/61DTCEv4qp6nd9JFtg1RG-GJ6rI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/12e72c-7491-47e2-ac53-ac0c60100478/1/61DTCEv4qp6nd9JFtg1RG-GJ6rI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/61DTCEv4qp6nd9JFtg1RG-GJ6rI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:11:3d:86:ad:6b:46:95:2b:87:75:bf:ce:b9:55:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb50d3084bf8aa9ea777d245b60d511be189eab2
        Validity
            Not Before: Jan  2 00:17:43 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b2616f379347e3b8ed5a9c4504263cd746202440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d4:d2:59:1a:6e:cb:a2:28:56:92:27:92:d2:
                    39:9c:5f:3f:74:cf:71:fa:55:c1:71:a8:50:fa:6c:
                    fd:04:df:2b:78:c9:3c:6d:9e:3a:19:c5:40:8e:dd:
                    c7:b7:5a:aa:ab:4d:76:2b:96:55:16:7a:42:b8:8c:
                    e5:41:3f:81:9f:70:a1:65:3e:78:e1:0c:be:77:da:
                    ea:8d:74:db:95:8a:d4:8d:75:3c:76:d1:21:6a:d4:
                    ad:ba:af:6b:67:cd:46:ac:f8:59:14:6a:81:d9:16:
                    d1:ad:89:4f:63:ab:c0:28:e5:2e:68:e4:5d:65:03:
                    b7:7f:58:e4:2c:1c:1b:35:c1:c8:e7:63:b9:19:c2:
                    28:30:94:94:97:df:8b:3b:d4:5b:e5:cf:c1:86:58:
                    32:f9:1c:a4:85:2f:af:a9:c6:54:f5:41:df:30:62:
                    83:2e:7d:4f:a9:15:7f:34:e1:30:dc:05:57:60:c4:
                    ab:25:8c:df:5a:54:9b:b0:55:fd:22:15:8c:6b:63:
                    82:2c:6e:a7:45:dd:39:c9:a0:c5:b9:b0:47:9f:94:
                    a4:d1:44:22:ff:5d:1f:6d:7f:23:4a:b9:15:29:90:
                    23:16:55:08:9d:42:c2:60:dd:55:d6:c8:e0:d8:39:
                    58:c2:d6:8e:23:5a:71:15:5c:27:00:de:e0:32:71:
                    67:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:61:6F:37:93:47:E3:B8:ED:5A:9C:45:04:26:3C:D7:46:20:24:40
            X509v3 Authority Key Identifier:
                keyid:EB:50:D3:08:4B:F8:AA:9E:A7:77:D2:45:B6:0D:51:1B:E1:89:EA:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61DTCEv4qp6nd9JFtg1RG-GJ6rI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/12e72c-7491-47e2-ac53-ac0c60100478/1/smFvN5NH47jtWpxFBCY810YgJEA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/12e72c-7491-47e2-ac53-ac0c60100478/1/61DTCEv4qp6nd9JFtg1RG-GJ6rI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:7d40::/32

    Signature Algorithm: sha256WithRSAEncryption
         36:ac:c4:0c:06:2b:c9:76:55:cc:4e:25:c8:02:52:7f:3e:c5:
         0a:60:26:6b:a6:be:6c:f3:46:11:62:82:8e:4e:a0:bb:c4:58:
         9f:67:1d:51:39:77:75:06:c7:39:51:8f:6c:71:6f:db:a7:54:
         f9:61:31:99:bf:4d:f2:68:46:2e:6d:46:11:5a:e6:47:de:13:
         4a:ff:75:71:e9:b0:cb:48:b9:a3:9b:82:88:63:aa:a8:3c:1b:
         58:df:7c:73:c1:b5:c0:38:c4:28:be:96:c3:24:fe:45:b3:55:
         c5:81:9c:f9:ba:31:03:c5:26:bb:2e:4a:14:75:00:38:49:f1:
         6c:ec:87:b1:69:ff:91:6e:c6:e4:89:69:60:60:b2:f3:3c:4d:
         76:4d:e2:52:35:2d:e2:b7:0c:2e:7d:c8:d1:de:e2:d8:c4:6e:
         26:e3:05:25:a8:b5:0e:1a:6a:7e:95:01:5f:eb:e0:a9:b1:3f:
         7d:34:b1:65:8b:66:f6:aa:56:3b:34:95:34:c6:49:44:01:02:
         0f:82:19:ba:2e:6f:3a:df:36:b5:54:a9:de:4c:1d:88:8b:6c:
         2c:9c:3a:3d:4b:3b:df:42:53:15:10:1b:5d:97:df:a6:33:05:
         75:3a:b5:50:91:f4:09:34:43:e2:4d:c5:84:07:e0:e9:ef:cc:
         d7:46:ce:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:50:06 2026 by rpki-client