This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/1-YrYrU78JVrBQu4b-JvMNXte1Y8.roa
File:                     1-YrYrU78JVrBQu4b-JvMNXte1Y8.roa (raw, json)
Hash identifier:          T19rFV+NYifOvJLKtfb/jn8yzfjpP/9o/emwcX4dW0M=
Subject key identifier:   F9:8A:D8:AD:4E:FC:25:5A:C1:42:EE:1B:F8:9B:CC:35:7B:5E:D5:8F
Certificate issuer:       /CN=6c32dc9e5249fb41c47df4914121a9b1a6aef1ff
Certificate serial:       019B79ED62963876CCE6C0FDC5A428E9B6F2
Authority key identifier: 6C:32:DC:9E:52:49:FB:41:C4:7D:F4:91:41:21:A9:B1:A6:AE:F1:FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bDLcnlJJ-0HEffSRQSGpsaau8f8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/1-YrYrU78JVrBQu4b-JvMNXte1Y8.roa
Signing time:             Thu 01 Jan 2026 14:19:19 +0000
ROA not before:           Thu 01 Jan 2026 14:19:19 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     210377
IP address blocks:        93.93.224.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bDLcnlJJ-0HEffSRQSGpsaau8f8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:ed:62:96:38:76:cc:e6:c0:fd:c5:a4:28:e9:b6:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c32dc9e5249fb41c47df4914121a9b1a6aef1ff
        Validity
            Not Before: Jan  1 14:19:19 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f98ad8ad4efc255ac142ee1bf89bcc357b5ed58f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:4a:1d:da:7a:df:e7:5f:15:af:2c:64:57:ec:
                    8b:a4:17:e4:32:6c:41:dc:7e:65:43:94:2d:a4:de:
                    88:50:8f:51:4a:a1:a9:e0:48:db:12:4a:2e:fd:4c:
                    a0:57:5b:77:f3:e3:92:ca:b9:b8:cf:6b:65:6a:93:
                    f7:d6:f1:37:41:f3:bb:36:f6:1c:57:46:c3:66:10:
                    27:d3:7a:4c:27:01:a7:2d:2d:2e:c2:50:77:ef:6b:
                    98:8f:96:28:23:cd:dd:8d:be:29:6f:36:1f:9f:ea:
                    55:fa:93:41:01:62:cd:85:6c:cf:ab:33:02:06:89:
                    b0:78:f1:51:34:d8:e2:c9:a4:1e:b8:d8:c8:a0:af:
                    28:1f:09:cb:97:8d:8f:65:3f:18:f7:23:55:64:c2:
                    df:83:15:42:73:32:6e:44:52:75:2b:2d:3f:43:df:
                    fa:d9:c7:90:f0:fb:7e:c9:8b:7b:9d:7c:63:3f:02:
                    de:19:ab:87:ca:69:db:94:a9:3c:63:db:d1:48:7c:
                    9a:23:a2:b7:ab:a6:49:47:7f:70:ac:71:c9:1c:3d:
                    6a:6d:a6:a8:70:0a:18:c1:61:ce:ad:92:3c:30:e5:
                    a4:5b:5a:dc:57:e2:63:37:fd:79:d0:b6:33:3e:ec:
                    45:ef:53:b6:e8:e6:23:90:8d:91:7b:54:c4:37:f9:
                    c2:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:8A:D8:AD:4E:FC:25:5A:C1:42:EE:1B:F8:9B:CC:35:7B:5E:D5:8F
            X509v3 Authority Key Identifier:
                keyid:6C:32:DC:9E:52:49:FB:41:C4:7D:F4:91:41:21:A9:B1:A6:AE:F1:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDLcnlJJ-0HEffSRQSGpsaau8f8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/1-YrYrU78JVrBQu4b-JvMNXte1Y8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.93.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3a:75:e4:71:05:08:9e:9f:9a:81:e8:70:7b:16:68:a9:4e:80:
         64:45:f4:f3:d9:7f:e4:7a:62:7b:25:b7:1f:27:b9:a5:c6:19:
         31:34:dc:e0:70:d3:bb:a8:70:05:0a:fb:8e:9f:48:fe:45:1e:
         c9:e9:cd:8b:15:9c:19:c4:18:8c:4c:28:2c:fd:27:ff:e0:5b:
         df:aa:fb:42:c7:11:2b:68:05:5d:13:56:00:01:ee:df:76:89:
         c0:86:67:3e:fe:7c:d2:99:83:33:05:94:b9:3a:5b:36:cb:80:
         aa:82:fe:4d:60:ec:30:ba:c5:d7:93:51:25:e4:7b:78:76:8e:
         3a:5f:ab:b0:51:a7:ab:f5:68:12:7c:8f:dd:16:ed:77:a2:44:
         6a:ec:d9:e9:ae:da:74:9e:c0:ac:46:ae:65:74:40:27:00:6e:
         96:08:a0:c9:a1:51:9b:03:75:a4:a2:3f:7f:11:95:ab:59:9a:
         21:a1:f8:ca:08:8a:90:57:de:f3:90:40:c6:93:2b:90:fe:1d:
         9b:4d:e7:a9:2a:9d:0a:74:12:17:00:dd:90:c5:b4:52:7e:c6:
         cc:39:f2:36:a1:c2:f8:80:1c:5a:72:2f:6e:6f:6c:5d:f4:bd:
         62:c4:f5:15:de:c3:b7:d9:3a:b0:1c:7d:97:5a:dc:a6:35:3c:
         cd:61:ca:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:07:59 2026 by rpki-client