This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/RaxHGNFafelZjSWay_O2t79u3zs.roa
File:                     RaxHGNFafelZjSWay_O2t79u3zs.roa (raw, json)
Hash identifier:          5WJ+mAL7xP/fQrZ3ZPDzfx+rIt0AZyxV3JAYSqi4Tns=
Subject key identifier:   45:AC:47:18:D1:5A:7D:E9:59:8D:25:9A:CB:F3:B6:B7:BF:6E:DF:3B
Certificate issuer:       /CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Certificate serial:       019B791004BF5F93B93529B9945D52599A4C
Authority key identifier: 2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/RaxHGNFafelZjSWay_O2t79u3zs.roa
Signing time:             Thu 01 Jan 2026 10:17:31 +0000
ROA not before:           Thu 01 Jan 2026 10:17:31 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     205715
IP address blocks:        92.119.184.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:10:04:bf:5f:93:b9:35:29:b9:94:5d:52:59:9a:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
        Validity
            Not Before: Jan  1 10:17:31 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=45ac4718d15a7de9598d259acbf3b6b7bf6edf3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:11:95:61:8e:45:76:e2:67:93:f1:ab:5a:7c:
                    22:96:62:16:41:4d:c5:10:b0:af:90:af:6e:6f:d6:
                    ef:61:fa:7d:5e:97:ee:a0:68:97:58:62:2c:cd:bf:
                    0e:bd:3b:ff:18:67:94:e6:83:e5:9c:0c:9a:68:67:
                    96:e9:38:f2:f6:17:cd:5c:d1:2d:2f:62:96:8c:17:
                    70:92:90:99:c8:96:54:cb:5f:10:92:ff:bd:15:1d:
                    5a:36:e3:cd:3a:a1:ca:92:bb:15:95:79:ce:f7:2e:
                    27:bf:dd:dd:fa:36:57:bb:c9:1f:59:8a:34:4a:75:
                    bb:ae:92:52:fd:fc:71:1a:d1:00:4a:58:45:54:91:
                    49:8e:80:45:e9:2a:93:ac:63:8c:de:9f:0d:33:31:
                    b7:c7:2d:d9:4a:7d:2c:af:b4:c8:1c:45:06:b0:6d:
                    af:d0:52:8d:bb:c0:ed:e1:a4:78:6c:34:66:d5:2c:
                    ce:0d:0a:17:02:6d:d8:63:7f:a9:ba:96:e9:5d:ba:
                    01:02:f7:e4:0a:f7:77:33:33:4e:71:3b:4a:b9:3f:
                    ef:7b:28:b8:6b:b6:dc:d5:1c:6d:27:cf:08:13:a0:
                    00:d7:9a:cb:bf:f2:6c:2e:2c:53:12:8d:d3:a6:49:
                    58:b8:c7:28:9a:e9:87:d5:67:47:3a:fc:1b:9c:ba:
                    6e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:AC:47:18:D1:5A:7D:E9:59:8D:25:9A:CB:F3:B6:B7:BF:6E:DF:3B
            X509v3 Authority Key Identifier:
                keyid:2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/RaxHGNFafelZjSWay_O2t79u3zs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.119.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         55:60:fc:32:b0:b8:34:37:e2:30:35:93:c8:2b:1b:24:38:13:
         25:95:f3:b1:7e:4a:d1:7b:26:d3:42:96:64:d9:13:8d:ee:38:
         8c:78:7d:04:9f:56:de:69:ee:51:59:15:b2:30:01:df:12:8f:
         a2:a1:b5:56:9f:4a:1e:55:f3:d3:10:fd:78:46:05:28:40:06:
         bc:a2:e4:20:fd:11:d9:a6:1b:8a:82:23:08:a7:75:4c:92:6c:
         bc:01:86:0b:47:01:6e:de:24:59:77:3c:4f:12:34:e5:d1:bf:
         6e:27:eb:6c:72:cb:1a:d5:d2:fb:be:bc:41:ef:b7:1d:9d:4b:
         aa:62:dc:f1:4c:33:32:a5:70:c1:56:1c:c0:32:1d:be:c2:41:
         e9:38:bf:4e:b5:cc:07:f2:bc:ff:c8:14:8e:2d:58:0c:21:36:
         49:42:98:8a:0c:81:39:8c:71:d0:ae:fa:4b:e4:67:0a:7e:22:
         55:39:9c:1d:23:d6:91:d3:4a:bb:68:1e:03:bb:2a:d4:7f:90:
         c5:74:9f:34:64:fe:76:09:03:10:0c:ab:58:23:c4:37:1c:00:
         fc:2c:ce:31:55:0c:69:8d:22:cc:0d:94:f1:90:05:aa:e1:56:
         00:64:55:9c:f8:35:78:fc:8a:21:99:39:49:af:1f:6e:37:b4:
         a0:c0:c0:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:29:36 2026 by rpki-client