This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/A0srGWZl2UQ2DHzU59NTspJpWEg.roa
File:                     A0srGWZl2UQ2DHzU59NTspJpWEg.roa (raw, json)
Hash identifier:          0qmFl61ly9Yd+1vALFGtJIGWFR5pm8mWDsm69bfTCtQ=
Subject key identifier:   03:4B:2B:19:66:65:D9:44:36:0C:7C:D4:E7:D3:53:B2:92:69:58:48
Certificate issuer:       /CN=7bab6c11d41162db0306858f83e5e65121132a6b
Certificate serial:       019B79113477C47E42CBBC4C56BD0B0A3EC7
Authority key identifier: 7B:AB:6C:11:D4:11:62:DB:03:06:85:8F:83:E5:E6:51:21:13:2A:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/A0srGWZl2UQ2DHzU59NTspJpWEg.roa
Signing time:             Thu 01 Jan 2026 10:18:49 +0000
ROA not before:           Thu 01 Jan 2026 10:18:49 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     213109
IP address blocks:        2a07:22c1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:11:34:77:c4:7e:42:cb:bc:4c:56:bd:0b:0a:3e:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bab6c11d41162db0306858f83e5e65121132a6b
        Validity
            Not Before: Jan  1 10:18:49 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=034b2b196665d944360c7cd4e7d353b292695848
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f2:99:cf:75:df:c4:ee:41:8a:b7:96:89:b5:
                    6f:7e:1b:d8:1f:9a:8b:b2:2b:8b:6b:99:c3:0a:2c:
                    77:50:0f:7e:86:0d:f6:7c:e4:0c:de:a4:0b:e8:71:
                    72:d5:45:14:38:23:ac:6e:5c:70:e9:f3:3b:e5:f3:
                    42:fe:43:cd:e7:98:77:7e:14:f8:da:79:18:59:30:
                    ae:57:36:6b:33:45:2f:ea:0f:df:0e:86:7f:b5:bf:
                    fb:21:d4:62:e7:f5:99:d3:69:77:21:1f:db:71:12:
                    cb:50:3c:18:f5:37:1e:f3:d4:56:a8:16:f7:de:5b:
                    ac:96:5e:e5:f9:b4:03:fd:6b:a8:35:61:6f:f7:0a:
                    8c:d6:bd:9c:7a:18:41:2b:4c:16:b9:15:50:1f:7c:
                    3d:33:f8:fe:53:54:b5:a1:88:d2:b6:0e:5d:55:fa:
                    1e:d7:37:65:59:6d:16:39:0f:a9:20:94:43:2d:a7:
                    3a:a8:19:5e:19:58:c1:74:cb:f5:58:42:de:43:a0:
                    b7:37:a0:56:dd:f9:fa:f8:37:1c:53:38:84:78:cc:
                    53:91:5f:a1:ba:19:cb:c7:b2:ba:26:a1:cf:b1:3b:
                    15:27:fc:58:5b:ac:71:89:08:5c:41:68:e9:3d:c7:
                    a6:81:51:5b:3e:7e:63:5f:94:a6:42:7a:31:24:20:
                    ae:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:4B:2B:19:66:65:D9:44:36:0C:7C:D4:E7:D3:53:B2:92:69:58:48
            X509v3 Authority Key Identifier:
                keyid:7B:AB:6C:11:D4:11:62:DB:03:06:85:8F:83:E5:E6:51:21:13:2A:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/A0srGWZl2UQ2DHzU59NTspJpWEg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:22c1::/48

    Signature Algorithm: sha256WithRSAEncryption
         13:64:b6:6a:0f:93:b4:84:f4:55:35:b5:af:50:ea:b6:1a:95:
         5a:f5:ec:a2:e8:f2:b5:0c:d5:00:7a:30:fe:ee:bd:e4:43:ce:
         0b:1a:9e:55:c9:92:d5:6b:04:9c:30:51:82:a6:65:08:56:1e:
         82:64:60:91:fc:3e:a8:14:7f:51:38:e0:60:cb:2c:20:19:cb:
         a8:4d:a6:94:e8:fb:9c:f6:c8:c5:8e:1f:62:39:b5:7f:b5:17:
         9a:f6:56:52:ec:af:4e:50:d7:a2:ac:7d:e5:08:50:05:8b:dc:
         45:e2:c3:9c:7a:36:03:69:4b:f7:01:17:96:44:d8:9c:31:5f:
         5a:8c:ae:7c:38:30:0f:3b:85:ec:3c:2c:99:9d:bd:07:89:55:
         ab:6b:58:5b:60:46:dd:54:78:38:50:c5:ef:27:e3:80:71:0b:
         5f:28:38:7a:90:f4:8f:04:cd:95:c7:bb:b1:b5:c0:c0:9a:af:
         1b:4f:19:36:71:5a:60:2f:15:8f:d3:80:2a:49:72:03:d6:e0:
         63:88:a6:9d:9f:74:61:dc:88:56:c6:24:32:4c:3b:84:17:96:
         e3:53:06:5e:8c:23:c6:ea:e6:5d:8f:ce:33:a4:bd:63:62:79:
         ad:99:77:15:03:c2:6f:4b:8b:93:1c:f8:b3:6f:8a:ac:be:98:
         5d:93:8f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:29:08 2026 by rpki-client