This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/TaUDh7SQNSjeoUQ6njjxKFEFIz8.roa
File:                     TaUDh7SQNSjeoUQ6njjxKFEFIz8.roa (raw, json)
Hash identifier:          n5XH/yUmkqCjpx73R7Q/F//2yRpJ/JyjMXb5NxsqPAM=
Subject key identifier:   4D:A5:03:87:B4:90:35:28:DE:A1:44:3A:9E:38:F1:28:51:05:23:3F
Certificate issuer:       /CN=696c67867e0e202248e7f5e3cbd574bd1a32fe3f
Certificate serial:       019B7E379C1D699DA83431ACEAB865188454
Authority key identifier: 69:6C:67:86:7E:0E:20:22:48:E7:F5:E3:CB:D5:74:BD:1A:32:FE:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aWxnhn4OICJI5_Xjy9V0vRoy_j8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/TaUDh7SQNSjeoUQ6njjxKFEFIz8.roa
Signing time:             Fri 02 Jan 2026 10:18:52 +0000
ROA not before:           Fri 02 Jan 2026 10:18:52 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     786
IP address blocks:        163.119.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aWxnhn4OICJI5_Xjy9V0vRoy_j8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:37:9c:1d:69:9d:a8:34:31:ac:ea:b8:65:18:84:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=696c67867e0e202248e7f5e3cbd574bd1a32fe3f
        Validity
            Not Before: Jan  2 10:18:52 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4da50387b4903528dea1443a9e38f1285105233f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:64:cf:e9:9e:cc:04:71:2b:0e:38:e5:24:23:
                    e6:d2:99:c2:f0:ff:44:29:46:04:63:57:0d:0c:95:
                    b6:64:7a:3b:d0:ef:62:75:43:eb:4b:c9:79:23:a6:
                    e9:b9:1b:51:7a:e2:ab:09:39:6a:bc:4d:1c:4f:12:
                    b1:50:92:2e:d1:43:30:ed:7b:3f:74:f5:6a:26:6c:
                    7f:65:d8:5a:3a:64:0b:8a:1b:63:9c:98:47:3d:5c:
                    00:3d:07:4d:80:8c:1e:3f:75:a7:25:99:28:f9:e4:
                    0c:e4:c9:06:be:45:ae:69:7a:49:3a:31:a6:3f:d3:
                    59:9c:0b:24:63:a0:56:05:24:7c:c0:18:6f:0c:cb:
                    3b:3e:dc:7f:bc:9a:8f:20:ed:9e:be:9f:a9:64:02:
                    09:1a:4b:a1:bc:b4:9d:0d:e7:fd:f3:b8:9f:36:b7:
                    01:4f:1d:f4:35:ec:06:54:51:50:34:d7:fc:ef:a1:
                    3a:ef:00:c0:3a:49:f1:b1:17:c5:d6:29:1b:26:d4:
                    19:41:36:cb:bf:23:0b:af:5b:15:ae:a2:6a:ba:54:
                    c7:02:e4:6a:7f:6b:9a:13:ec:94:30:6b:35:83:d6:
                    7a:97:47:35:72:cd:52:f4:f7:b7:1c:2e:6b:0a:d0:
                    79:04:a2:db:85:e5:ee:d7:3f:48:dc:74:b8:48:aa:
                    c5:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:A5:03:87:B4:90:35:28:DE:A1:44:3A:9E:38:F1:28:51:05:23:3F
            X509v3 Authority Key Identifier:
                keyid:69:6C:67:86:7E:0E:20:22:48:E7:F5:E3:CB:D5:74:BD:1A:32:FE:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWxnhn4OICJI5_Xjy9V0vRoy_j8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/TaUDh7SQNSjeoUQ6njjxKFEFIz8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.119.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         72:c3:ff:91:4b:7f:f5:e1:01:5e:6d:4c:89:72:d8:53:0c:3c:
         ec:3b:17:5a:fb:1e:73:2c:3f:8b:a0:16:44:0d:97:e8:13:ba:
         66:92:90:bf:76:70:29:82:4e:f1:4a:4c:98:f5:d6:29:a9:6e:
         b4:4c:8d:b0:ee:09:b3:52:14:83:3c:0e:04:72:97:a7:01:88:
         8e:69:aa:9f:46:9c:9a:65:86:7a:9a:9a:c0:44:8f:4b:4d:d9:
         28:5d:16:e9:4c:9a:44:2d:c4:5d:f1:c8:58:f4:86:c3:b6:59:
         03:ca:3b:10:b4:1d:6b:1b:c0:6f:a8:61:bd:99:26:c9:41:0b:
         41:4f:e7:d4:17:fb:3f:87:dc:6b:01:61:76:b1:72:4e:3c:56:
         c2:33:24:f6:77:6d:30:22:66:e0:ef:65:8f:3e:4c:7b:bc:41:
         66:5e:79:bd:58:ea:bb:6d:80:19:f4:e1:3f:4a:a8:77:77:47:
         7f:cf:2c:a7:3a:45:ca:1d:4b:7c:74:95:77:98:30:76:a8:ba:
         56:b4:3a:fe:40:b0:b7:0f:b7:26:a9:b3:6c:27:fc:c0:7f:a3:
         53:20:73:00:43:82:7f:48:f0:10:e4:ba:d0:3b:59:c7:74:c7:
         43:07:9a:63:6a:52:cc:be:73:d1:21:43:c9:93:39:4e:18:4a:
         c5:1e:72:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:28:18 2026 by rpki-client