This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/61687c-1182-4b08-948e-1c86c57e2e9f/1/oPW1SGwP91H4COCpUVzVXa2p0W0.roa
File:                     oPW1SGwP91H4COCpUVzVXa2p0W0.roa (raw, json)
Hash identifier:          sJ80Hmwvt2BZ4Ckn8z2EQlXDh6xgPaM8/fsDXZd71pg=
Subject key identifier:   A0:F5:B5:48:6C:0F:F7:51:F8:08:E0:A9:51:5C:D5:5D:AD:A9:D1:6D
Certificate issuer:       /CN=126ffc0096c693bbc420eeb8ccef34bc7b538743
Certificate serial:       019B7F8373B1B4596A50D10B790F282EBFF8
Authority key identifier: 12:6F:FC:00:96:C6:93:BB:C4:20:EE:B8:CC:EF:34:BC:7B:53:87:43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Em_8AJbGk7vEIO64zO80vHtTh0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/61687c-1182-4b08-948e-1c86c57e2e9f/1/oPW1SGwP91H4COCpUVzVXa2p0W0.roa
Signing time:             Fri 02 Jan 2026 16:21:19 +0000
ROA not before:           Fri 02 Jan 2026 16:21:19 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     8400
IP address blocks:        193.203.18.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/61687c-1182-4b08-948e-1c86c57e2e9f/1/Em_8AJbGk7vEIO64zO80vHtTh0M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/61687c-1182-4b08-948e-1c86c57e2e9f/1/Em_8AJbGk7vEIO64zO80vHtTh0M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Em_8AJbGk7vEIO64zO80vHtTh0M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:83:73:b1:b4:59:6a:50:d1:0b:79:0f:28:2e:bf:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=126ffc0096c693bbc420eeb8ccef34bc7b538743
        Validity
            Not Before: Jan  2 16:21:19 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a0f5b5486c0ff751f808e0a9515cd55dada9d16d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3c:b7:98:c4:2a:23:65:b3:42:4b:9d:43:88:
                    38:79:88:93:93:1c:6b:7e:aa:12:c8:45:7c:57:35:
                    83:fa:53:26:f0:bc:3f:df:cc:9d:f2:db:cd:91:5a:
                    74:c3:b7:93:30:ec:10:d3:ee:06:26:6b:59:64:02:
                    d5:23:bb:23:5d:38:6b:23:b3:b3:74:d5:5f:84:4d:
                    8d:79:7e:7d:26:2f:ee:1c:40:e3:aa:fc:e7:1b:ec:
                    5a:86:25:c4:29:b9:02:08:95:2e:3a:68:1b:bb:ed:
                    d7:9b:07:0a:cc:f2:40:d6:76:41:b5:83:e4:45:78:
                    bc:f5:65:7a:ae:21:0c:52:b1:8a:5a:8f:33:64:3e:
                    f7:42:7e:94:97:74:64:41:b2:73:f7:4c:b3:3d:dc:
                    87:62:30:c7:0c:7e:15:fb:ad:3e:55:19:f4:35:0d:
                    64:7a:93:23:12:7c:25:7b:b9:3a:aa:75:29:16:86:
                    0f:76:21:35:09:86:30:61:97:55:94:e6:e2:41:a3:
                    25:89:5c:8f:e0:03:d8:7c:f0:53:f3:35:88:b1:31:
                    9c:ea:07:d2:ea:26:62:6b:33:db:88:b4:15:2a:59:
                    12:34:7b:b7:55:9f:3f:94:06:da:74:ae:a2:fe:59:
                    59:fb:ba:9b:d0:f5:23:24:53:2f:ae:5b:c2:b3:88:
                    5d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:F5:B5:48:6C:0F:F7:51:F8:08:E0:A9:51:5C:D5:5D:AD:A9:D1:6D
            X509v3 Authority Key Identifier:
                keyid:12:6F:FC:00:96:C6:93:BB:C4:20:EE:B8:CC:EF:34:BC:7B:53:87:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Em_8AJbGk7vEIO64zO80vHtTh0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/61687c-1182-4b08-948e-1c86c57e2e9f/1/oPW1SGwP91H4COCpUVzVXa2p0W0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/61687c-1182-4b08-948e-1c86c57e2e9f/1/Em_8AJbGk7vEIO64zO80vHtTh0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.203.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         07:62:4f:0f:bc:56:44:c3:99:80:51:ab:0c:d3:3f:48:5c:a5:
         83:7f:de:cb:cf:82:52:b2:67:4b:63:8c:f4:b6:4a:be:19:0f:
         18:eb:38:0a:b0:ae:8b:cf:bc:f0:6c:5c:1c:2a:48:1e:57:7d:
         ad:c1:c6:1a:aa:bd:0e:25:8d:c4:e8:4e:cf:bc:d8:6a:e5:c9:
         67:ee:5e:fc:de:30:f7:06:5d:4b:8a:a8:17:8c:aa:eb:96:59:
         b6:66:ee:dc:fa:4e:b6:12:9c:5a:5e:a4:92:da:ef:85:e7:04:
         49:35:7c:07:1b:f8:2e:cc:ce:15:86:88:2a:f4:ab:bd:7b:ed:
         4e:36:d1:73:26:11:77:3b:2f:68:22:59:ea:cf:3d:2e:05:4e:
         ce:29:f0:dc:33:d3:d5:06:16:a8:f3:cc:4c:5f:49:07:81:d3:
         7f:57:06:0d:f2:63:4a:d4:3f:af:e9:6c:dc:cf:05:fc:06:5b:
         42:35:31:37:3d:b6:23:ea:e7:a4:43:6b:97:39:05:f7:b0:80:
         f3:a6:7d:54:f8:fe:e1:06:57:ad:96:a5:6b:46:78:22:8b:b8:
         09:31:50:c8:97:66:2b:80:58:c3:ea:90:1f:24:80:94:60:89:
         27:b6:06:f0:ca:f1:a4:32:38:d3:08:fb:3e:64:0c:9c:cd:cb:
         6a:b1:08:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:48:22 2026 by rpki-client