This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/PTKJDn9baa8GDsyUDbvLdvKpH_Y.roa
File:                     PTKJDn9baa8GDsyUDbvLdvKpH_Y.roa (raw, json)
Hash identifier:          M6ZYD9tQnpCFir5Cu0FNk295lOfSt9eoRIH1690apck=
Subject key identifier:   3D:32:89:0E:7F:5B:69:AF:06:0E:CC:94:0D:BB:CB:76:F2:A9:1F:F6
Certificate issuer:       /CN=07d44a52778aa65f736e72436003f6654f268318
Certificate serial:       019B797E94200D15D88104D86CE02EDE6436
Authority key identifier: 07:D4:4A:52:77:8A:A6:5F:73:6E:72:43:60:03:F6:65:4F:26:83:18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B9RKUneKpl9zbnJDYAP2ZU8mgxg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/PTKJDn9baa8GDsyUDbvLdvKpH_Y.roa
Signing time:             Thu 01 Jan 2026 12:18:17 +0000
ROA not before:           Thu 01 Jan 2026 12:18:17 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     3219
IP address blocks:        193.6.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/B9RKUneKpl9zbnJDYAP2ZU8mgxg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/B9RKUneKpl9zbnJDYAP2ZU8mgxg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B9RKUneKpl9zbnJDYAP2ZU8mgxg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 21:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:7e:94:20:0d:15:d8:81:04:d8:6c:e0:2e:de:64:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07d44a52778aa65f736e72436003f6654f268318
        Validity
            Not Before: Jan  1 12:18:17 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=3d32890e7f5b69af060ecc940dbbcb76f2a91ff6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:4b:2e:5e:3b:01:0e:68:73:9a:e6:b8:f7:19:
                    d6:c1:c4:8d:de:2f:aa:6f:84:15:1c:a3:61:8b:81:
                    97:2b:ae:ab:97:ef:f2:19:0e:10:8e:cd:25:e9:62:
                    9b:9d:08:27:a4:e9:e9:b7:21:6c:05:fc:09:32:54:
                    27:03:2f:27:e1:18:d8:f5:ed:f7:cf:66:18:79:cc:
                    f2:d0:63:73:c8:a1:5d:64:15:e4:f0:0e:e2:98:41:
                    c7:42:cc:18:95:e7:0e:2e:ad:be:af:27:f3:22:18:
                    28:b3:6e:94:a5:3a:ca:a2:00:cb:bb:1f:5e:60:fd:
                    f3:72:42:0f:89:89:d6:9e:38:76:44:cd:5c:7c:63:
                    01:6b:bc:1f:de:dc:41:d8:b4:c5:05:8f:40:a3:c7:
                    4b:d2:be:0f:10:1c:80:ad:d9:b6:f0:76:dc:2c:30:
                    ae:55:fc:37:7b:3f:f4:2d:68:85:47:03:92:ef:1c:
                    54:df:81:bd:f1:d6:ec:36:13:c1:ba:29:82:63:c1:
                    6b:e5:e8:10:cf:5a:69:cd:3b:09:47:95:28:86:b5:
                    8f:94:5f:e7:44:42:0d:95:83:45:3d:64:93:d5:43:
                    80:79:e5:0c:51:2e:fd:5e:a9:2e:19:25:89:f9:2b:
                    7c:fd:7c:09:ba:30:25:30:85:a0:42:5a:04:7a:ee:
                    d5:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:32:89:0E:7F:5B:69:AF:06:0E:CC:94:0D:BB:CB:76:F2:A9:1F:F6
            X509v3 Authority Key Identifier:
                keyid:07:D4:4A:52:77:8A:A6:5F:73:6E:72:43:60:03:F6:65:4F:26:83:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9RKUneKpl9zbnJDYAP2ZU8mgxg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/PTKJDn9baa8GDsyUDbvLdvKpH_Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/B9RKUneKpl9zbnJDYAP2ZU8mgxg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.6.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:4d:2e:b9:13:b2:c9:bd:e1:5d:37:9b:9d:77:0c:9d:94:01:
         7c:76:50:4f:1f:4f:3b:0b:98:3e:e4:4e:13:fc:7c:94:93:85:
         4e:01:1d:4b:64:3f:fd:e2:b7:36:d1:91:67:49:17:2e:7d:4f:
         1d:03:08:14:7c:ab:32:b1:93:02:aa:ed:f5:a9:6c:34:40:63:
         33:5a:ca:ab:27:a9:85:cc:a5:1c:22:be:23:fa:13:3d:1b:b7:
         89:06:5d:b7:a9:d4:27:de:e6:c7:bf:2f:da:c8:fc:5d:f4:2a:
         75:37:c9:89:88:c4:4c:49:b1:24:cc:12:76:26:6e:d7:7b:53:
         1e:35:65:01:9a:50:be:f6:9f:20:68:2a:e3:2a:d5:bb:1e:f9:
         66:f1:1f:de:0f:9f:67:e4:21:bd:88:8f:9a:35:22:4c:c8:96:
         04:0a:21:7f:9a:18:99:67:cf:3e:e5:17:bd:a8:32:95:92:33:
         a0:83:b0:22:37:03:6a:d0:5a:ed:4e:9e:35:33:bd:f0:66:19:
         f5:d8:ff:f3:d2:a7:85:c4:2c:75:66:59:0e:aa:18:f0:a4:d3:
         0f:4f:66:f0:90:71:e0:00:3e:b6:b6:d6:7d:43:08:8a:69:ca:
         ea:ee:b1:43:9e:11:6c:03:4b:c4:e3:a7:90:b3:3f:2d:6b:d4:
         78:f6:b9:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:03:12 2026 by rpki-client