This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/9L3_BjUt_Pkd4lNYNY4IEdG62Oo.roa
File:                     9L3_BjUt_Pkd4lNYNY4IEdG62Oo.roa (raw, json)
Hash identifier:          vOAxZY4XkVH9qyzLfhiBzlAaImKBkCi4da5tiiu6/bw=
Subject key identifier:   F4:BD:FF:06:35:2D:FC:F9:1D:E2:53:58:35:8E:08:11:D1:BA:D8:EA
Certificate issuer:       /CN=374e2729b17369890a1512f643cd08e4ba2ff414
Certificate serial:       019BEFC60519311F64C964D0D51C1E8DD5AB
Authority key identifier: 37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/9L3_BjUt_Pkd4lNYNY4IEdG62Oo.roa
Signing time:             Sat 24 Jan 2026 11:31:30 +0000
ROA not before:           Sat 24 Jan 2026 11:31:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     215462
IP address blocks:        2a05:f682::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 05:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:ef:c6:05:19:31:1f:64:c9:64:d0:d5:1c:1e:8d:d5:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=374e2729b17369890a1512f643cd08e4ba2ff414
        Validity
            Not Before: Jan 24 11:31:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f4bdff06352dfcf91de25358358e0811d1bad8ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:fe:d3:d7:bf:41:ff:19:6c:be:64:04:53:e0:
                    d0:23:41:c0:ec:8d:ec:cf:78:06:df:a1:09:6f:1b:
                    8f:e8:2f:77:d3:f0:e6:3e:0b:e2:1f:76:05:73:bb:
                    a9:6e:49:d8:c0:0b:cb:f9:40:de:a2:9e:5f:98:21:
                    a1:e4:0a:49:e6:c6:05:4f:3a:32:75:9b:2a:dd:69:
                    18:ff:f3:1d:12:01:76:04:a5:29:3d:10:d8:24:19:
                    e0:31:5a:c8:02:21:c7:a1:cf:2a:d5:a8:16:08:54:
                    9a:bb:88:aa:9e:10:0b:81:d7:8f:30:d1:16:69:81:
                    36:b1:37:d9:46:8c:b9:ae:d3:24:ac:02:ab:31:48:
                    f2:1b:89:f8:66:5d:51:1b:dd:c9:97:01:07:91:38:
                    0b:e5:ad:15:ee:7f:fa:fa:ca:5e:1a:55:e0:ab:61:
                    82:38:37:cc:cb:0f:3a:92:87:3c:26:c1:12:15:fe:
                    0c:18:e3:42:7d:8d:31:35:a4:20:fe:52:b8:96:c3:
                    70:23:60:16:2d:ff:d2:25:ef:52:6f:06:bc:53:1e:
                    c8:bb:ef:ad:a2:80:ef:ee:80:04:46:95:51:ad:11:
                    c4:c9:cc:9c:35:ef:a4:88:09:5b:ec:95:2c:3e:4c:
                    ac:d4:0f:79:66:71:9f:a2:78:ce:b0:da:0e:98:90:
                    e6:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:BD:FF:06:35:2D:FC:F9:1D:E2:53:58:35:8E:08:11:D1:BA:D8:EA
            X509v3 Authority Key Identifier:
                keyid:37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/9L3_BjUt_Pkd4lNYNY4IEdG62Oo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:f682::/32

    Signature Algorithm: sha256WithRSAEncryption
         9f:7c:b6:a8:54:b8:3e:2e:44:f1:ee:32:4c:31:96:39:3a:84:
         2d:d8:1f:a5:c2:63:b5:6f:1f:d3:c1:64:e4:5f:37:bd:46:23:
         89:34:f5:97:8a:b1:a0:1d:90:bf:e0:81:94:ec:68:75:21:37:
         a0:a6:a2:76:ef:6d:7a:46:b2:0b:e6:67:5d:08:74:a0:60:6e:
         f6:ff:24:55:0b:0c:d8:2c:03:95:81:d1:29:c6:97:f5:b5:5f:
         9c:c8:4b:4e:24:60:2e:75:f2:bb:b5:cb:73:4b:5f:51:00:76:
         bc:30:18:fc:8f:f3:7c:44:79:a9:aa:27:fd:fd:b6:31:6b:e5:
         17:35:86:f9:7f:55:0c:5e:c1:ef:42:ee:45:df:46:a0:7e:19:
         14:62:c5:9d:c1:01:a7:72:2f:35:d7:24:5d:ee:0c:26:30:fa:
         13:78:34:04:82:ea:f5:39:c7:1e:66:f3:f9:78:5d:b2:76:cc:
         bf:5c:af:63:ee:7b:b7:2a:2b:40:1f:cf:dd:60:1b:75:49:0f:
         e4:9a:c6:bf:e6:d0:a2:07:90:37:7b:c6:cc:ac:c0:1b:0b:65:
         47:dc:fb:04:b9:c7:5a:ef:a8:cb:a4:84:73:5e:ca:57:f5:8f:
         bd:54:f7:db:86:8e:ba:1d:53:21:62:e6:57:7e:88:ea:8e:c7:
         25:9a:2e:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:02:58 2026 by rpki-client