This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/kp_9DUhsk33ywFawYnPkFP584I8.roa
File:                     kp_9DUhsk33ywFawYnPkFP584I8.roa (raw, json)
Hash identifier:          RzOfnm+0AOUaUVxteYQHxfR18hPLFgs1Xun4HHqrE44=
Subject key identifier:   92:9F:FD:0D:48:6C:93:7D:F2:C0:56:B0:62:73:E4:14:FE:7C:E0:8F
Certificate issuer:       /CN=ea1c951d61b87da19439784d23667a89cb3290a4
Certificate serial:       019B78A2C47A368CD6AF590495CEEB64AB82
Authority key identifier: EA:1C:95:1D:61:B8:7D:A1:94:39:78:4D:23:66:7A:89:CB:32:90:A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6hyVHWG4faGUOXhNI2Z6icsykKQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/kp_9DUhsk33ywFawYnPkFP584I8.roa
Signing time:             Thu 01 Jan 2026 08:18:11 +0000
ROA not before:           Thu 01 Jan 2026 08:18:11 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     203936
IP address blocks:        213.226.84.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/6hyVHWG4faGUOXhNI2Z6icsykKQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/6hyVHWG4faGUOXhNI2Z6icsykKQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6hyVHWG4faGUOXhNI2Z6icsykKQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a2:c4:7a:36:8c:d6:af:59:04:95:ce:eb:64:ab:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea1c951d61b87da19439784d23667a89cb3290a4
        Validity
            Not Before: Jan  1 08:18:11 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=929ffd0d486c937df2c056b06273e414fe7ce08f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:bd:34:3c:40:80:34:84:82:a9:1d:25:53:d5:
                    cf:92:70:90:8f:aa:53:e1:e1:06:b7:53:cd:f2:b4:
                    6f:95:5e:db:29:08:3d:94:45:cc:ba:10:dd:92:d0:
                    3d:13:b6:d2:c9:29:a1:d5:31:ac:7a:75:6f:3a:ed:
                    14:fc:ba:0c:8c:20:00:10:9c:c4:d8:a9:8a:dd:8f:
                    8b:18:3e:7b:e0:5d:8c:7a:c3:3f:99:e3:72:1c:4f:
                    c5:92:3d:94:ec:db:c1:ed:c5:9c:70:51:13:30:d0:
                    18:af:2e:f9:7b:b5:c4:ae:f8:38:b3:63:22:19:1c:
                    f4:9a:8e:ff:60:51:6f:c1:97:50:c0:6b:d0:b7:38:
                    1e:28:96:8b:6b:6c:7d:f4:69:6c:9c:20:94:08:c4:
                    4d:2a:e3:24:c9:f8:d7:2f:ba:21:cc:09:ed:a5:21:
                    e3:21:45:f4:03:d5:d0:7e:11:bf:63:fe:ec:9f:c4:
                    c8:81:9d:9b:8e:97:98:f0:a3:11:b8:5a:6e:1b:05:
                    58:8c:1e:ec:cb:9f:e8:a9:28:31:c7:59:42:a4:3f:
                    a3:32:63:81:66:03:bc:b9:cf:22:21:2b:00:a9:2d:
                    65:a4:a6:c1:a3:9f:cc:4d:40:61:3b:0d:f8:ba:0c:
                    0c:d8:90:e3:89:36:5a:4f:93:2d:38:10:8c:67:40:
                    07:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:9F:FD:0D:48:6C:93:7D:F2:C0:56:B0:62:73:E4:14:FE:7C:E0:8F
            X509v3 Authority Key Identifier:
                keyid:EA:1C:95:1D:61:B8:7D:A1:94:39:78:4D:23:66:7A:89:CB:32:90:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6hyVHWG4faGUOXhNI2Z6icsykKQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/kp_9DUhsk33ywFawYnPkFP584I8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/6hyVHWG4faGUOXhNI2Z6icsykKQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.226.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         58:67:80:ea:b8:e2:8c:b3:7c:d5:91:70:4b:dc:3d:38:e4:89:
         a7:bc:55:e1:7b:5e:19:d6:c9:f1:67:0e:1a:69:73:a1:d9:19:
         0c:b5:0f:b3:9a:ea:e1:20:fb:f3:91:52:d9:ef:d8:2b:49:bc:
         c2:94:f8:9b:12:e4:31:cf:e0:25:70:f0:d9:da:b5:b2:16:84:
         b6:a8:70:62:62:fc:91:c0:0b:d0:20:13:b6:82:85:9d:39:ee:
         ec:a6:06:0c:62:e0:54:5f:c2:49:8d:80:c0:1f:ef:4f:6a:74:
         b8:d6:69:6f:51:6b:e7:f2:67:42:80:58:ec:2b:48:db:eb:a4:
         07:c0:56:a6:7b:5f:80:20:fc:72:55:93:03:2d:80:7a:6b:6a:
         3c:30:b2:55:53:3e:c2:93:4d:d2:4e:6f:22:ae:c7:da:c7:59:
         8f:c8:1d:26:bd:3a:1a:1a:5e:70:b2:94:4c:a7:d5:9e:6e:08:
         b8:9d:62:b6:78:ba:7b:92:c1:39:86:7c:49:82:9b:3d:28:16:
         94:d2:f7:03:93:1f:27:27:60:1d:49:18:e8:92:f8:40:41:7d:
         7d:d2:2f:da:50:0f:61:ac:41:19:c8:21:1a:98:28:50:95:d2:
         05:83:3c:ce:af:9b:c7:7a:fe:71:d1:28:4d:e8:a7:8d:73:74:
         6c:3e:7a:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:16:43 2026 by rpki-client