This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/7a8781-e363-46e4-97ed-e3e8151a8760/1/v3K9X62S23EsPXBUv8o5_0MHn4Y.roa
File:                     v3K9X62S23EsPXBUv8o5_0MHn4Y.roa (raw, json)
Hash identifier:          6AkfovE+X2QIgtQd8B7GXkBK4tknFic/hJn5uV1siEo=
Subject key identifier:   BF:72:BD:5F:AD:92:DB:71:2C:3D:70:54:BF:CA:39:FF:43:07:9F:86
Certificate issuer:       /CN=48ba3701691d2928afad3a1b5735a26f4c99cff6
Certificate serial:       019B79ECD7AF77EBD7CE4A222F4F59771995
Authority key identifier: 48:BA:37:01:69:1D:29:28:AF:AD:3A:1B:57:35:A2:6F:4C:99:CF:F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SLo3AWkdKSivrTobVzWib0yZz_Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/7a8781-e363-46e4-97ed-e3e8151a8760/1/v3K9X62S23EsPXBUv8o5_0MHn4Y.roa
Signing time:             Thu 01 Jan 2026 14:18:43 +0000
ROA not before:           Thu 01 Jan 2026 14:18:43 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     8426
IP address blocks:        193.28.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/7a8781-e363-46e4-97ed-e3e8151a8760/1/SLo3AWkdKSivrTobVzWib0yZz_Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/7a8781-e363-46e4-97ed-e3e8151a8760/1/SLo3AWkdKSivrTobVzWib0yZz_Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SLo3AWkdKSivrTobVzWib0yZz_Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:ec:d7:af:77:eb:d7:ce:4a:22:2f:4f:59:77:19:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48ba3701691d2928afad3a1b5735a26f4c99cff6
        Validity
            Not Before: Jan  1 14:18:43 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=bf72bd5fad92db712c3d7054bfca39ff43079f86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:39:69:23:c8:a2:ff:56:63:09:23:b3:2a:ff:
                    dc:e9:00:fe:d5:29:91:cd:71:2a:74:3e:fb:7f:62:
                    fe:b4:1b:18:53:25:ad:e9:92:de:78:fb:96:cc:5a:
                    6f:c5:1c:a1:63:31:96:8b:d3:33:76:5f:2b:94:0d:
                    b5:06:37:58:ec:e0:4b:86:62:3e:9d:92:a4:d9:c3:
                    03:60:f3:6e:c4:18:0d:f4:9b:fa:de:bf:3e:5a:eb:
                    17:f8:cf:cf:13:0a:8a:dd:be:71:1f:31:5a:3a:a2:
                    82:08:1e:24:4b:df:9f:35:0b:3c:01:7f:bd:c5:9b:
                    28:c6:0c:a1:09:f8:1d:13:88:a3:7c:d6:28:a8:47:
                    1b:c4:4e:f1:41:86:d4:92:ff:49:7c:d9:b4:8f:56:
                    1a:67:2c:8c:13:ac:8a:85:df:65:6a:f9:2e:27:aa:
                    35:2f:8f:55:23:41:22:41:09:5b:87:53:5c:ee:3a:
                    92:c6:43:8e:c4:43:d9:da:d2:31:b1:f4:d2:49:a8:
                    fb:fe:5e:a6:06:3f:be:0d:eb:a2:89:b9:35:b9:74:
                    c3:ef:ec:68:71:71:34:ee:c6:f2:17:0e:6c:4a:63:
                    f2:f9:5e:d6:23:8e:27:8a:3e:27:a6:5b:a8:e4:5e:
                    23:98:db:a8:ef:fa:f5:6e:1c:04:ed:36:4c:d3:c3:
                    20:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:72:BD:5F:AD:92:DB:71:2C:3D:70:54:BF:CA:39:FF:43:07:9F:86
            X509v3 Authority Key Identifier:
                keyid:48:BA:37:01:69:1D:29:28:AF:AD:3A:1B:57:35:A2:6F:4C:99:CF:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SLo3AWkdKSivrTobVzWib0yZz_Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7a8781-e363-46e4-97ed-e3e8151a8760/1/v3K9X62S23EsPXBUv8o5_0MHn4Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7a8781-e363-46e4-97ed-e3e8151a8760/1/SLo3AWkdKSivrTobVzWib0yZz_Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.28.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:76:e6:ff:a2:48:7e:d7:b0:c3:68:ef:ef:19:b6:4d:e1:17:
         f7:90:0c:d0:dd:88:10:fe:b1:56:c6:15:69:29:fe:1e:51:b9:
         58:81:65:b0:f0:4e:b0:66:ac:5b:b7:cf:3b:67:b4:6a:be:48:
         bc:2d:bf:eb:2d:41:9a:8c:9e:b2:d1:1e:67:ca:8c:dd:c1:e7:
         5b:17:65:c1:7a:af:88:2a:3f:ce:01:29:41:f4:04:a0:33:ab:
         ef:9e:3c:33:f7:03:56:7f:98:e6:18:97:01:43:3b:36:8f:44:
         9a:d0:cc:48:f8:d8:41:e0:1d:a9:68:50:c6:22:2a:67:84:2e:
         49:70:6b:ca:2c:96:83:dc:23:32:0e:15:42:12:80:67:de:c8:
         59:8d:57:4d:f5:07:e3:49:b7:1f:a0:1e:a3:de:f4:5f:46:b8:
         3e:9b:a9:e8:e1:d2:24:65:45:b8:4b:12:1c:89:7f:df:b6:d4:
         16:6a:8f:1a:c1:e6:d5:52:83:b1:a8:6a:98:80:75:5d:d9:48:
         56:4f:e6:32:97:95:69:1e:d0:8b:00:f1:9d:69:1a:ba:66:0d:
         16:ae:82:46:cb:b4:82:83:92:25:1a:d5:cc:0a:27:77:c8:90:
         6a:3b:42:18:ac:87:10:36:de:ce:bd:d9:a8:a7:a5:09:7b:2a:
         3b:e2:b2:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:27:23 2026 by rpki-client