This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/XwRcoVXadaoc8cVxH960M88XO34.roa
File:                     XwRcoVXadaoc8cVxH960M88XO34.roa (raw, json)
Hash identifier:          MkQOWGVz6NFiwMRNBa8YUXwBX1EVE0Ic6iJ5dZTF/6o=
Subject key identifier:   5F:04:5C:A1:55:DA:75:AA:1C:F1:C5:71:1F:DE:B4:33:CF:17:3B:7E
Certificate issuer:       /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial:       019B7AC7EE765C2DB6273AA032496A5EC7A4
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/XwRcoVXadaoc8cVxH960M88XO34.roa
Signing time:             Thu 01 Jan 2026 18:18:01 +0000
ROA not before:           Thu 01 Jan 2026 18:18:01 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     3917
IP address blocks:        145.26.0.0/16 maxlen: 16
                          145.26.56.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:c7:ee:76:5c:2d:b6:27:3a:a0:32:49:6a:5e:c7:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
        Validity
            Not Before: Jan  1 18:18:01 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5f045ca155da75aa1cf1c5711fdeb433cf173b7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:91:12:8d:e1:de:cd:b1:c5:08:66:ae:8d:1a:
                    56:a3:f8:15:4e:b7:fb:ba:bf:34:70:4d:5b:e2:9b:
                    23:1a:e7:4c:43:d6:a6:9c:06:f0:d5:d4:93:c3:f9:
                    80:a9:fb:3c:8f:07:9b:42:ba:97:99:a6:36:24:19:
                    ee:ef:2b:ed:d1:b6:c7:35:bf:3a:8c:4c:ac:b6:9c:
                    6d:d7:54:10:03:51:af:2a:82:76:59:68:f9:bf:44:
                    98:13:06:37:c9:bf:46:3b:46:77:c0:7e:88:66:0c:
                    22:33:c7:4d:bd:77:dd:62:29:fe:6d:76:d8:0b:81:
                    33:ce:9b:5a:21:eb:34:c2:03:4d:26:68:76:1f:d3:
                    71:24:d6:fc:28:5d:62:81:b8:08:41:da:cf:b2:ee:
                    1e:5d:44:4a:fc:e6:d3:0a:a9:be:ec:0d:9c:ee:26:
                    b3:57:1e:7f:94:92:5c:b7:d0:df:c3:28:af:8b:3f:
                    06:b8:0e:29:74:56:04:8b:cd:51:3a:a0:f2:59:e4:
                    cc:15:00:9d:97:e3:d2:64:8f:c7:60:d1:11:f8:d0:
                    75:87:34:8d:ce:09:9d:37:12:c5:9a:c6:01:e4:42:
                    9c:4e:9a:3b:ee:34:84:42:3c:b0:2c:36:3d:19:ba:
                    57:9f:1e:45:35:45:74:fb:89:3d:c2:13:fa:0b:a7:
                    ec:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:04:5C:A1:55:DA:75:AA:1C:F1:C5:71:1F:DE:B4:33:CF:17:3B:7E
            X509v3 Authority Key Identifier:
                keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/XwRcoVXadaoc8cVxH960M88XO34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  145.26.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         48:e6:1e:e3:21:22:98:02:79:0f:bc:ad:5b:cd:d7:db:d5:84:
         6b:77:62:cb:1b:59:18:20:87:46:25:24:1e:d3:cf:3f:95:8a:
         e2:c6:b7:a9:f1:56:75:f5:e5:ab:7d:93:a8:8e:e1:a7:b2:b8:
         43:34:5a:d0:ad:8b:d2:7b:56:25:0f:7b:42:b5:74:d7:47:4f:
         73:60:c4:b9:d9:cf:14:30:72:49:eb:6d:27:aa:c6:0f:f3:a1:
         7e:98:fd:9b:3f:e7:4e:b8:8a:db:26:c0:dc:a4:e5:e2:a6:96:
         93:69:f1:93:13:61:34:6f:33:9e:c3:8c:28:12:2b:fa:f7:de:
         4b:4c:ba:98:ff:48:1a:58:a5:e4:85:aa:e1:4f:a2:3d:82:5e:
         ce:3f:dc:07:85:14:7f:c1:ad:2a:84:89:ba:21:ad:37:9c:dc:
         fe:b7:4a:f2:06:ff:d2:c8:c7:09:76:78:e1:4b:9a:ad:fc:68:
         95:4a:2d:69:e1:ca:db:2a:36:a1:f0:78:64:1b:8e:bc:e4:4f:
         92:ed:bf:d6:a2:69:ab:a6:38:5e:93:9a:91:1c:65:05:33:5d:
         f6:2b:9d:64:59:71:56:f3:8a:3b:37:6b:28:24:1c:71:aa:0c:
         52:49:7c:99:b8:3c:5e:e6:5d:11:f6:2e:21:a0:94:89:c6:b6:
         74:36:ca:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:17:15 2026 by rpki-client