This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/_qBNAwK4OK7Gc8Mq1Ci80h09-HY.roa
File:                     _qBNAwK4OK7Gc8Mq1Ci80h09-HY.roa (raw, json)
Hash identifier:          t56c+2Ht/FaNSMyC1mKhu0HZAUXfDcSUi9DNTN8F9N8=
Subject key identifier:   FE:A0:4D:03:02:B8:38:AE:C6:73:C3:2A:D4:28:BC:D2:1D:3D:F8:76
Certificate issuer:       /CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16
Certificate serial:       019BD8D51517F48B2D82DC5782476CB73282
Authority key identifier: 0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/_qBNAwK4OK7Gc8Mq1Ci80h09-HY.roa
Signing time:             Tue 20 Jan 2026 00:36:41 +0000
ROA not before:           Tue 20 Jan 2026 00:36:41 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     44605
IP address blocks:        93.113.132.0/23 maxlen: 23
                          2a03:9c20:2000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:d8:d5:15:17:f4:8b:2d:82:dc:57:82:47:6c:b7:32:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16
        Validity
            Not Before: Jan 20 00:36:41 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=fea04d0302b838aec673c32ad428bcd21d3df876
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e9:11:5c:fd:a8:54:24:e7:e6:21:11:c1:0e:
                    e1:2c:bb:bd:52:d8:08:5f:d0:2e:5c:b5:56:d7:30:
                    36:8e:72:55:e3:df:15:55:c2:0a:ee:cf:64:49:a2:
                    42:2f:80:15:11:c7:73:21:d3:bb:f6:9e:0f:ad:4a:
                    4b:c2:f8:d4:1d:fe:9a:a3:74:c2:3a:02:a2:a3:48:
                    5c:d0:98:ab:15:98:b2:0d:21:99:a7:fa:e2:89:d8:
                    47:97:d6:9c:c1:28:12:0d:25:a0:3c:64:1f:7c:d7:
                    0e:11:c7:32:78:d8:9c:99:ff:e6:bf:ca:da:68:8a:
                    6e:bb:2c:67:26:1e:04:5f:34:41:da:89:38:6e:ee:
                    29:8e:22:59:9e:92:05:e5:2b:d5:39:19:33:b1:21:
                    20:d2:0e:1d:65:0e:25:8b:67:58:03:5f:63:27:33:
                    f3:25:5b:a1:b8:6c:37:e4:57:bc:57:7b:2b:cf:54:
                    b4:50:d3:e1:e7:20:fb:ad:83:7a:70:b7:42:57:24:
                    76:a0:b6:f4:a2:71:d4:bc:c1:2a:b8:61:a6:02:e8:
                    ad:6d:25:b3:4b:84:40:aa:8e:74:01:f7:09:19:ac:
                    aa:01:bd:8e:aa:af:da:eb:45:8a:e9:e5:04:f2:0d:
                    a2:90:c2:bf:83:d4:f5:6b:57:70:fd:f2:e2:cc:d3:
                    eb:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:A0:4D:03:02:B8:38:AE:C6:73:C3:2A:D4:28:BC:D2:1D:3D:F8:76
            X509v3 Authority Key Identifier:
                keyid:0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/_qBNAwK4OK7Gc8Mq1Ci80h09-HY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.113.132.0/23
                IPv6:
                  2a03:9c20:2000::/48

    Signature Algorithm: sha256WithRSAEncryption
         79:e4:fe:22:02:23:f0:ab:8a:18:66:f3:40:59:cb:db:f4:5e:
         53:56:0a:3b:a9:1a:c5:7c:a6:a4:63:38:9c:d0:2c:2c:3b:dd:
         1a:f0:ee:8d:ca:9a:60:dc:70:c7:43:e6:24:93:2a:77:4f:94:
         36:ff:b5:34:6e:67:5a:1f:c0:a6:62:03:ea:04:59:7b:b9:c0:
         52:40:a9:f9:8c:5c:0d:16:9c:ab:0a:32:bf:92:5c:64:06:97:
         b7:c6:18:33:08:93:0b:ef:e3:9f:92:17:4a:98:95:d3:1d:2a:
         b1:7d:80:24:65:16:da:5a:df:9d:1d:39:37:7a:b0:0d:d5:3f:
         0b:ef:58:90:b1:c9:47:ee:7b:b9:3c:02:f5:8f:b2:62:ae:ce:
         6f:81:d7:d8:c0:78:e4:4e:5f:60:ed:09:95:bf:1b:36:e5:1b:
         68:8a:b2:df:83:6e:d3:f8:0e:23:1a:e9:df:c7:8d:d4:c8:68:
         fc:7e:7f:4f:e1:f8:8b:b0:19:ce:ff:40:d5:26:7a:a1:64:c2:
         b8:49:07:6f:99:89:30:a4:0b:8e:a8:98:5e:2f:16:44:ee:ba:
         7a:73:f1:73:78:1b:40:ab:fe:d0:a4:fd:2e:f9:cf:be:2f:4c:
         8a:5a:67:9a:d1:35:59:0c:92:a1:f5:d4:86:f7:5e:23:2f:5c:
         98:3a:e0:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:56:26 2026 by rpki-client