This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/cPRFnymx0CIKx6ZtB7MkyWCDm0U.roa
File:                     cPRFnymx0CIKx6ZtB7MkyWCDm0U.roa (raw, json)
Hash identifier:          AIiSdddDnEI2m5R7XY5zbokXJZOOTj517t6eCwoUwtY=
Subject key identifier:   70:F4:45:9F:29:B1:D0:22:0A:C7:A6:6D:07:B3:24:C9:60:83:9B:45
Certificate issuer:       /CN=c0ddd2d4f030fa3638c04be636ef93d289271652
Certificate serial:       019B7AC88522BC25946CA1CC23E1CFCA9DD0
Authority key identifier: C0:DD:D2:D4:F0:30:FA:36:38:C0:4B:E6:36:EF:93:D2:89:27:16:52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wN3S1PAw-jY4wEvmNu-T0oknFlI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/cPRFnymx0CIKx6ZtB7MkyWCDm0U.roa
Signing time:             Thu 01 Jan 2026 18:18:40 +0000
ROA not before:           Thu 01 Jan 2026 18:18:40 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     30781
IP address blocks:        193.93.40.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wN3S1PAw-jY4wEvmNu-T0oknFlI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:c8:85:22:bc:25:94:6c:a1:cc:23:e1:cf:ca:9d:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0ddd2d4f030fa3638c04be636ef93d289271652
        Validity
            Not Before: Jan  1 18:18:40 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=70f4459f29b1d0220ac7a66d07b324c960839b45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:2c:c6:30:2e:b7:c8:77:0e:19:7d:1f:67:16:
                    bd:6c:86:97:b0:9c:52:d3:e4:14:73:ad:ed:08:4d:
                    d7:d5:43:ef:61:56:08:b4:05:f2:9c:c9:5c:d9:61:
                    89:48:a8:9e:72:19:1a:b9:56:22:53:cc:3f:41:09:
                    b4:85:fb:ee:61:04:bb:41:f1:74:e5:f7:89:ff:05:
                    38:cb:51:9b:3f:68:df:33:0e:df:30:b9:6b:ce:e8:
                    95:23:1f:76:31:b9:2c:69:b0:19:14:0b:7d:de:e7:
                    0e:fe:dc:0a:b1:bd:d4:33:70:56:e3:dc:8d:29:30:
                    44:45:7c:41:11:d4:3d:97:4b:6c:8b:11:78:41:f4:
                    03:b5:d1:5f:ac:d7:fe:48:1f:40:63:9f:54:5b:61:
                    a0:b0:2f:01:3c:a1:5f:ee:88:74:33:a8:05:b0:74:
                    32:86:55:8c:d7:dd:5b:b6:73:ae:67:50:19:ac:0e:
                    1a:a4:3a:a6:a8:3d:a4:fb:54:c7:88:7d:d5:22:a5:
                    6a:ed:52:a3:51:f0:b5:6a:46:44:06:a8:5a:27:8f:
                    20:a8:eb:f3:05:34:ef:6d:71:d6:84:c6:a6:4d:92:
                    83:9a:02:7c:9d:20:4d:02:ca:ff:a3:a2:7e:d5:5f:
                    34:8f:c4:f0:d2:36:b4:4a:f8:3f:ae:59:f8:8d:c2:
                    41:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:F4:45:9F:29:B1:D0:22:0A:C7:A6:6D:07:B3:24:C9:60:83:9B:45
            X509v3 Authority Key Identifier:
                keyid:C0:DD:D2:D4:F0:30:FA:36:38:C0:4B:E6:36:EF:93:D2:89:27:16:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wN3S1PAw-jY4wEvmNu-T0oknFlI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/cPRFnymx0CIKx6ZtB7MkyWCDm0U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.93.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a4:15:93:4d:61:b0:4e:9c:c5:c4:56:a6:71:fc:9c:81:96:18:
         73:4b:e1:e4:3c:e9:55:0c:79:af:09:19:78:fd:70:27:af:9c:
         6c:54:63:d5:c9:cd:0b:ce:ab:73:85:b4:81:6f:8d:d6:45:61:
         58:1e:c5:b4:5c:fe:9a:26:3f:29:2e:c1:4c:da:6d:d9:8a:82:
         db:10:80:d2:5a:ca:29:7d:c7:a1:40:63:42:fe:5a:d0:03:98:
         b2:00:dc:03:6d:98:72:7d:e7:d2:70:b7:fc:a7:25:f5:8e:4f:
         aa:7d:34:0c:45:06:e3:ad:eb:a7:86:a8:5d:b5:0f:d5:9d:be:
         98:35:1d:90:fd:29:7c:68:21:f9:79:9f:37:f3:3b:a0:b5:63:
         bc:cb:af:c6:a0:e7:89:2b:a4:8a:c5:fc:5d:db:82:e8:12:be:
         91:f2:01:66:99:7c:c1:8d:ed:93:92:80:06:8a:11:2b:8d:1a:
         98:9a:87:3b:04:1c:66:24:9a:a8:97:c4:81:82:a4:b3:d8:c6:
         28:70:f7:95:39:74:8d:2f:f7:21:ad:eb:5a:68:f4:38:1e:69:
         bc:41:24:5c:c0:a5:71:31:11:4f:99:81:9e:cc:ab:5c:1d:cd:
         12:1f:d6:af:56:7e:c3:6f:d4:c6:4a:0a:3b:bc:4d:3a:1b:6d:
         1c:44:4d:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:35:56 2026 by rpki-client