This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/Ttakap_qWNJYhWRheq1fSB6axiY.roa
File:                     Ttakap_qWNJYhWRheq1fSB6axiY.roa (raw, json)
Hash identifier:          a+Eps1fnHBfxw88pH+iz0yM1uGrJ2UReBIvCp2AXWj8=
Subject key identifier:   4E:D6:A4:6A:9F:EA:58:D2:58:85:64:61:7A:AD:5F:48:1E:9A:C6:26
Certificate issuer:       /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial:       019B7CEE03FB8B69CFCB5D88A810FA7C820F
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/Ttakap_qWNJYhWRheq1fSB6axiY.roa
Signing time:             Fri 02 Jan 2026 04:18:51 +0000
ROA not before:           Fri 02 Jan 2026 04:18:51 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     198037
IP address blocks:        80.71.227.0/24 maxlen: 24
                          80.71.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 01:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:ee:03:fb:8b:69:cf:cb:5d:88:a8:10:fa:7c:82:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
        Validity
            Not Before: Jan  2 04:18:51 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4ed6a46a9fea58d2588564617aad5f481e9ac626
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:24:f8:28:56:d1:4e:00:69:c6:7d:8c:b2:6e:
                    c2:9b:08:ea:58:c9:bf:7d:1d:9b:28:a7:f6:8a:08:
                    a5:6e:cf:26:82:fc:45:33:0d:e0:11:26:db:98:cd:
                    e7:41:8f:8e:f1:b9:ab:58:69:7e:38:b7:01:1a:97:
                    41:f6:df:34:2e:2e:f7:5b:7d:9d:28:98:e6:9a:0f:
                    c0:d9:df:2a:b9:4f:c3:67:38:64:49:ec:90:f1:bc:
                    df:a1:98:09:22:06:49:70:f3:4b:04:2c:2b:56:87:
                    bc:c3:8c:78:e9:bc:e9:50:a1:7b:48:a5:51:eb:e4:
                    a2:9c:e6:c5:21:47:c7:b8:06:d4:47:3d:ae:b6:44:
                    64:00:3b:f5:c2:46:d1:d5:13:b4:30:11:a4:42:c3:
                    12:e3:4b:c4:86:6a:d7:79:35:d5:a8:ce:da:65:99:
                    06:dd:25:a7:18:45:58:c0:bc:8c:1a:1b:58:bd:d2:
                    ab:c5:af:a7:4e:5f:90:92:a5:a7:73:ae:d6:5d:7a:
                    fc:21:cf:2b:63:c3:15:b0:ec:27:09:5d:d7:75:37:
                    e5:6e:1d:db:c7:f3:e5:2f:f1:29:05:c3:6e:bd:21:
                    2f:2a:3e:f9:11:2d:44:91:a7:8e:a8:66:9b:24:d9:
                    73:a9:e1:4e:46:c7:aa:50:75:18:fb:73:00:cf:37:
                    66:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:D6:A4:6A:9F:EA:58:D2:58:85:64:61:7A:AD:5F:48:1E:9A:C6:26
            X509v3 Authority Key Identifier:
                keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/Ttakap_qWNJYhWRheq1fSB6axiY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.71.227.0/24
                  80.71.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:47:34:43:9d:1e:df:39:39:ab:c0:f7:f2:db:c4:e8:e1:2a:
         0a:2b:2b:78:0c:ef:1c:af:e5:35:b2:f3:82:9f:7e:61:66:6f:
         bc:d5:65:54:d2:5f:de:cb:e8:37:8e:28:99:a1:a7:88:14:e7:
         19:f0:ac:b8:2c:b5:4b:45:a4:9c:11:3b:dd:ef:9b:9a:cd:ed:
         f9:46:bc:90:9e:52:2f:c2:6c:fe:58:62:f7:51:fe:7f:9f:4a:
         a6:f0:bd:13:f1:c7:9a:9a:e6:8a:d3:7a:63:51:3c:53:9f:19:
         14:5b:bc:28:d4:12:d2:2c:f1:6b:d0:bb:f1:17:27:eb:69:47:
         0a:c8:8d:8e:80:60:57:f7:d8:06:89:5b:53:b3:34:17:ba:21:
         e5:77:cc:5b:9a:c1:72:52:36:d9:c6:b5:b1:b4:7e:a3:c0:ed:
         2f:5a:21:2d:12:1b:d7:83:01:87:e5:0a:4b:d6:82:ff:92:a7:
         65:24:d2:09:cf:df:c5:98:d8:98:ad:e0:e8:36:e7:6d:60:62:
         19:ae:6e:b3:27:2b:36:d7:cf:23:b3:97:ec:bb:12:97:3b:2d:
         67:91:92:34:12:40:71:8f:13:11:5c:49:c0:8f:58:31:35:d8:
         21:8e:ed:cf:7f:c1:f5:fd:f2:71:a2:38:b2:7d:32:4d:ca:ea:
         c7:38:b7:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:34:41 2026 by rpki-client