This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/i5wzAWhzD6thOzcjAU711zxCavE.roa
File:                     i5wzAWhzD6thOzcjAU711zxCavE.roa (raw, json)
Hash identifier:          P2AdWkb+9Icdy+0Iaf1HCIO0qMt8S3L75/lIYdAPN0w=
Subject key identifier:   8B:9C:33:01:68:73:0F:AB:61:3B:37:23:01:4E:F5:D7:3C:42:6A:F1
Certificate issuer:       /CN=d6ce49255f406a725593c62e1c408779586d56ef
Certificate serial:       019B78A30607CC23B96FFE05D0513463F9A3
Authority key identifier: D6:CE:49:25:5F:40:6A:72:55:93:C6:2E:1C:40:87:79:58:6D:56:EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1s5JJV9AanJVk8YuHECHeVhtVu8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/i5wzAWhzD6thOzcjAU711zxCavE.roa
Signing time:             Thu 01 Jan 2026 08:18:28 +0000
ROA not before:           Thu 01 Jan 2026 08:18:28 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     50988
IP address blocks:        193.200.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/1s5JJV9AanJVk8YuHECHeVhtVu8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/1s5JJV9AanJVk8YuHECHeVhtVu8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1s5JJV9AanJVk8YuHECHeVhtVu8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a3:06:07:cc:23:b9:6f:fe:05:d0:51:34:63:f9:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6ce49255f406a725593c62e1c408779586d56ef
        Validity
            Not Before: Jan  1 08:18:28 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8b9c330168730fab613b3723014ef5d73c426af1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:5e:07:16:4e:96:0c:71:34:53:04:26:63:e2:
                    86:f3:98:ce:5c:88:4c:4d:25:e9:a3:03:15:01:4b:
                    29:78:c3:8f:d5:c7:e3:b8:c2:2e:03:8f:00:71:9b:
                    03:58:80:8c:e0:f4:4a:82:f3:ea:3b:45:b7:cb:cd:
                    ed:e4:b7:6d:b5:f1:84:42:6e:98:e8:90:8a:19:73:
                    88:32:0b:d2:b0:0e:86:a8:38:d8:5c:5c:54:41:eb:
                    5d:28:6b:d8:b5:23:bd:09:a3:75:4d:8d:ff:ef:bd:
                    0b:d1:c2:21:47:63:d7:3e:23:61:93:64:c6:e1:7f:
                    bb:14:c4:f3:ca:bd:ef:9f:06:9f:7b:e8:e9:c6:1f:
                    6f:b9:cf:bf:30:62:8f:19:94:61:46:86:55:46:2a:
                    a3:0b:55:ad:1a:4f:bb:ff:af:d0:e9:f8:82:44:9e:
                    f2:76:00:0a:51:cd:e4:d5:6b:f1:59:46:8f:b0:79:
                    eb:ae:1b:19:fe:f8:b1:d0:ae:5b:31:ce:27:ad:e6:
                    b6:7b:3e:cd:39:a9:5a:a0:06:64:60:2a:00:cb:e9:
                    12:97:37:4c:ca:9a:77:58:b1:d9:2c:ac:6a:3d:2e:
                    c4:1b:9f:db:9f:a2:93:5f:4f:3b:d1:c7:b2:32:0f:
                    30:69:df:cd:84:2b:4e:92:03:b7:f9:33:36:bd:82:
                    99:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:9C:33:01:68:73:0F:AB:61:3B:37:23:01:4E:F5:D7:3C:42:6A:F1
            X509v3 Authority Key Identifier:
                keyid:D6:CE:49:25:5F:40:6A:72:55:93:C6:2E:1C:40:87:79:58:6D:56:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1s5JJV9AanJVk8YuHECHeVhtVu8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/i5wzAWhzD6thOzcjAU711zxCavE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/1s5JJV9AanJVk8YuHECHeVhtVu8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.200.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:c0:ae:f7:ca:ab:f2:13:4e:29:af:85:2d:f8:2d:07:0e:6f:
         89:7f:7f:c6:c7:d8:96:ab:47:37:9b:d3:7a:c1:4f:7f:ca:52:
         86:2e:7c:66:f3:f3:ca:ea:30:4c:6f:35:41:0c:a8:72:5d:fe:
         05:44:9f:5e:76:5e:58:04:d3:86:01:2d:2e:4c:33:a6:92:20:
         b7:ef:77:80:0d:c9:47:5f:ea:4b:50:50:75:ce:7b:47:02:b5:
         51:be:6f:be:ee:a2:77:2f:9a:37:bc:9a:cc:fd:c0:e7:a8:55:
         ab:90:16:01:64:56:30:a3:16:87:a2:5a:c0:b8:2d:60:a3:3a:
         12:23:ed:f8:66:21:ad:b2:c0:d9:27:98:50:2d:d6:04:9e:1b:
         17:4d:a8:ac:17:8f:f8:34:bf:97:a2:bf:f7:ed:14:38:6d:38:
         73:96:7d:14:b4:18:76:52:22:eb:c2:29:d1:92:8b:ac:1c:52:
         59:98:04:60:a7:3f:b8:c6:39:89:6f:5e:5a:e7:e1:e1:c5:2f:
         ea:98:7d:15:c7:14:92:76:d9:a6:0b:67:08:24:08:ab:8b:8e:
         64:56:73:6b:4d:fb:58:7f:35:0f:65:3e:00:93:cc:05:a0:fa:
         13:14:2e:fa:c5:ea:66:05:98:4e:f0:3a:cf:4f:65:19:40:07:
         fe:bc:16:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:03:12 2026 by rpki-client